Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.mft
File:                     bc9iGhJ92gjYmhJCZ0k0qe0jwe4.mft (raw, json)
Hash identifier:          tjLn0oNVKIfpNqull23WrXWcKwr/hkn2J3P3/YbA9ek=
Subject key identifier:   F1:B3:22:76:63:5A:2D:BE:E4:0F:F5:8F:4C:6B:FD:03:14:CE:77:EA
Authority key identifier: 6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE
Certificate issuer:       /CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
Certificate serial:       018418BFC738350B47C388C99F1734871194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.mft
Manifest number:          D2
Signing time:             Thu 27 Oct 2022 09:22:12 +0000
Manifest this update:     Thu 27 Oct 2022 09:22:12 +0000
Manifest next update:     Fri 28 Oct 2022 09:22:12 +0000
Files and hashes:         1: 95sBxXtEIDQPrEsF-SV3Zw3eoEs.roa (hash: JC5TwbRn/sLEcpajtDF8GQ1mPVVi/3BsxHJLeMcSTwM=)
                          2: bc9iGhJ92gjYmhJCZ0k0qe0jwe4.crl (hash: XKuZeH/NbyghFccrWHXHiRYTI1SzBlCyRhVg/8W9lXA=)
                          3: f-5fk2TW7t9v0F1g2_OTgjt_cAQ.roa (hash: RlygCnn4bQX66cAD33X/dTJR8c7cWxFdiiagdIjZueQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:18:bf:c7:38:35:0b:47:c3:88:c9:9f:17:34:87:11:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
        Validity
            Not Before: Oct 27 09:22:12 2022 GMT
            Not After : Oct 28 09:22:12 2022 GMT
        Subject: CN=f1b32276635a2dbee40ff58f4c6bfd0314ce77ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:fd:58:24:45:e5:45:03:19:9a:51:72:12:
                    1b:6e:31:1f:6d:35:3c:6a:56:30:d2:a3:52:dd:c3:
                    c5:5c:7d:f0:f9:25:6d:61:3c:6d:f2:ef:28:04:8d:
                    bc:d6:68:b9:70:33:23:90:dd:60:12:36:38:da:e1:
                    91:a2:62:c7:cb:6e:61:34:92:29:95:a8:c3:15:9b:
                    da:e4:10:c2:5b:0f:e7:3d:80:51:11:ff:d2:85:d6:
                    78:3d:0b:e0:dd:3e:d2:bd:7b:30:fd:0c:8f:97:d7:
                    5d:49:a4:99:91:84:ce:a6:8a:b4:02:46:9f:9c:b6:
                    e3:9b:33:fb:99:85:5c:2b:03:1a:26:0d:3d:6f:6e:
                    a0:59:fe:de:88:cb:70:21:01:e5:39:92:63:e5:2c:
                    65:d9:59:c6:53:42:e8:99:31:12:28:88:17:e7:b3:
                    76:8f:81:aa:ed:b1:cd:c8:1f:f9:4a:04:7b:1f:e5:
                    f9:f0:3b:11:b1:1c:7b:50:53:15:e9:2b:f0:c4:5f:
                    00:6c:a0:9f:d9:02:da:db:bf:e8:58:07:f4:fe:10:
                    70:aa:70:c8:e5:88:7c:c3:18:d3:da:ef:40:f4:9d:
                    16:26:2f:d0:3d:bd:fb:71:25:79:5c:4e:54:14:98:
                    45:0d:1e:ba:29:a9:42:c1:22:89:a1:e9:ee:b7:2e:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B3:22:76:63:5A:2D:BE:E4:0F:F5:8F:4C:6B:FD:03:14:CE:77:EA
            X509v3 Authority Key Identifier:
                keyid:6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:56:de:c0:e6:00:77:9f:ef:b9:4f:32:58:7b:40:5e:0d:4b:
         94:f8:bb:3b:c9:14:b9:6b:0d:1d:14:d3:95:7c:61:4a:99:33:
         a2:ec:65:1d:9f:3b:c3:49:1f:dd:80:51:e5:3c:f1:17:52:4c:
         69:33:6c:de:43:ef:9c:63:f3:e5:65:94:fa:ff:b3:3d:8e:41:
         49:a4:4d:1b:61:99:7c:6a:a5:18:ad:38:04:01:94:f5:45:23:
         7d:88:f1:8e:d8:08:d6:76:f9:fc:15:fc:aa:57:7b:5e:98:1f:
         17:f7:ad:39:b6:01:1e:1f:c4:bb:9c:76:20:0f:30:8f:76:89:
         99:43:25:68:c7:5c:45:a2:f2:b5:ec:cd:7b:69:3b:02:4e:6d:
         e6:fc:f8:5c:90:a2:77:d2:b4:62:e1:0a:da:7d:62:3e:fd:fd:
         c0:91:78:2c:fa:99:cb:37:7c:cb:2a:77:ab:73:4b:bb:99:7e:
         da:e3:49:c6:54:69:13:64:31:24:d0:18:70:09:77:cb:b6:00:
         cb:45:c3:73:2a:0e:4c:49:f3:9d:7b:90:b7:05:72:0a:df:87:
         5f:6a:f8:7a:b9:84:da:3b:02:61:5b:0b:08:ec:9a:f6:bd:c6:
         dd:a0:9b:b3:d4:3a:8b:20:02:35:60:dd:80:d7:27:5b:f6:a5:
         80:cf:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----