Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/KHQrY-RXsfnnx2Mh08Vwfp81IrY.mft
File:                     KHQrY-RXsfnnx2Mh08Vwfp81IrY.mft (raw, json)
Hash identifier:          xdqMWwbyd4kF1CFplAKruL82FsOQYrV7PgX368MRnk8=
Subject key identifier:   F3:6B:C4:F3:AE:89:B9:5A:2F:25:76:0D:25:A3:F5:FF:FB:6F:41:85
Authority key identifier: 28:74:2B:63:E4:57:B1:F9:E7:C7:63:21:D3:C5:70:7E:9F:35:22:B6
Certificate issuer:       /CN=28742b63e457b1f9e7c76321d3c5707e9f3522b6
Certificate serial:       0184BC5B8BA217DC901658DBFF5091B607D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHQrY-RXsfnnx2Mh08Vwfp81IrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/KHQrY-RXsfnnx2Mh08Vwfp81IrY.mft
Manifest number:          03D9
Signing time:             Mon 28 Nov 2022 03:50:26 +0000
Manifest this update:     Mon 28 Nov 2022 03:50:26 +0000
Manifest next update:     Tue 29 Nov 2022 03:50:26 +0000
Files and hashes:         1: KHQrY-RXsfnnx2Mh08Vwfp81IrY.crl (hash: KWbD22bgRtTeVtjfqItcqgEAxTUDgF5RqZYsK+GhXKA=)
                          2: fzfcnrrFSK_B98eZnDIR_ab362k.roa (hash: walYRS2LFglxxq8e+v9RpO677yENdpy1OkY8ex2QfKQ=)
                          3: uI7Fjq_6yYSFj83HY8UC-tYfoa8.roa (hash: RxHSakuqZBtXc8qVn9/EBncTre2MM/R3L7wPhh5NGjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bc:5b:8b:a2:17:dc:90:16:58:db:ff:50:91:b6:07:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28742b63e457b1f9e7c76321d3c5707e9f3522b6
        Validity
            Not Before: Nov 28 03:50:26 2022 GMT
            Not After : Nov 29 03:50:26 2022 GMT
        Subject: CN=f36bc4f3ae89b95a2f25760d25a3f5fffb6f4185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:38:ef:57:44:3f:f4:b2:ef:8b:0b:15:0c:
                    62:5b:5b:15:33:b3:16:c4:6a:29:4c:36:1c:b1:67:
                    e6:00:0f:d8:14:a4:76:50:fa:8e:1c:35:5c:52:42:
                    93:02:36:dc:06:97:57:c9:40:88:db:6c:9e:94:1d:
                    8b:38:72:32:eb:f3:91:0c:79:70:14:0d:d9:0d:ce:
                    bf:08:d1:9f:e2:88:60:6b:c7:df:36:15:d8:e4:89:
                    08:17:df:65:81:25:ad:3c:08:65:06:a5:78:8e:dc:
                    4e:86:6c:03:80:b3:87:4a:d3:6a:d3:26:9b:fa:9e:
                    3c:7d:dd:74:c6:66:c9:89:a1:01:e1:e5:b6:36:67:
                    bb:94:82:af:8f:05:8a:40:d7:d7:fb:1f:09:46:ff:
                    ff:3d:c2:86:df:bf:38:ad:0c:e6:0e:37:55:64:06:
                    b7:95:ff:2b:44:65:25:e3:1c:a2:89:70:f1:e5:c3:
                    52:e1:c7:f8:75:85:2a:7e:15:c9:d7:0c:c4:7f:c4:
                    04:36:64:fc:e8:35:1c:53:8c:67:b3:88:37:5b:20:
                    67:e5:53:d3:5a:6f:0c:17:d9:e8:0f:93:55:77:31:
                    ca:e0:bb:a8:96:9e:5c:9f:ed:ad:5e:b7:e8:f0:45:
                    35:6e:c0:be:70:86:26:c0:dc:af:1b:6f:04:8d:88:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:C4:F3:AE:89:B9:5A:2F:25:76:0D:25:A3:F5:FF:FB:6F:41:85
            X509v3 Authority Key Identifier:
                keyid:28:74:2B:63:E4:57:B1:F9:E7:C7:63:21:D3:C5:70:7E:9F:35:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHQrY-RXsfnnx2Mh08Vwfp81IrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/KHQrY-RXsfnnx2Mh08Vwfp81IrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e6e0e5-9864-4657-aa23-5581caf05d98/1/KHQrY-RXsfnnx2Mh08Vwfp81IrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:d2:64:d9:c5:30:6d:ca:8c:0c:f0:56:c8:cd:ea:66:3a:
         23:12:4e:75:4b:69:cc:01:0b:8b:62:50:61:9b:06:cb:c9:51:
         cc:4c:94:ae:5a:8e:c9:56:6f:68:d4:53:1f:84:d6:4b:d6:f3:
         43:3c:2a:67:75:1a:9e:0c:61:43:4c:0e:3d:a9:f5:4d:75:8e:
         d7:b6:4b:1e:9f:e3:d1:c2:66:ab:c0:60:2d:8f:73:a8:69:b1:
         b2:7f:30:46:14:c3:45:73:8a:af:04:25:61:30:10:34:f9:65:
         e8:a0:0e:c5:f7:9d:8a:96:9c:47:53:ae:59:60:39:e3:49:04:
         91:cb:bb:db:e4:74:a7:24:08:ef:d1:47:12:d1:31:03:e3:d7:
         72:5b:99:cf:d5:f6:7a:32:09:06:50:31:51:79:98:19:4c:67:
         fb:49:47:73:29:da:1f:f5:09:cc:62:e5:01:9c:c5:3c:d3:cd:
         1e:7e:bd:d8:ac:8a:2a:43:66:53:9d:92:f9:a8:7b:aa:34:7e:
         1d:19:95:75:82:5b:95:e8:f6:08:73:f3:df:57:07:ba:68:9f:
         f7:0c:35:88:20:cc:47:07:e0:46:07:d1:72:53:ca:7c:ae:47:
         b3:8e:c5:33:cb:04:b0:5b:d7:17:80:71:77:0e:75:61:e4:93:
         c9:42:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----