Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/1RCFx4n0paIEQEgn2VNnbIUmCmE.mft
File:                     1RCFx4n0paIEQEgn2VNnbIUmCmE.mft (raw, json)
Hash identifier:          /E9bIn7PTC8CwQIBr5hnJqiZkTGpttZYkLd6y/5VLaw=
Subject key identifier:   87:28:C1:19:9F:40:A2:25:73:1B:B6:54:87:2F:18:75:65:3C:F5:AE
Authority key identifier: D5:10:85:C7:89:F4:A5:A2:04:40:48:27:D9:53:67:6C:85:26:0A:61
Certificate issuer:       /CN=d51085c789f4a5a204404827d953676c85260a61
Certificate serial:       018537BFCC8A50B0649ED7E7994A1B9EDE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RCFx4n0paIEQEgn2VNnbIUmCmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/1RCFx4n0paIEQEgn2VNnbIUmCmE.mft
Manifest number:          0B2E
Signing time:             Thu 22 Dec 2022 02:53:14 +0000
Manifest this update:     Thu 22 Dec 2022 02:53:14 +0000
Manifest next update:     Fri 23 Dec 2022 02:53:14 +0000
Files and hashes:         1: 1RCFx4n0paIEQEgn2VNnbIUmCmE.crl (hash: 8odpSQuWQ4suAOnXXQDQ2YD5dWQjdztpGjCvnoDM0ZM=)
                          2: GZW6lMrGX4l_yS1TYMuehpbyHZw.roa (hash: k0VhOl4zC5eJhB6ybH5dVA0eFnnDiw7QE90RcFoo6sw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:37:bf:cc:8a:50:b0:64:9e:d7:e7:99:4a:1b:9e:de:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51085c789f4a5a204404827d953676c85260a61
        Validity
            Not Before: Dec 22 02:53:14 2022 GMT
            Not After : Dec 23 02:53:14 2022 GMT
        Subject: CN=8728c1199f40a225731bb654872f1875653cf5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:3d:7e:2c:30:a0:a5:e9:df:3c:a1:e8:8b:
                    4f:af:af:78:94:4f:9a:33:78:69:04:67:d9:e0:64:
                    52:9c:25:5c:0c:b5:d9:d0:c2:05:47:2b:45:7c:d1:
                    c1:1b:ed:77:65:0b:f2:b7:be:ad:79:a5:e9:36:bb:
                    99:24:19:ae:6c:a4:cd:f3:68:01:f9:f9:0c:24:9f:
                    53:79:1c:d3:ef:b5:44:ad:79:ac:d8:b8:b9:01:94:
                    cf:9f:2f:66:88:f3:5d:9c:bb:93:e2:55:a0:a1:d5:
                    bc:6e:bd:c9:6c:a9:cf:c3:2a:78:68:03:a4:13:bf:
                    ce:c5:e4:23:60:c8:44:67:44:a0:47:8c:ed:89:e9:
                    a7:fe:f7:7d:54:45:7f:2c:c4:02:e4:90:f5:ac:fc:
                    26:b0:5c:a9:22:a8:86:4f:f3:56:71:76:20:da:5e:
                    d5:80:df:41:f2:94:91:c2:43:d4:d3:0a:ed:67:d6:
                    6a:b0:57:6e:e9:57:56:ab:15:06:c7:22:6e:9d:89:
                    68:d7:35:6a:d2:35:dd:b4:2c:4c:68:75:86:5a:59:
                    6d:9f:b0:8c:d8:fb:ba:a1:c2:1e:4b:46:a8:ec:a6:
                    50:ff:f6:d2:bc:75:23:ec:1d:50:40:86:b2:2b:87:
                    45:e8:35:e1:92:f8:dc:04:d5:fa:3f:66:97:f5:66:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:28:C1:19:9F:40:A2:25:73:1B:B6:54:87:2F:18:75:65:3C:F5:AE
            X509v3 Authority Key Identifier:
                keyid:D5:10:85:C7:89:F4:A5:A2:04:40:48:27:D9:53:67:6C:85:26:0A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RCFx4n0paIEQEgn2VNnbIUmCmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/1RCFx4n0paIEQEgn2VNnbIUmCmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/1RCFx4n0paIEQEgn2VNnbIUmCmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:24:78:40:c8:0a:b4:df:8d:ba:d6:1d:b4:4c:bf:e1:f4:5c:
         47:7b:87:39:44:ec:c7:6e:c3:c8:2b:86:39:d8:33:f4:a1:e9:
         8f:17:fd:bf:0c:f6:c6:34:e9:15:78:78:ec:f6:44:ae:72:2c:
         46:ee:b2:e7:67:3a:0e:73:ab:2f:e3:5e:38:26:15:ce:7d:b4:
         1a:ec:2b:51:57:7f:ce:72:66:5f:40:32:56:39:8a:cf:b7:c2:
         95:19:71:5a:20:9e:1d:d0:46:a0:79:4e:7d:ae:3a:5f:fc:96:
         81:03:be:46:b1:6d:63:83:5d:68:12:6f:67:93:06:66:6d:47:
         1f:b2:08:52:e2:18:99:14:52:c7:92:51:62:87:d6:31:03:50:
         28:39:f2:0e:c4:e0:22:27:b2:ae:02:a6:cc:45:46:51:44:3e:
         0a:e4:02:04:76:b5:8b:55:73:ac:e9:a0:57:26:ff:20:ac:29:
         40:d5:20:46:c9:4d:cf:7e:ab:2f:55:90:11:9d:5a:b9:31:b1:
         87:c7:bf:a8:73:6b:6f:80:64:31:17:7a:31:33:df:63:86:b2:
         44:de:49:df:23:8f:af:76:7a:0e:af:84:2e:6b:dd:c7:4f:31:
         5f:3f:4d:e7:51:87:bf:3f:a7:69:3b:00:0e:e8:8a:09:fa:d8:
         a3:42:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----