Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft
File:                     sIQ82P_v6nT0VDLQ-sPnkGil39k.mft (raw, json)
Hash identifier:          lDhRcC35bSfb9R+O5NK2iRHFkSSrXU50JBJFtQEJglM=
Subject key identifier:   16:9B:48:A5:C0:B0:3A:78:B4:B6:3B:CF:9E:C1:05:1B:68:0C:AF:9B
Authority key identifier: B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9
Certificate issuer:       /CN=b0843cd8ffefea74f45432d0fac3e79068a5dfd9
Certificate serial:       01853E5EE0DE2F0B34623DC6E0870914B11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIQ82P_v6nT0VDLQ-sPnkGil39k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft
Manifest number:          0580
Signing time:             Fri 23 Dec 2022 09:44:43 +0000
Manifest this update:     Fri 23 Dec 2022 09:44:43 +0000
Manifest next update:     Sat 24 Dec 2022 09:44:43 +0000
Files and hashes:         1: LdvTuzo5GPWxb3DVAIJgW-ogk-0.roa (hash: bg7gHAUbUelCC3Q1IUjt9VjOe3XYtzUvw0SVy14u7So=)
                          2: sIQ82P_v6nT0VDLQ-sPnkGil39k.crl (hash: qia0JjmJGrYnAZ6sH9R2jWpF7Q2RrL/HAwpX/2Dgjxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3e:5e:e0:de:2f:0b:34:62:3d:c6:e0:87:09:14:b1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0843cd8ffefea74f45432d0fac3e79068a5dfd9
        Validity
            Not Before: Dec 23 09:44:43 2022 GMT
            Not After : Dec 24 09:44:43 2022 GMT
        Subject: CN=169b48a5c0b03a78b4b63bcf9ec1051b680caf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:f9:9e:7f:94:fc:94:46:96:07:b3:8e:ab:
                    a7:0e:38:ca:5d:90:ba:29:6b:ee:12:e3:32:42:97:
                    25:77:43:01:07:32:cd:95:23:94:0f:a8:0f:de:56:
                    83:5c:97:5b:e2:02:95:48:13:d8:99:2b:6c:bf:a6:
                    e3:90:16:e4:24:bd:22:ec:20:f0:f1:22:f3:fd:ad:
                    6c:3c:2a:5a:95:72:13:3c:93:d2:84:a7:2f:dd:ad:
                    be:2a:b4:74:93:95:5e:05:04:89:e4:0a:04:1b:cf:
                    57:03:59:a7:e5:3d:5f:ca:cb:cf:51:5d:9a:6b:7f:
                    96:99:18:f1:23:a7:2e:0d:f1:cc:75:a0:54:65:cb:
                    f9:48:fe:a5:3e:a7:52:c4:a3:c3:f0:37:73:e4:4d:
                    91:23:7b:3c:f5:cd:0a:ab:06:41:38:94:fa:08:26:
                    b5:72:59:52:7f:db:94:d9:e8:15:be:3b:2f:cc:2d:
                    88:02:36:0b:09:8f:6c:44:e2:71:b2:48:04:c2:ad:
                    dd:64:e6:72:6b:da:c4:4b:6c:e1:2c:50:56:10:45:
                    0c:85:19:fa:39:03:a3:bd:cf:64:4c:1b:d5:21:d7:
                    e5:04:55:10:45:e8:c7:64:dc:c3:a0:83:66:c3:25:
                    9f:0d:c0:4d:17:ef:26:d1:fe:e8:d3:48:6c:8a:32:
                    fa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9B:48:A5:C0:B0:3A:78:B4:B6:3B:CF:9E:C1:05:1B:68:0C:AF:9B
            X509v3 Authority Key Identifier:
                keyid:B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIQ82P_v6nT0VDLQ-sPnkGil39k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cd:5b:1d:52:0c:c0:7f:2f:8f:1c:a0:bd:56:21:70:91:40:
         0d:b6:9d:11:1b:e0:46:38:16:51:43:62:27:26:2b:1c:92:25:
         2e:95:2d:94:d2:10:ba:df:e9:ca:ea:bd:33:bd:fe:72:d3:28:
         ca:13:01:47:11:35:2b:09:cc:a2:18:a3:4a:bd:aa:3d:55:cf:
         b8:a0:a8:d3:57:0b:85:0f:f9:91:2b:56:e3:db:5d:b1:79:b8:
         6b:7e:4f:eb:d8:db:55:82:2c:a9:dc:35:cb:97:3f:ba:01:4b:
         a4:b7:10:d2:ec:f9:d9:8d:03:db:e8:3a:20:01:dd:0f:98:d6:
         a0:74:6d:ec:21:bf:cb:ed:d7:90:95:be:70:15:da:6b:9c:93:
         e2:c1:71:f3:a2:6b:c0:0d:9b:16:60:ef:c9:a7:69:0b:ca:6c:
         9e:56:47:fe:08:e7:d2:7b:4e:20:65:a2:87:12:a6:ff:47:50:
         d8:41:6b:f2:c1:f4:b6:97:bb:ff:26:12:5d:79:fd:94:3f:c6:
         9b:a7:57:df:b3:87:99:40:e0:f2:52:cc:7f:da:b7:1e:02:12:
         8e:8b:93:5d:af:7d:7b:56:4a:3b:c5:d4:9b:c0:dc:48:3e:7d:
         1c:91:df:a8:2e:dc:15:9f:84:29:7f:3b:75:f1:c3:c7:c5:16:
         db:b3:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----