Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/SmLi821fdMSBwIjMqucFH-vs_sU.mft
File:                     SmLi821fdMSBwIjMqucFH-vs_sU.mft (raw, json)
Hash identifier:          2G6+N+sBkG/3RBk6Z0ZCJYH5aCGr+lXVUDOKqDoyh6o=
Subject key identifier:   0C:6A:84:96:97:7B:3B:44:F1:2D:DB:C7:7D:12:FF:42:C5:4C:20:A3
Authority key identifier: 4A:62:E2:F3:6D:5F:74:C4:81:C0:88:CC:AA:E7:05:1F:EB:EC:FE:C5
Certificate issuer:       /CN=4a62e2f36d5f74c481c088ccaae7051febecfec5
Certificate serial:       0184888FA7BA4BF5CED533FD7EEED930674A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmLi821fdMSBwIjMqucFH-vs_sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/SmLi821fdMSBwIjMqucFH-vs_sU.mft
Manifest number:          0B09
Signing time:             Fri 18 Nov 2022 02:27:06 +0000
Manifest this update:     Fri 18 Nov 2022 02:27:06 +0000
Manifest next update:     Sat 19 Nov 2022 02:27:06 +0000
Files and hashes:         1: 6HTHy9wpGUG7jfgEgD6DqfqUaq8.roa (hash: XqQd2kkM8PK7nP71zCQa2la9e8ekiHZWClD0mloszbk=)
                          2: SmLi821fdMSBwIjMqucFH-vs_sU.crl (hash: /bfwxRc4y4AauvmFt/ygg4TgBhewPfN6Z8VZtzGjVjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:88:8f:a7:ba:4b:f5:ce:d5:33:fd:7e:ee:d9:30:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a62e2f36d5f74c481c088ccaae7051febecfec5
        Validity
            Not Before: Nov 18 02:27:06 2022 GMT
            Not After : Nov 19 02:27:06 2022 GMT
        Subject: CN=0c6a8496977b3b44f12ddbc77d12ff42c54c20a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:69:0a:ce:37:fb:3e:90:36:76:96:bc:4d:
                    cd:22:6d:6d:a0:27:d9:f9:17:04:72:67:85:1b:07:
                    ae:d8:37:68:f4:bd:9d:cb:dc:d0:1a:5b:07:43:70:
                    cd:db:fb:27:93:15:86:6c:db:45:a1:f1:c6:16:18:
                    8d:42:94:d6:6a:c1:25:39:cc:7d:ba:0e:41:83:cc:
                    41:04:84:f5:e5:85:98:df:e8:b4:9a:e9:5c:c4:0c:
                    67:52:d9:17:3a:54:a6:3e:cd:6d:21:13:9d:49:e2:
                    8a:47:4b:ec:71:3e:3a:0c:d1:18:f1:5f:23:da:8d:
                    41:f4:1c:5f:ce:d9:ac:34:76:04:04:4a:f7:5a:cf:
                    77:1a:89:f2:cf:a6:49:31:b7:cb:27:27:c1:e7:d3:
                    55:28:98:62:1f:d3:86:98:a2:7b:e6:e7:c4:8e:64:
                    d5:dd:ad:8f:00:84:8f:0b:f8:d1:06:89:11:6e:66:
                    9f:8c:5b:6b:8b:d2:03:09:e3:11:b6:c7:88:1e:4b:
                    16:31:ba:10:99:6d:28:f9:4f:02:c0:a1:ab:9e:e6:
                    42:52:dc:f8:bd:5f:ed:e4:49:ce:36:2d:3c:d1:14:
                    a4:a2:52:65:63:ee:f8:a2:82:09:08:3b:ce:e5:40:
                    ce:0f:d9:38:8c:88:cb:d0:b6:ce:fb:7a:c4:03:48:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6A:84:96:97:7B:3B:44:F1:2D:DB:C7:7D:12:FF:42:C5:4C:20:A3
            X509v3 Authority Key Identifier:
                keyid:4A:62:E2:F3:6D:5F:74:C4:81:C0:88:CC:AA:E7:05:1F:EB:EC:FE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmLi821fdMSBwIjMqucFH-vs_sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/SmLi821fdMSBwIjMqucFH-vs_sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/89ab0d-f16b-4821-ab68-bb057d8e2881/1/SmLi821fdMSBwIjMqucFH-vs_sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:07:15:1d:cc:c7:c3:cd:97:97:14:1e:5f:e6:6d:7e:10:
         05:1d:85:10:72:b7:40:1e:c0:5c:e0:b0:7d:9b:f6:c9:17:03:
         47:cf:4d:e2:0f:07:47:75:6c:83:a0:ed:66:09:75:92:79:3f:
         d1:cd:df:98:bf:63:e8:2e:2d:a0:57:e1:56:f5:31:6e:7d:2f:
         87:a1:d8:4c:81:03:b0:fd:35:0b:49:63:24:5b:70:0e:3f:46:
         1c:2c:1a:0c:e0:9d:6b:51:1e:63:94:60:86:93:22:73:5f:7e:
         29:03:b6:4c:3a:1d:ba:d5:49:88:c5:05:9c:68:dd:b0:c9:3b:
         09:68:5f:30:fe:2e:19:81:2c:bd:37:1f:dd:8f:9d:25:09:8b:
         db:e2:cc:f2:2c:42:40:94:d6:4b:5f:35:2b:ee:1b:16:c0:0b:
         42:c6:29:e3:e3:67:22:66:cc:a9:5b:98:fe:05:f6:c8:26:ca:
         9b:5c:68:50:1f:2f:e3:f5:e9:9c:f2:0c:97:3e:0e:d5:d7:08:
         ee:55:80:2a:50:cd:4f:50:c1:14:4c:ea:7e:8a:ef:42:9c:65:
         d8:f1:a1:63:96:ca:04:47:fa:fc:3a:73:97:4b:42:01:98:a7:
         07:df:60:a8:19:da:7f:50:8c:7e:90:3b:cf:e0:48:25:08:fb:
         7a:16:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----