Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/gp8hwGHztPkZCUUKDpaPfKpjSSU.mft
File:                     gp8hwGHztPkZCUUKDpaPfKpjSSU.mft (raw, json)
Hash identifier:          dFsjFvIt/49+EuTsF5Wl9TGeC3a+upC4tif/+1MpiSk=
Subject key identifier:   83:7D:C4:9E:3B:34:C9:FE:26:C8:4E:13:2D:13:1F:36:A5:DD:78:25
Authority key identifier: 82:9F:21:C0:61:F3:B4:F9:19:09:45:0A:0E:96:8F:7C:AA:63:49:25
Certificate issuer:       /CN=829f21c061f3b4f91909450a0e968f7caa634925
Certificate serial:       018528C9AE130B75588A43DD4EFBD5AB82B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gp8hwGHztPkZCUUKDpaPfKpjSSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/gp8hwGHztPkZCUUKDpaPfKpjSSU.mft
Manifest number:          0BD2
Signing time:             Mon 19 Dec 2022 05:09:43 +0000
Manifest this update:     Mon 19 Dec 2022 05:09:43 +0000
Manifest next update:     Tue 20 Dec 2022 05:09:43 +0000
Files and hashes:         1: XOlN48iJuddSflqeD4JHN7lTGUQ.roa (hash: PBH7QxL2e4BB0sznZDQx7cvmk9TJ6vHMFHj/rEHkpNA=)
                          2: gp8hwGHztPkZCUUKDpaPfKpjSSU.crl (hash: CI2FVggjgyXbNO5LhDmKxEdJtTHkwp7DPhE1BFbfg54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:28:c9:ae:13:0b:75:58:8a:43:dd:4e:fb:d5:ab:82:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829f21c061f3b4f91909450a0e968f7caa634925
        Validity
            Not Before: Dec 19 05:09:43 2022 GMT
            Not After : Dec 20 05:09:43 2022 GMT
        Subject: CN=837dc49e3b34c9fe26c84e132d131f36a5dd7825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:3a:07:d1:e0:7a:99:dd:d1:97:2e:57:c9:
                    8e:76:ae:0f:0a:d8:a3:2b:10:9b:5e:61:9b:19:ac:
                    56:fd:e9:82:83:85:97:84:20:8c:4c:ac:09:34:a3:
                    d8:d8:c6:1b:ae:0d:9e:c7:04:74:47:99:d6:5d:c9:
                    e4:2c:bf:06:13:1b:48:5a:16:9d:4a:1c:c2:43:1f:
                    ed:ca:de:4d:25:6e:60:c2:9e:66:32:01:82:b9:36:
                    e4:7d:fa:24:0c:50:bc:d6:e3:78:8f:29:46:b4:cb:
                    aa:b2:1c:86:c9:85:80:e5:c5:a8:49:c7:31:89:de:
                    2c:d6:ee:22:21:a4:cc:1f:38:02:75:95:51:92:c4:
                    b7:d8:61:16:3d:4d:c5:ed:99:1e:d2:be:d5:fd:76:
                    f0:f6:aa:f4:68:67:95:f3:8c:75:78:40:dd:6e:c1:
                    8c:c0:04:a3:8d:05:5d:a8:5d:2e:dc:10:4d:7a:7f:
                    c0:db:3f:90:a0:33:3a:19:a5:1a:39:ca:0e:c1:24:
                    ab:2f:40:43:51:19:b3:cf:af:40:13:17:74:d5:f9:
                    33:ba:4a:3b:01:b9:de:39:d7:c0:47:76:2c:d5:13:
                    11:58:05:00:0a:82:a8:8b:ec:a5:b2:fb:70:d5:57:
                    07:e4:6e:ad:fb:e7:f9:f8:dc:17:fb:ee:78:ac:b4:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7D:C4:9E:3B:34:C9:FE:26:C8:4E:13:2D:13:1F:36:A5:DD:78:25
            X509v3 Authority Key Identifier:
                keyid:82:9F:21:C0:61:F3:B4:F9:19:09:45:0A:0E:96:8F:7C:AA:63:49:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp8hwGHztPkZCUUKDpaPfKpjSSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/gp8hwGHztPkZCUUKDpaPfKpjSSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a95b81-31a7-4211-8d62-4aed8a823777/1/gp8hwGHztPkZCUUKDpaPfKpjSSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:c4:fa:df:8a:39:b8:6e:d5:11:d3:52:21:44:5a:4a:9c:
         2c:06:81:03:51:dd:1f:29:b7:71:92:07:0c:ff:fa:29:9e:21:
         8a:d4:30:73:aa:89:6f:f0:e0:78:97:79:e6:71:94:b3:e2:77:
         15:04:6e:16:d5:cb:fe:9b:92:fb:85:f0:45:39:4f:34:75:83:
         18:77:69:81:e0:8e:cf:f6:68:7d:be:88:d6:0a:9f:39:aa:7a:
         3c:10:a9:08:7e:2f:58:9d:b3:07:7b:97:a5:82:69:a1:99:c1:
         7e:be:9d:a5:f0:e1:a6:76:0c:72:0f:e5:45:5a:fb:97:4c:f5:
         b8:75:1c:22:25:4e:02:0d:d0:7c:92:22:54:0d:b3:09:cd:a5:
         02:73:40:c6:57:23:07:c7:f3:d4:6b:09:6b:ad:8f:1f:97:99:
         2c:2a:40:f8:9c:1d:2c:cc:40:37:56:39:63:9b:5c:a8:21:32:
         d8:e2:84:6a:bc:ab:bd:2d:f4:18:94:6a:bf:df:bc:b1:3c:6f:
         58:c2:67:db:ed:26:18:05:32:99:06:3c:68:31:98:4e:5d:3b:
         42:79:6e:32:67:20:b1:19:c6:c6:82:d3:cb:0b:85:aa:3d:96:
         64:2a:77:6d:6c:64:b6:0c:43:42:ff:7b:cb:6f:31:38:81:b9:
         18:be:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----