Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.mft
File:                     nadDNq7s_nxGljFjp0diKc6Kgw0.mft (raw, json)
Hash identifier:          S6/q3muBWDu8rnxnWVk9IFnYBCb7oSTvmRqM3A3hRt4=
Subject key identifier:   20:F7:04:9A:4D:EC:0C:71:4C:6F:2A:B0:A1:7B:7D:69:5C:DF:E7:E0
Authority key identifier: 9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D
Certificate issuer:       /CN=9da74336aeecfe7c46963163a7476229ce8a830d
Certificate serial:       01843CC90AB59785887CFDE0C2839C7EC8F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.mft
Manifest number:          02B2
Signing time:             Thu 03 Nov 2022 09:18:38 +0000
Manifest this update:     Thu 03 Nov 2022 09:18:38 +0000
Manifest next update:     Fri 04 Nov 2022 09:18:38 +0000
Files and hashes:         1: DydUuP22lhsj5IJOZI91l-mKows.roa (hash: 84vtpeJOzuUxcasG7grPw8/tW3yZ1AEP1CkrVzM+Hjs=)
                          2: nadDNq7s_nxGljFjp0diKc6Kgw0.crl (hash: IsIHqIiF5W4NkfHBW0jSfXccS6ERO/70W4sJUiPfB30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3c:c9:0a:b5:97:85:88:7c:fd:e0:c2:83:9c:7e:c8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da74336aeecfe7c46963163a7476229ce8a830d
        Validity
            Not Before: Nov  3 09:18:38 2022 GMT
            Not After : Nov  4 09:18:38 2022 GMT
        Subject: CN=20f7049a4dec0c714c6f2ab0a17b7d695cdfe7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:38:b0:ae:ca:38:37:79:fe:11:0a:24:34:
                    7d:d0:eb:34:bb:2a:f4:32:31:93:6b:2e:cb:15:b8:
                    c8:1e:6b:b2:07:cc:30:72:ac:0a:bf:9d:6c:20:50:
                    fc:fb:53:0f:2b:8d:63:83:27:7b:eb:1e:46:12:3f:
                    f0:c7:ed:4e:e2:dc:b8:dc:2a:44:33:b4:a3:c5:93:
                    88:50:ba:05:4f:bd:5e:d5:f4:64:eb:2f:a4:44:60:
                    ff:df:a9:ad:17:97:14:13:25:cc:11:a9:11:00:65:
                    ee:14:25:7d:4e:1c:b9:ef:9b:7b:bd:0f:36:78:93:
                    eb:38:8f:82:97:4e:38:3f:57:eb:6e:ee:62:1f:93:
                    97:94:ac:46:63:7a:7c:bb:75:51:d1:aa:ad:81:64:
                    8e:ee:fc:64:a2:a5:34:c1:af:01:6e:48:a6:ed:25:
                    1a:6e:29:8a:73:5b:f8:8a:d7:b5:71:e5:15:82:d0:
                    3c:96:b4:bd:47:2a:1e:94:f9:95:4a:69:3e:c9:77:
                    dc:4c:8a:80:01:45:22:3d:69:3a:40:ba:f1:52:68:
                    88:8b:1d:c6:78:6c:f6:b6:6d:48:6c:bc:0a:7b:f4:
                    dd:fc:b9:93:0d:cf:d4:93:12:3d:2b:a8:66:60:1c:
                    8d:8d:9c:15:6f:77:4e:43:5e:86:85:6d:1f:03:02:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F7:04:9A:4D:EC:0C:71:4C:6F:2A:B0:A1:7B:7D:69:5C:DF:E7:E0
            X509v3 Authority Key Identifier:
                keyid:9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:df:1d:e8:31:3c:6c:02:53:7f:fa:dd:2a:29:17:e4:ea:
         46:37:75:a0:67:91:79:90:21:fc:3d:c1:15:65:b3:6b:f9:23:
         7e:e5:91:fc:4f:d6:35:db:da:ab:e2:a4:df:f1:4c:96:78:87:
         8c:6e:21:60:67:b6:88:fb:ae:85:bb:9f:d4:07:cd:79:eb:0b:
         f7:39:0f:da:ca:80:b7:fa:c6:ce:8d:1d:84:86:d7:2b:5f:32:
         c5:bf:87:e1:e2:8f:b2:4e:39:ff:21:69:93:9f:55:bc:7d:60:
         08:f2:fe:e3:ad:3f:a9:62:af:c9:02:52:16:94:38:eb:1d:a2:
         41:4d:68:70:03:6f:36:5f:71:f5:4d:52:42:7f:cc:1b:c0:fc:
         04:3b:f9:00:5f:5a:a8:b2:21:af:ff:30:9f:ae:3e:c5:01:b0:
         9b:dd:74:67:01:41:20:3a:69:0e:0b:76:b9:3f:4b:fb:8f:ba:
         b2:ec:e4:72:22:a9:1f:aa:ff:e2:b9:45:20:b7:15:8a:b6:35:
         8d:4f:8b:8f:44:68:ed:e2:1e:2e:5a:b9:ba:12:cd:2b:20:2e:
         f7:98:e6:65:ea:78:7e:27:11:84:c5:ee:33:29:54:4e:8a:50:
         f6:56:34:58:c3:54:15:37:fd:ab:d8:70:9b:c2:1d:52:5b:c0:
         fd:02:d3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----