Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.mft
File:                     H6XLUDs2njy6hEUi0G01qKz1xzM.mft (raw, json)
Hash identifier:          WCGqwmxex1eS5I+zElDlmn7Kxt+QONPiRmrCH026CdU=
Subject key identifier:   93:7E:11:0E:30:7F:33:59:09:C3:4D:D6:43:7F:D5:DC:8F:EB:9D:8B
Authority key identifier: 1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33
Certificate issuer:       /CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
Certificate serial:       01835F37E06603090D3FB97F9E1F0604A7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.mft
Manifest number:          03E9
Signing time:             Wed 21 Sep 2022 08:44:00 +0000
Manifest this update:     Wed 21 Sep 2022 08:44:00 +0000
Manifest next update:     Thu 22 Sep 2022 08:44:00 +0000
Files and hashes:         1: 3P3vpuMJJELegYelm4mefv2aHpo.roa (hash: av41iQdDgeFPdqum+nf8HuHnyTRLGLapZA2L5XjNntk=)
                          2: GWfaBNVR5yHWNTJhyGpPSVQvQtc.roa (hash: ypjRa56An2EgKpOLYfJRnxJKLzNH2j24RxgEc0AIqt4=)
                          3: H6XLUDs2njy6hEUi0G01qKz1xzM.crl (hash: /9GmrwLoYHjnXWWJFFxKmTw1UxSKrYapcs1l3AhYmNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5f:37:e0:66:03:09:0d:3f:b9:7f:9e:1f:06:04:a7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa5cb503b369e3cba844522d06d35a8acf5c733
        Validity
            Not Before: Sep 21 08:44:00 2022 GMT
            Not After : Sep 22 08:44:00 2022 GMT
        Subject: CN=937e110e307f335909c34dd6437fd5dc8feb9d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:6e:25:07:b8:3d:2e:9e:d3:41:40:72:b4:
                    d8:0d:d8:28:9c:14:e4:5a:f1:63:51:83:52:81:8e:
                    ea:8a:f6:54:bf:57:05:43:73:29:b5:3a:ba:ef:10:
                    c4:2b:44:0b:86:bd:6c:43:b6:66:f6:93:ad:86:3d:
                    c6:98:7f:c6:9c:b9:0b:37:a6:d8:bb:c2:42:ce:98:
                    93:92:6c:d0:50:19:2d:57:e7:b7:53:6c:35:63:fe:
                    7c:08:40:98:cd:7e:23:9e:6c:e2:4c:b6:05:6e:34:
                    8b:ef:9d:f8:ed:99:81:4b:23:8f:e8:bb:9d:cd:6c:
                    96:38:61:65:b5:96:45:21:f2:94:fe:5c:c1:b8:08:
                    20:de:79:1c:11:12:5e:3b:33:31:60:c9:85:40:65:
                    70:b5:8a:3d:b3:6c:5b:06:9d:cf:15:42:89:c3:a3:
                    29:8b:ed:ce:5f:67:d9:ef:2a:16:97:7d:11:fc:7f:
                    2c:cb:75:ce:af:d3:12:95:a6:fb:99:b8:10:0d:b5:
                    7d:8b:a0:1c:0d:6a:a3:d1:5c:16:88:d5:63:0c:fd:
                    8f:e8:e6:aa:3a:20:ba:8b:f7:14:86:04:0f:1a:2a:
                    43:12:96:c3:cd:87:9b:00:ba:84:e3:79:5e:8f:3a:
                    92:d7:b5:ea:82:4f:5d:87:e1:d5:03:7b:2c:0a:09:
                    e2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7E:11:0E:30:7F:33:59:09:C3:4D:D6:43:7F:D5:DC:8F:EB:9D:8B
            X509v3 Authority Key Identifier:
                keyid:1F:A5:CB:50:3B:36:9E:3C:BA:84:45:22:D0:6D:35:A8:AC:F5:C7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6XLUDs2njy6hEUi0G01qKz1xzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e3d5fa-5331-4b23-8aff-bf4dbe7f9acb/1/H6XLUDs2njy6hEUi0G01qKz1xzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:fb:5b:f1:32:6c:f0:ec:2d:20:e5:f4:ef:29:f5:46:a6:
         bb:7b:09:b3:c4:56:49:c0:9a:20:77:0b:d9:f9:8a:e8:3f:1c:
         51:b1:1e:b7:71:41:9c:57:5a:34:c7:fe:2c:52:e8:7c:47:3d:
         88:a2:f9:34:6d:d7:a5:cd:e7:9b:b8:6c:21:5b:8e:d5:b0:60:
         b3:bf:e0:0e:c0:dc:5e:8b:9e:52:6c:8d:b9:51:6d:1d:6f:4c:
         06:4a:1f:90:39:40:2a:8a:cd:c5:d1:86:5b:56:28:4d:94:5a:
         c2:2d:25:fe:b2:89:91:25:25:a8:a3:79:ef:d9:80:7b:82:39:
         4c:d8:a5:a3:31:b9:a3:0a:a8:e1:14:72:f9:1c:7d:10:e9:9f:
         9e:c4:0b:3c:f1:ee:c8:a2:de:ed:ee:45:b6:e0:54:40:a3:e7:
         6e:e8:77:12:af:40:99:b0:3c:81:16:c7:3c:65:b8:78:fa:d8:
         fd:e7:3b:2f:8c:73:38:cd:be:6f:e8:e2:f6:8f:fc:f4:8f:70:
         38:19:43:4b:cc:6a:7c:3b:db:03:45:a5:6f:0b:3f:8f:2d:19:
         d5:b3:2d:b3:d9:4b:5f:db:ff:ec:c9:52:8c:a8:41:87:c5:07:
         f7:e5:c0:20:6b:ee:bc:b5:ff:2b:dc:ca:ac:f7:00:3e:ac:78:
         7a:25:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----