Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/pcedMuCUxwxZL3zn8WGyBQ0mhnw.mft
File:                     pcedMuCUxwxZL3zn8WGyBQ0mhnw.mft (raw, json)
Hash identifier:          BS43xeQbEQQ2UP3EWrcC6KMx9YQI+vSnDw+JsDNxaWs=
Subject key identifier:   85:5C:26:DE:18:F5:27:01:BC:6E:27:A5:49:EB:DF:BD:95:07:3C:58
Authority key identifier: A5:C7:9D:32:E0:94:C7:0C:59:2F:7C:E7:F1:61:B2:05:0D:26:86:7C
Certificate issuer:       /CN=a5c79d32e094c70c592f7ce7f161b2050d26867c
Certificate serial:       0184763DA1C11572E0810DECFC985B015DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcedMuCUxwxZL3zn8WGyBQ0mhnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/pcedMuCUxwxZL3zn8WGyBQ0mhnw.mft
Manifest number:          0950
Signing time:             Mon 14 Nov 2022 13:04:21 +0000
Manifest this update:     Mon 14 Nov 2022 13:04:21 +0000
Manifest next update:     Tue 15 Nov 2022 13:04:21 +0000
Files and hashes:         1: 1-kgghMkSVSqrn3vX7VkgyqiDyG8.roa (hash: UwjG2FL3lGHrG7PWd0JtfV/GL2yZzOvWBHmn8vJfpBI=)
                          2: pcedMuCUxwxZL3zn8WGyBQ0mhnw.crl (hash: r8TwXuhi3AnETkWlHYMnwJElVzjFwHOv9i9dHlwkEks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:3d:a1:c1:15:72:e0:81:0d:ec:fc:98:5b:01:5d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c79d32e094c70c592f7ce7f161b2050d26867c
        Validity
            Not Before: Nov 14 13:04:21 2022 GMT
            Not After : Nov 15 13:04:21 2022 GMT
        Subject: CN=855c26de18f52701bc6e27a549ebdfbd95073c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:17:85:ef:84:f0:37:1e:1c:4f:10:d8:4a:
                    94:1b:92:9a:ef:2d:58:5f:01:7f:81:cb:08:a7:7b:
                    fe:70:9f:34:d3:5b:72:46:78:96:ce:06:53:ab:06:
                    95:6a:25:34:e9:1c:7d:7a:fa:97:8f:ae:67:24:08:
                    61:ab:e9:32:5a:72:11:e6:5b:a1:2d:c4:64:3b:12:
                    71:89:de:87:07:fe:d3:7e:c9:7b:48:eb:20:aa:fd:
                    e7:35:a2:25:4c:11:3c:38:47:da:be:97:71:62:af:
                    96:04:d6:35:6e:ef:e9:46:40:2c:0b:fb:09:5c:34:
                    7b:08:0c:93:24:f5:c6:51:e8:27:2f:0e:c7:1c:9c:
                    a0:17:bf:4a:48:21:13:09:5b:b0:ae:e8:48:10:3a:
                    90:f3:1d:3e:5e:2e:5a:0d:0c:57:7a:06:fd:b7:45:
                    5f:b1:43:57:e6:3c:44:9a:b1:86:fb:8f:8f:24:d3:
                    a7:36:69:f2:a6:ff:70:b1:39:1a:ae:64:4a:ee:e4:
                    e9:6b:cb:b9:1d:f2:10:56:3d:1c:32:26:b4:3f:c6:
                    0c:ed:2c:92:cf:de:45:e9:53:f7:f0:5b:ff:cb:74:
                    38:0d:fc:ad:f6:77:56:33:ed:3d:57:06:fe:9b:ea:
                    b0:6d:95:4b:e4:3e:94:7b:54:fe:b7:71:7a:fd:8f:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5C:26:DE:18:F5:27:01:BC:6E:27:A5:49:EB:DF:BD:95:07:3C:58
            X509v3 Authority Key Identifier:
                keyid:A5:C7:9D:32:E0:94:C7:0C:59:2F:7C:E7:F1:61:B2:05:0D:26:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcedMuCUxwxZL3zn8WGyBQ0mhnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/pcedMuCUxwxZL3zn8WGyBQ0mhnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/pcedMuCUxwxZL3zn8WGyBQ0mhnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:21:7d:31:d2:42:1c:b0:0d:31:4d:6e:ac:69:2b:3a:6c:
         f7:31:ad:92:bd:7e:97:b1:73:33:d6:48:b4:19:4c:a6:60:98:
         44:71:ba:6f:21:af:e1:96:9c:28:db:1d:c0:34:a9:db:22:f3:
         41:f1:90:bc:a1:9d:da:83:b0:1c:db:0b:8f:06:f2:01:70:d6:
         31:f5:3b:09:fa:33:25:e1:05:56:49:b7:b0:61:bd:3a:21:57:
         42:3f:67:be:71:99:db:fa:32:1f:af:b0:bd:44:56:af:3f:66:
         81:eb:62:c2:e2:96:9c:9c:83:ab:df:c7:73:33:5d:9e:7d:35:
         53:7c:e0:20:ad:ec:38:d2:f7:76:d2:d8:02:01:c1:d2:fa:24:
         66:54:a2:e7:17:ad:58:03:55:ec:fd:ae:c3:15:5f:31:a8:31:
         44:3d:49:09:25:b9:6a:05:24:9a:d4:4c:b9:bb:64:b6:cd:6d:
         9a:f3:41:82:5b:23:9b:33:a1:dc:da:f3:87:db:c3:0a:74:59:
         a7:64:c6:22:d2:22:10:18:a2:01:2f:8c:d9:b1:95:84:9d:bc:
         89:97:a9:a2:4f:49:96:6c:ce:b2:b8:f0:90:e2:50:da:d2:8f:
         f8:50:e0:78:5e:a0:2b:78:5b:36:81:cc:ff:ee:71:40:84:e4:
         56:31:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----