Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.mft
File:                     jSmkHm9QejdFiklkOnvleQdY9yY.mft (raw, json)
Hash identifier:          TqlmPLs4LJ0+/8/s5h3C0CDfa0wC9+KsWLhD/PlMAas=
Subject key identifier:   A7:1B:FE:2F:BB:A1:E4:6C:2B:04:86:18:11:90:C7:FE:5B:EA:02:E4
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Certificate issuer:       /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial:       01869159A50511EBC5C380724A18C1F73AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.mft
Manifest number:          0CA4
Signing time:             Mon 27 Feb 2023 05:30:16 +0000
Manifest this update:     Mon 27 Feb 2023 05:30:16 +0000
Manifest next update:     Tue 28 Feb 2023 05:30:16 +0000
Files and hashes:         1: 5cOnIRZG7VIjL3T-EY5dXkOiyig.roa (hash: fminTBFj94EewbSrxeCTogYSXGOVuK5ySC/XFYJlGdQ=)
                          2: CnxtK-eRaJLTbWRTibQg7bwwgFQ.roa (hash: g04DoHvjy0czwla254dwIl5fQ3xkJRgF/OcQ0CCiQ24=)
                          3: FZObVFLx6TsV6Sc08hIIXstxqXU.roa (hash: DqqypzN2jJ/7dCXRc89vUZUZkKoWY2dcfopR4LBT0EM=)
                          4: MY_P-6huuB_LwvEa-9zIo2vrRzE.roa (hash: /CDCAjygnMfLj2UYCZzbJ2ih15no/PupVBC0v7rUtuw=)
                          5: MeXxI68VhswcyZ_-8X4oKdOf0H8.roa (hash: 1gypIegK+DwFU8AfmSnmwgdymeASNHDoZfd5S59cDLg=)
                          6: W_lc7T3WjlSc_Q2oqwGzMX5dHvU.roa (hash: Bmu0IzTtNNcY0WFSC1+RMep3KHRNIL05SBjukkVulgE=)
                          7: YxaG2rzBw27D5jBTyAarnFEJRQw.roa (hash: xHNzZXFg9Hy9BO1QnGdXrB6HpP3zaZaoEo/vWE1bRFs=)
                          8: jSmkHm9QejdFiklkOnvleQdY9yY.crl (hash: M0pboaS8QEbhxhgdRMjA3zt7OQEsCOdHWIY8S5BzWzw=)
                          9: sVomTCgx6PxmOCUeUaDf6s34epk.roa (hash: jQ2WmHTim3dK49uLB1xXwouR2Jjn3s2T40V1stt3nNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:91:59:a5:05:11:eb:c5:c3:80:72:4a:18:c1:f7:3a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
        Validity
            Not Before: Feb 27 05:30:16 2023 GMT
            Not After : Feb 28 05:30:16 2023 GMT
        Subject: CN=a71bfe2fbba1e46c2b0486181190c7fe5bea02e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:e2:80:8b:6d:c0:48:72:44:4e:ed:1f:22:
                    13:ff:f7:cc:45:0b:d7:e5:e6:30:11:b0:7f:9f:d4:
                    85:c2:4a:11:71:95:42:90:3e:20:76:fe:d7:e2:6f:
                    d2:5c:82:da:7b:f0:d6:9d:9a:b4:e1:a7:97:6b:07:
                    08:71:06:7f:55:a1:8d:d0:fa:2b:4c:33:05:02:b9:
                    3c:a1:73:bf:0b:93:59:0d:33:01:f8:61:d2:f4:e8:
                    53:4c:6d:11:c0:3a:0a:db:32:08:6f:17:ed:d5:42:
                    28:27:a3:f1:2a:0a:3e:9d:00:33:7e:8c:1b:c0:b2:
                    ae:63:b0:bd:7e:c0:8c:66:8e:e5:db:f3:7b:71:89:
                    12:5b:e3:dc:82:f7:4d:ad:7e:bd:4f:ba:07:08:b1:
                    f9:d9:40:68:2c:15:ef:f9:b1:fd:de:8b:f5:0b:c9:
                    ee:05:e5:c7:8b:2a:63:be:8f:73:9b:19:0c:9e:2b:
                    c4:c1:73:19:c3:33:0a:ef:d4:03:ab:cc:52:03:d1:
                    55:a5:0d:a5:ef:74:7f:57:18:75:c0:a9:7d:f7:0a:
                    13:36:a4:9f:6c:22:54:72:bc:c2:56:a7:3c:9f:b3:
                    ba:9a:c4:54:97:55:75:2c:9d:9d:58:09:fc:12:3a:
                    da:a8:1d:b4:fe:27:c1:8f:27:43:96:71:79:64:ea:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1B:FE:2F:BB:A1:E4:6C:2B:04:86:18:11:90:C7:FE:5B:EA:02:E4
            X509v3 Authority Key Identifier:
                keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:36:02:9e:ac:05:c5:7f:2d:12:2e:4c:ea:05:2c:10:be:4f:
         bb:1e:18:1a:31:aa:4f:c9:64:d2:5e:0d:5f:e8:eb:ea:ce:fa:
         b6:f0:0a:ff:49:e2:6f:c4:86:1e:b5:9d:44:9f:91:d9:69:ad:
         04:70:01:05:d7:34:64:ee:a1:04:f4:94:32:8e:f3:ae:13:56:
         55:8a:ef:82:48:f7:f6:69:45:a1:e8:3c:21:35:33:55:39:22:
         29:ce:f0:7a:fb:83:ef:37:ac:37:7c:5b:78:3d:2d:56:88:18:
         70:1b:ab:57:ee:4c:11:f5:8f:b1:32:f5:f0:75:7c:04:9b:bc:
         19:8d:8f:72:42:74:64:5e:a8:dd:b0:19:c4:c8:c4:94:7f:f9:
         02:57:e6:19:89:dd:af:a6:0f:d6:56:51:f9:5e:8f:b3:d4:6b:
         da:48:84:99:af:4a:fe:48:99:32:d5:b3:b7:d5:ab:c3:30:a2:
         28:3c:d9:c2:79:58:ab:23:32:95:45:4a:5e:ad:96:0a:74:a7:
         30:5f:86:fc:5e:82:1e:03:42:db:b1:66:8b:0f:51:7b:a1:eb:
         9b:f4:77:22:77:a0:51:5b:5d:28:89:25:47:52:07:05:92:77:
         80:83:b1:a0:d9:bc:54:0d:30:75:54:01:32:fc:ec:3d:97:01:
         b2:dd:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----