Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/SZES2xyOCEr7NNHdhiRevCFbWD4.mft
File:                     SZES2xyOCEr7NNHdhiRevCFbWD4.mft (raw, json)
Hash identifier:          k4xL2mv8v0lWPD2vTPy59zqQoWNnFCs6enyjyJrlv/w=
Subject key identifier:   99:BB:55:FC:25:B0:81:F2:A9:02:7B:60:52:8B:98:40:8C:BE:84:BE
Authority key identifier: 49:91:12:DB:1C:8E:08:4A:FB:34:D1:DD:86:24:5E:BC:21:5B:58:3E
Certificate issuer:       /CN=499112db1c8e084afb34d1dd86245ebc215b583e
Certificate serial:       0183DCAE2134A014A09CB8136610DFA3CDCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SZES2xyOCEr7NNHdhiRevCFbWD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/SZES2xyOCEr7NNHdhiRevCFbWD4.mft
Manifest number:          5C
Signing time:             Sat 15 Oct 2022 17:25:42 +0000
Manifest this update:     Sat 15 Oct 2022 17:25:42 +0000
Manifest next update:     Sun 16 Oct 2022 17:25:42 +0000
Files and hashes:         1: SZES2xyOCEr7NNHdhiRevCFbWD4.crl (hash: LuDHnG1B5o89znkrB1UlnlYmq0KFCipizrbD5uJmnIU=)
                          2: mUqD7y6RyD0jZHM52IlvhMtrreo.roa (hash: kkpYYMJcOEgXEuQ5BgnwyPBmM3TzPz+RfOD33Ytd9t8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:dc:ae:21:34:a0:14:a0:9c:b8:13:66:10:df:a3:cd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499112db1c8e084afb34d1dd86245ebc215b583e
        Validity
            Not Before: Oct 15 17:25:42 2022 GMT
            Not After : Oct 16 17:25:42 2022 GMT
        Subject: CN=99bb55fc25b081f2a9027b60528b98408cbe84be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:50:4c:6b:2e:ec:92:96:f3:22:df:e9:96:
                    10:a1:d1:73:7f:21:53:25:7d:ee:1b:3c:f9:e2:f9:
                    78:6a:ea:9a:04:3e:95:05:30:9c:a7:b0:d3:3d:8d:
                    3f:85:ed:25:9a:e9:eb:4e:0c:2b:2e:c6:04:00:e1:
                    46:42:ca:f8:ad:33:bc:14:98:7e:6f:4d:9d:4d:4a:
                    0a:3e:4a:eb:ff:b8:82:8e:74:22:49:9e:9e:f1:72:
                    04:01:de:cf:ae:5a:a2:ff:b9:10:9c:f2:35:e5:ee:
                    72:d1:72:1e:da:15:68:2f:10:6a:18:84:d4:97:70:
                    64:27:f2:b6:84:7f:38:a1:3d:27:a2:b8:45:b3:e4:
                    e4:ad:1d:7c:e3:c5:0c:95:80:91:bc:fc:dd:44:d4:
                    c9:1c:16:5d:85:b8:e1:1e:4c:ec:e6:ea:c2:ec:7b:
                    ee:8d:df:dc:b7:d7:1e:85:6f:b7:63:f3:70:3d:7a:
                    07:68:57:4b:3d:6e:41:19:f9:3a:63:b9:41:3a:17:
                    b0:91:f7:3d:57:81:12:6a:fd:dd:46:5c:8a:8e:4b:
                    cf:16:d8:36:86:54:b7:76:10:8b:4c:f7:dd:f5:27:
                    04:01:fc:85:3e:51:90:db:46:a5:8f:f7:eb:4f:9b:
                    50:4b:d2:74:9d:75:3b:36:dd:21:67:3c:9c:39:90:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BB:55:FC:25:B0:81:F2:A9:02:7B:60:52:8B:98:40:8C:BE:84:BE
            X509v3 Authority Key Identifier:
                keyid:49:91:12:DB:1C:8E:08:4A:FB:34:D1:DD:86:24:5E:BC:21:5B:58:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZES2xyOCEr7NNHdhiRevCFbWD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/SZES2xyOCEr7NNHdhiRevCFbWD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/SZES2xyOCEr7NNHdhiRevCFbWD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:2b:31:2d:21:ce:93:25:81:c1:e5:06:15:9f:c2:47:ac:
         1b:c7:be:79:4c:3a:5c:db:be:b0:93:0c:a3:1c:80:64:f2:7c:
         57:6f:f8:32:0b:de:1e:c5:e8:f5:96:de:f5:ca:21:54:47:eb:
         01:c5:fa:96:3d:45:e8:9d:14:62:0f:e2:3d:0f:b2:29:fe:ec:
         55:08:43:16:f3:47:b9:07:09:79:57:35:8a:50:f5:7e:40:be:
         df:ce:a2:9c:ed:67:ec:ea:35:03:62:7c:35:2a:3d:11:49:21:
         e1:88:85:42:67:a3:a0:e7:4d:a6:14:4b:6d:8c:e1:61:ca:c8:
         90:c6:54:8f:85:ae:a6:0d:27:03:1f:6e:06:e7:4b:c4:a4:74:
         c0:c3:18:d1:63:12:7f:c5:6f:cf:8f:00:b0:c5:52:5a:8f:dd:
         e9:8b:21:75:05:f5:11:06:10:95:f2:43:58:70:01:e1:b5:40:
         c9:23:c9:3b:16:ed:9f:40:3e:6c:a2:ad:77:a1:36:e5:36:29:
         76:e0:6a:76:04:36:e2:48:6e:b1:50:7e:40:f5:53:e4:f4:05:
         a2:35:bc:f7:62:a2:5c:b5:82:32:0c:52:13:d5:1d:db:32:14:
         e7:6d:86:9f:aa:52:cd:01:eb:a3:bb:7a:43:e3:9d:80:1e:34:
         99:c7:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----