Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft
File:                     vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft (raw, json)
Hash identifier:          3JFsf8FGs/I8GA5nSGpGJ7lhhwJCY9bSqVfrJ0UFHA4=
Subject key identifier:   86:1E:50:9B:DB:FC:51:D8:DB:AE:C7:7A:8A:CB:47:41:B4:18:DF:E7
Authority key identifier: BD:9A:4D:12:17:40:F5:A3:38:79:32:7D:B2:3A:C2:87:F2:E1:13:A1
Certificate issuer:       /CN=bd9a4d121740f5a33879327db23ac287f2e113a1
Certificate serial:       018502596F372B074D2F40E1D314C0FCDE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft
Manifest number:          0167
Signing time:             Sun 11 Dec 2022 18:01:33 +0000
Manifest this update:     Sun 11 Dec 2022 18:01:33 +0000
Manifest next update:     Mon 12 Dec 2022 18:01:33 +0000
Files and hashes:         1: SSi3c9G59RxF0AqZxlKnM04r5Zc.roa (hash: JijAtoEtVbNjdlp2kniJZWr+Nf0U+JmM+FkqNcbPc1A=)
                          2: vZpNEhdA9aM4eTJ9sjrCh_LhE6E.crl (hash: tc1SzfqV62IHhAgalsitG4n8SyA7kl7xMW6bOVhD52U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:02:59:6f:37:2b:07:4d:2f:40:e1:d3:14:c0:fc:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9a4d121740f5a33879327db23ac287f2e113a1
        Validity
            Not Before: Dec 11 18:01:33 2022 GMT
            Not After : Dec 12 18:01:33 2022 GMT
        Subject: CN=861e509bdbfc51d8dbaec77a8acb4741b418dfe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:0f:c4:d6:ac:a3:73:b7:c5:81:fe:ce:8d:
                    ae:2c:e5:c0:15:d2:04:8e:8b:52:eb:bb:d8:3d:6c:
                    73:7e:8d:67:d0:3f:1b:45:d7:5f:a5:56:d4:a3:c2:
                    1a:4e:ab:2a:f3:c0:2d:58:95:f4:50:42:80:a1:c6:
                    b1:1b:b4:40:06:07:03:64:51:58:48:d3:e6:14:4b:
                    6b:d7:e6:15:36:dd:95:6b:2a:6c:3a:0b:f3:60:67:
                    11:c6:41:63:f5:66:5f:6b:fe:fb:f0:e7:21:e8:c8:
                    11:23:70:46:2a:da:4e:e0:17:17:78:21:f5:10:b0:
                    88:70:fb:fa:ec:c9:4b:2a:53:0b:4b:05:71:14:88:
                    ab:37:7c:3a:6c:96:86:ae:a6:24:20:47:d6:89:39:
                    8c:3a:8c:7c:ee:c2:0c:07:1e:ce:8a:c9:0b:ef:7d:
                    55:47:bb:5b:bd:f4:d7:2f:b4:80:ed:b3:a9:7c:d5:
                    84:23:68:79:6b:2b:e6:9a:e1:ff:51:98:a3:2e:3b:
                    d8:3c:b7:de:91:36:a0:88:f6:4a:fc:ac:bc:e5:4c:
                    18:fc:bc:9b:2f:69:cf:47:2e:50:c2:de:1e:c2:57:
                    7e:d0:08:e5:54:45:b1:a2:36:1a:b9:2f:b3:b4:b1:
                    2d:80:b7:5d:ca:5e:22:6f:3a:11:eb:80:1a:be:61:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1E:50:9B:DB:FC:51:D8:DB:AE:C7:7A:8A:CB:47:41:B4:18:DF:E7
            X509v3 Authority Key Identifier:
                keyid:BD:9A:4D:12:17:40:F5:A3:38:79:32:7D:B2:3A:C2:87:F2:E1:13:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:91:7d:ce:09:1d:f1:9e:1c:d3:91:fc:69:61:f3:43:3c:78:
         29:6b:cd:96:a7:28:88:16:a7:65:41:92:b0:c0:ab:7e:91:94:
         ca:f0:14:1d:4f:29:e8:da:47:1c:ad:93:65:f1:67:5d:dc:bd:
         79:86:ef:5f:72:29:cc:f3:be:4c:22:8a:a7:2c:2c:2b:0e:da:
         d6:90:86:99:63:da:df:31:e2:ff:97:e0:4c:3c:10:32:e9:91:
         ab:d2:41:5e:58:6b:b0:6f:82:32:63:06:2b:dd:46:d1:47:6a:
         de:51:d6:ea:0b:a4:45:e5:f4:5d:ab:a6:07:d3:7e:7c:9f:93:
         e1:16:3f:bf:72:41:3c:ae:78:56:3e:6e:3d:d5:3e:40:13:a6:
         92:74:9e:1d:3d:d4:b5:55:fc:01:b7:05:8c:83:a3:05:fd:70:
         32:cc:4e:84:a0:aa:f7:3c:24:73:46:bb:c0:71:58:6c:eb:ac:
         08:32:be:3e:66:d8:7d:60:34:53:c3:22:79:01:f2:f4:97:45:
         f8:00:74:ca:a7:70:3b:d8:dc:97:f9:39:81:b7:cb:80:f2:f2:
         0f:ba:a7:e0:e0:b7:cd:4a:5e:6a:f5:b5:36:91:6f:34:40:53:
         80:1c:48:10:07:31:52:80:c8:c1:e1:18:b4:68:cc:17:ed:4a:
         ea:46:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----