Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/zorkn_i-zyL7JXYVn_TXP0m8Fr4.mft
File:                     zorkn_i-zyL7JXYVn_TXP0m8Fr4.mft (raw, json)
Hash identifier:          Em3ZJX75ItgKk7DQcAxVOVQ1BqZLA/6s48mUEtNo9tI=
Subject key identifier:   84:BE:DB:32:3C:2F:43:D3:39:3D:E3:08:6C:6B:43:EE:21:01:2D:98
Authority key identifier: CE:8A:E4:9F:F8:BE:CF:22:FB:25:76:15:9F:F4:D7:3F:49:BC:16:BE
Certificate issuer:       /CN=ce8ae49ff8becf22fb2576159ff4d73f49bc16be
Certificate serial:       018266BAB9EA8DF686F8FF77D599626B2E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zorkn_i-zyL7JXYVn_TXP0m8Fr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/zorkn_i-zyL7JXYVn_TXP0m8Fr4.mft
Manifest number:          0A3F
Signing time:             Thu 04 Aug 2022 02:41:29 +0000
Manifest this update:     Thu 04 Aug 2022 02:41:29 +0000
Manifest next update:     Fri 05 Aug 2022 02:41:29 +0000
Files and hashes:         1: 2v2cNsvlAjA9n59XX1HOiQtJYew.roa (hash: jlnBzns31wTyEpS6hjvgs/nCMAf4H/mHXojRk1AVZ/I=)
                          2: zorkn_i-zyL7JXYVn_TXP0m8Fr4.crl (hash: Ic4+gFWmGWF6RI7lPI5GCrSJt2fHfVS6hQGfZEAXnGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:66:ba:b9:ea:8d:f6:86:f8:ff:77:d5:99:62:6b:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8ae49ff8becf22fb2576159ff4d73f49bc16be
        Validity
            Not Before: Aug  4 02:41:29 2022 GMT
            Not After : Aug  5 02:41:29 2022 GMT
        Subject: CN=84bedb323c2f43d3393de3086c6b43ee21012d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:61:cc:75:fa:02:bf:05:32:b6:8b:0b:8b:
                    d0:99:42:7e:10:45:3d:59:e5:b0:3a:27:bb:58:f1:
                    43:a3:f7:6f:43:c0:35:e4:79:35:94:2e:f1:2b:53:
                    1a:36:09:32:ad:1d:84:f5:90:94:34:a4:ab:75:f7:
                    24:dd:db:47:80:fd:4f:d0:af:06:13:d5:74:8f:b1:
                    41:ce:a7:6b:16:a1:be:01:0c:2d:d4:c8:61:00:fa:
                    26:73:a7:e2:96:a2:8a:19:eb:2e:8b:1a:f0:20:10:
                    34:dc:f2:1c:d4:a1:a3:8c:e4:bb:b8:5e:0a:3c:53:
                    ee:8e:ee:8a:5b:f1:8a:16:86:51:f5:fa:06:fb:31:
                    ba:46:0d:23:45:83:f4:93:fe:f4:c9:12:c9:62:b2:
                    9b:53:84:fb:2b:f4:23:39:79:e1:43:dd:79:f4:4e:
                    df:11:ce:34:21:5e:79:98:1a:aa:47:ca:7b:58:45:
                    29:6d:42:21:4c:3c:33:0a:91:7f:6e:c0:18:2d:30:
                    25:de:41:b6:76:b8:93:0b:fe:25:71:6f:59:7d:de:
                    fb:92:ac:13:30:21:69:78:54:ad:c4:0f:ce:35:7c:
                    15:0e:b4:6f:42:55:44:c4:e1:28:32:c9:d5:d3:79:
                    1d:96:28:50:87:e0:ae:bc:78:a8:d5:15:16:f4:ed:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BE:DB:32:3C:2F:43:D3:39:3D:E3:08:6C:6B:43:EE:21:01:2D:98
            X509v3 Authority Key Identifier:
                keyid:CE:8A:E4:9F:F8:BE:CF:22:FB:25:76:15:9F:F4:D7:3F:49:BC:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zorkn_i-zyL7JXYVn_TXP0m8Fr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/zorkn_i-zyL7JXYVn_TXP0m8Fr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/zorkn_i-zyL7JXYVn_TXP0m8Fr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:46:65:6f:04:39:4c:fc:0c:86:bc:f8:fa:e9:bb:1e:cd:
         85:0c:8a:c3:8d:01:c0:1b:2e:07:6c:df:d4:c9:61:57:7b:fa:
         d3:f3:d4:8c:9e:e2:57:bf:bd:51:29:c2:10:69:e0:fc:89:99:
         0b:49:8a:d5:fa:08:8f:71:df:81:8c:54:b0:9c:f4:ef:5e:10:
         d4:37:ee:5f:1a:21:0f:99:2c:1e:c2:b7:b5:c6:01:8b:ea:bd:
         6b:44:dd:b9:83:11:60:e5:67:94:23:e1:f2:cc:4c:21:f4:ea:
         0d:76:d7:0a:9b:50:b0:1f:dc:75:69:41:e4:74:9d:ce:88:d8:
         84:31:20:4a:b6:1c:21:72:89:4e:e2:72:84:74:08:f2:7e:a4:
         bb:3d:25:72:86:64:9e:28:9c:4c:a1:9b:9d:57:86:b3:48:84:
         ab:6b:7a:b4:76:8f:c0:3e:86:f6:c5:42:90:3a:42:61:92:53:
         29:bf:ae:18:9d:14:8d:3a:8f:3a:b5:49:a3:6f:29:f1:82:1c:
         d8:4b:76:ba:50:99:f9:ef:f3:f2:bd:dc:01:c7:51:f6:cd:a0:
         ba:ec:38:81:89:a4:63:25:22:02:0b:85:32:56:b1:09:d3:25:
         1c:0a:6e:0d:97:68:83:4a:f8:36:f3:7c:1f:ad:68:24:bd:6b:
         1d:e2:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----