Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/hVjt6XtPkw43YthsLLaOlPHTY54.mft
File:                     hVjt6XtPkw43YthsLLaOlPHTY54.mft (raw, json)
Hash identifier:          EC9RkCR5ru06qDJJtKazNjTQLOqmXxiPvMtdbFxiJ3o=
Subject key identifier:   27:0F:B1:E4:58:BB:80:B5:35:C5:4E:92:10:5F:82:B8:D4:D7:F6:93
Authority key identifier: 85:58:ED:E9:7B:4F:93:0E:37:62:D8:6C:2C:B6:8E:94:F1:D3:63:9E
Certificate issuer:       /CN=8558ede97b4f930e3762d86c2cb68e94f1d3639e
Certificate serial:       01848A3F4661D53EF0E1A340AFCBE88EE607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVjt6XtPkw43YthsLLaOlPHTY54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/hVjt6XtPkw43YthsLLaOlPHTY54.mft
Manifest number:          0B7A
Signing time:             Fri 18 Nov 2022 10:18:33 +0000
Manifest this update:     Fri 18 Nov 2022 10:18:33 +0000
Manifest next update:     Sat 19 Nov 2022 10:18:33 +0000
Files and hashes:         1: 0dmSLyNGbrkY3UGgeptmCGq2vN8.roa (hash: BTGFz0zZ8/nCqf4vZtqS34EzNNUksxNGbpcHvPaUpbM=)
                          2: 0y4boQfv7eSYIWI6AyMGnB9_UEo.roa (hash: BiYeJhRtMMZcqyEVp9TSMVzreQKqVIyH2qDVy2qKCR8=)
                          3: hVjt6XtPkw43YthsLLaOlPHTY54.crl (hash: 6VqXhvV6sQdXjoISzcHT4EbkrqRabq3kS19SRTLfzz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8a:3f:46:61:d5:3e:f0:e1:a3:40:af:cb:e8:8e:e6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8558ede97b4f930e3762d86c2cb68e94f1d3639e
        Validity
            Not Before: Nov 18 10:18:33 2022 GMT
            Not After : Nov 19 10:18:33 2022 GMT
        Subject: CN=270fb1e458bb80b535c54e92105f82b8d4d7f693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:11:af:ed:c3:92:1a:d3:8b:2c:3f:23:07:
                    3b:cd:61:7e:ed:a7:3f:9d:b5:5c:7e:da:cc:3b:ec:
                    b6:6d:ca:8b:88:8b:d6:eb:ec:d0:fb:3c:79:ac:ca:
                    b0:b2:94:2c:3d:f1:5e:ea:6b:7c:f5:c4:51:7f:fe:
                    8d:79:04:b5:7e:fe:4a:23:d7:61:10:35:69:12:d4:
                    73:14:8a:0d:c8:7a:32:34:bf:a2:46:2f:f3:6c:50:
                    bd:9b:45:a7:99:00:ad:8e:7d:a6:2b:36:4a:5e:97:
                    b2:26:22:8c:37:06:54:d3:e9:a8:9b:c2:24:6e:45:
                    07:1a:6b:e5:9f:c1:9a:ce:c1:2a:f0:65:58:cf:d6:
                    1a:74:20:82:c0:71:f2:2b:06:93:e3:e6:10:05:bf:
                    25:04:d5:69:bf:e1:0d:65:25:4b:d6:c3:09:ae:9e:
                    ad:25:98:a2:e0:5a:00:9c:1d:de:ce:d3:cf:6a:f1:
                    52:3a:6d:e3:c1:a7:50:fc:6c:3e:a8:b8:a5:29:80:
                    8c:92:00:cf:36:31:f8:9f:16:c4:21:ed:60:d7:b4:
                    91:8b:5a:54:61:14:0a:75:76:b4:a2:5a:0b:22:b0:
                    f1:8e:a7:cb:4b:ed:97:ff:cd:2e:dd:74:c2:3d:20:
                    c6:01:5c:90:b4:8f:97:c4:66:15:97:d4:98:bc:4d:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:B1:E4:58:BB:80:B5:35:C5:4E:92:10:5F:82:B8:D4:D7:F6:93
            X509v3 Authority Key Identifier:
                keyid:85:58:ED:E9:7B:4F:93:0E:37:62:D8:6C:2C:B6:8E:94:F1:D3:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVjt6XtPkw43YthsLLaOlPHTY54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/hVjt6XtPkw43YthsLLaOlPHTY54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/792d92-7668-4251-accf-ba8e5f5e71f4/1/hVjt6XtPkw43YthsLLaOlPHTY54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:93:e9:46:0b:a9:e4:44:3e:a7:03:a3:4c:c9:32:66:d2:7d:
         98:e8:cb:04:54:25:72:74:f7:65:13:f3:9f:b9:9a:57:a6:0a:
         c9:c5:cf:89:9a:d1:98:d9:13:13:9d:b7:26:dd:7d:7b:78:30:
         82:06:0a:8e:7c:bb:02:32:c1:86:75:67:06:07:c8:3b:fb:91:
         70:0f:7f:93:40:3d:50:48:8e:48:15:b3:c2:8c:47:a3:17:ee:
         64:23:15:d8:ab:62:56:f6:40:58:da:c8:a2:f3:65:3c:c0:34:
         eb:40:3a:d3:5f:73:0f:b8:3e:15:7e:03:44:93:14:89:9e:72:
         9e:a8:b7:4b:a2:db:8b:cc:fd:92:15:43:a2:85:7d:62:67:58:
         ea:17:ab:f3:88:06:87:21:a0:fe:67:23:5e:fd:af:bf:2c:59:
         b0:67:1d:ed:09:92:fb:90:19:11:a2:a4:16:05:d7:42:66:dc:
         96:fe:13:ec:ee:9a:58:63:e8:b4:4f:18:91:a9:9d:0a:6a:fa:
         4d:94:26:bb:16:ec:ea:8c:95:3c:96:3b:69:14:7a:b6:6b:d5:
         2f:78:44:07:6e:52:df:f4:36:7d:68:d6:82:64:cf:a3:c8:d9:
         d4:68:bf:ea:e6:1a:f7:96:09:ac:e4:76:b5:a1:39:02:5d:08:
         ee:72:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----