Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/KpItDGyZvj3bTSUA_o-13fFjyaA.mft
File:                     KpItDGyZvj3bTSUA_o-13fFjyaA.mft (raw, json)
Hash identifier:          PEP6GminKHAcxmyv2N4tXRWyyj4hvfa5W+zOmjd+lNE=
Subject key identifier:   53:66:BC:9A:88:06:9E:F9:24:6A:C9:63:B5:79:F7:93:99:22:7D:AC
Authority key identifier: 2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0
Certificate issuer:       /CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
Certificate serial:       0182E80353B7D80EF64106AF1CB52A12607D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/KpItDGyZvj3bTSUA_o-13fFjyaA.mft
Manifest number:          0A8F
Signing time:             Mon 29 Aug 2022 05:11:48 +0000
Manifest this update:     Mon 29 Aug 2022 05:11:48 +0000
Manifest next update:     Tue 30 Aug 2022 05:11:48 +0000
Files and hashes:         1: 3N1GGuOk3vCqtHS93K_oy8RBawM.roa (hash: 7j2dnHH+5CN19s6jUNFu2VocEclkizgBgd+kkDOZuoI=)
                          2: 3Y5XoMIMLBKPFFsmxZ8dwiarFcE.roa (hash: Yr1sJjaRrEMiCHA6O3SLxiOtldMkg8u8JcHFlkkH+vw=)
                          3: KpItDGyZvj3bTSUA_o-13fFjyaA.crl (hash: ob8IszkBcVVJfpdy4nMycCBksOkHVrTtWbvFg+sq9LY=)
                          4: Vdsa_h4Q9Jp9VNjohi44YJndRlY.roa (hash: U430vOV343bz2JdgwweVNqz/U4fZfmA2fd1OacJtJ0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e8:03:53:b7:d8:0e:f6:41:06:af:1c:b5:2a:12:60:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
        Validity
            Not Before: Aug 29 05:11:48 2022 GMT
            Not After : Aug 30 05:11:48 2022 GMT
        Subject: CN=5366bc9a88069ef9246ac963b579f79399227dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:70:8c:7f:c9:e5:29:6d:4d:ed:a8:d4:48:
                    18:03:f7:47:b8:10:2b:4b:57:30:92:0a:37:10:34:
                    f7:19:6d:df:7d:ec:f4:bb:d9:4d:15:6e:f0:97:a0:
                    1a:eb:3d:99:c8:09:40:08:bc:0b:13:0a:72:11:9e:
                    67:ae:dc:de:3a:6e:28:32:2c:cc:ef:df:2d:dc:c8:
                    9b:24:03:17:e8:b1:a4:0a:f1:fc:9a:e5:de:25:ef:
                    0f:e1:30:da:dd:de:34:47:25:e7:8a:ed:f7:a2:c3:
                    5d:01:42:36:80:88:f9:64:09:44:d9:3a:d2:98:bb:
                    72:7c:32:9b:3c:6e:0c:f9:97:fb:22:95:78:38:84:
                    47:ab:b6:70:2c:44:d2:15:a7:17:78:56:78:8e:05:
                    d8:ee:6c:08:04:9b:a0:69:ed:bb:48:18:88:51:f2:
                    28:2d:0e:4c:1f:91:54:37:5b:1b:0b:5f:cb:41:b9:
                    ad:fe:d9:86:58:61:0f:52:55:1b:45:d8:b4:6a:83:
                    32:97:c5:20:6e:db:10:6a:cf:60:e1:cb:bf:22:54:
                    fd:68:7a:2e:09:e6:54:8d:30:57:c6:35:8a:0a:fb:
                    c0:58:26:e2:ad:6c:91:92:3c:f0:03:60:ce:46:17:
                    2f:c8:cb:80:19:1a:e0:7f:47:86:3a:81:67:f1:1f:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:BC:9A:88:06:9E:F9:24:6A:C9:63:B5:79:F7:93:99:22:7D:AC
            X509v3 Authority Key Identifier:
                keyid:2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/KpItDGyZvj3bTSUA_o-13fFjyaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/KpItDGyZvj3bTSUA_o-13fFjyaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:af:bf:9a:ec:0b:66:20:ab:3d:96:ea:43:2c:d6:e1:be:0f:
         2a:29:75:3a:85:4b:f4:a0:93:da:ef:1c:36:c5:6a:99:04:59:
         58:2d:f4:9c:e0:31:98:08:9d:a5:00:de:0d:fb:ee:00:56:00:
         b3:81:1c:de:da:32:16:51:cb:6f:a7:e6:64:32:32:43:06:6b:
         25:f5:b3:5f:c0:e5:96:12:bb:98:e0:c0:04:e4:d7:1d:ae:c0:
         80:76:63:5d:cd:04:0f:03:42:ef:d7:05:15:8f:c0:ac:be:52:
         1b:0a:a3:e6:34:a4:19:5a:d1:85:43:2b:e7:e0:85:e0:45:eb:
         a5:56:e9:3a:80:a4:d0:70:0a:f9:8a:cc:5f:c2:7c:78:0b:50:
         f4:76:cf:65:1a:ef:30:97:4c:9b:3a:3a:67:81:a8:70:24:d2:
         1c:f4:09:ed:b3:16:c8:03:57:a3:b0:63:d0:57:96:41:9a:e1:
         88:08:82:b6:b2:9e:b8:38:83:dc:65:eb:4b:57:e8:71:90:01:
         dd:80:fe:f7:32:5c:f4:22:82:52:84:3f:03:51:2c:5f:9c:c4:
         a8:4d:20:45:1e:83:01:83:66:d0:46:cb:54:84:11:61:d5:6e:
         c4:53:c8:42:c0:81:bb:6c:92:7f:cf:c7:e1:1f:d6:fd:7e:c6:
         e5:37:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----