Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/uRI8IakfgYQxP5C1abtRH6YLIOQ.mft
File:                     uRI8IakfgYQxP5C1abtRH6YLIOQ.mft (raw, json)
Hash identifier:          561sx0xroJraVln8ZoY7SkjWvJQi0y997rIxL6ZPKDQ=
Subject key identifier:   7B:00:04:F5:7A:E6:A7:FA:1A:93:6B:CD:12:BB:3F:3A:4B:AD:B2:07
Authority key identifier: B9:12:3C:21:A9:1F:81:84:31:3F:90:B5:69:BB:51:1F:A6:0B:20:E4
Certificate issuer:       /CN=b9123c21a91f8184313f90b569bb511fa60b20e4
Certificate serial:       01853CB5D898A919F096FE541F56CD59AEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRI8IakfgYQxP5C1abtRH6YLIOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/uRI8IakfgYQxP5C1abtRH6YLIOQ.mft
Manifest number:          0906
Signing time:             Fri 23 Dec 2022 02:00:28 +0000
Manifest this update:     Fri 23 Dec 2022 02:00:28 +0000
Manifest next update:     Sat 24 Dec 2022 02:00:28 +0000
Files and hashes:         1: 4rkfUoPtqfx-8t4FfQvVYHFWtJQ.roa (hash: kZ04uGA4t9Z8Wxhh3aEnf+BVS3zfBTqwJ021ThhlB50=)
                          2: uRI8IakfgYQxP5C1abtRH6YLIOQ.crl (hash: Hc4bZ1JalJK8oqnJl6YFN9771GFHabUpIhiBBvV7RXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3c:b5:d8:98:a9:19:f0:96:fe:54:1f:56:cd:59:ae:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9123c21a91f8184313f90b569bb511fa60b20e4
        Validity
            Not Before: Dec 23 02:00:28 2022 GMT
            Not After : Dec 24 02:00:28 2022 GMT
        Subject: CN=7b0004f57ae6a7fa1a936bcd12bb3f3a4badb207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:c2:26:58:1f:69:e3:a7:59:6c:c2:33:6e:
                    d9:cc:2f:9c:65:41:88:5a:44:0b:42:76:8a:ff:c7:
                    5a:41:81:65:f5:4b:93:cc:ee:32:5f:69:02:90:68:
                    e0:75:18:ac:80:3d:00:c4:a8:52:0a:60:b8:87:3d:
                    a5:e2:4a:55:0b:c5:d9:1b:2a:66:06:89:fe:f8:4e:
                    dc:ac:46:0e:7b:9f:04:72:8e:7d:3a:d9:75:43:d8:
                    b4:47:5a:ff:61:e6:d5:69:9b:41:bb:23:0e:bd:bc:
                    17:0b:2d:74:ec:f8:ca:b1:1f:bf:bd:ec:fe:94:b1:
                    74:a3:27:f8:02:ea:08:02:50:9e:b4:79:63:06:8d:
                    91:f5:2a:4f:09:5d:0e:0b:1f:87:17:f5:af:36:4a:
                    11:10:82:95:20:a6:81:b9:e8:13:c7:c8:d8:f2:00:
                    c4:d8:69:3d:98:d9:04:dc:21:2a:7b:cb:bf:00:1d:
                    43:9a:db:d9:0e:f0:5b:ce:63:81:1f:ca:5c:f0:b7:
                    d9:bd:3a:3d:a4:d9:15:99:49:e1:bc:22:f1:72:b2:
                    d2:0d:a4:0b:fd:97:07:51:b9:9b:ab:8c:06:1e:9f:
                    b1:4e:87:20:5b:39:01:4d:c0:16:d6:b7:47:30:7e:
                    69:5a:84:ce:4a:36:da:08:50:3f:bd:6d:89:54:ca:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:00:04:F5:7A:E6:A7:FA:1A:93:6B:CD:12:BB:3F:3A:4B:AD:B2:07
            X509v3 Authority Key Identifier:
                keyid:B9:12:3C:21:A9:1F:81:84:31:3F:90:B5:69:BB:51:1F:A6:0B:20:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRI8IakfgYQxP5C1abtRH6YLIOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/uRI8IakfgYQxP5C1abtRH6YLIOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b93a6f-fd3c-41b6-b6c8-60f35af7b92c/1/uRI8IakfgYQxP5C1abtRH6YLIOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5b:56:43:59:58:03:51:8a:05:0c:f0:af:5b:7f:6f:d0:b7:
         85:69:2a:d5:a1:0d:6c:6e:3a:c6:74:e6:7f:55:14:5d:53:62:
         9b:34:12:22:e7:9a:7d:86:28:5c:14:19:0a:5c:28:93:13:a8:
         19:e9:91:ad:8a:c2:f5:1a:e4:ab:e0:59:78:b0:97:3b:8f:db:
         a9:52:16:8f:b0:ba:e5:9f:a7:7d:21:d9:a7:27:61:c0:b4:45:
         ec:38:e9:40:a9:a6:b9:e5:11:de:97:bb:63:bd:9f:8a:d7:57:
         ac:12:a0:81:39:87:86:62:98:ce:60:72:bf:73:f0:cf:bc:af:
         bd:1b:45:41:ff:a9:0b:92:1f:b2:79:92:09:a9:17:c3:60:3e:
         cc:54:1f:39:1b:0d:2a:38:fb:fa:f6:e0:87:98:90:0e:d6:9c:
         11:0b:c7:db:69:25:d8:65:d3:83:c7:f8:14:a2:9c:bb:9e:44:
         1a:39:72:50:33:61:60:f0:d9:9e:19:47:8b:9e:63:bb:63:06:
         c7:79:bd:08:fb:ba:4d:2b:b2:f0:ee:61:7e:d0:11:c9:27:6c:
         57:eb:c0:7b:a5:8c:d8:ab:c4:88:dd:f4:59:19:e8:5e:43:88:
         f5:eb:cb:bd:a2:60:e0:3f:7c:1f:8b:12:58:5e:cb:c7:0f:31:
         f6:91:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----