Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/HdmBdm9K2XD3iwd-EiTRCJrkHoY.mft
File:                     HdmBdm9K2XD3iwd-EiTRCJrkHoY.mft (raw, json)
Hash identifier:          JRlSzUkFcPqKNLkExNlwTVSYW9fbvMyEjtMaEi56dq8=
Subject key identifier:   CD:42:F9:D7:4F:DE:C2:3C:B8:E1:4A:79:B7:B6:67:5C:57:C1:68:09
Authority key identifier: 1D:D9:81:76:6F:4A:D9:70:F7:8B:07:7E:12:24:D1:08:9A:E4:1E:86
Certificate issuer:       /CN=1dd981766f4ad970f78b077e1224d1089ae41e86
Certificate serial:       01853736892791EFF8992CB741AC535E2066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdmBdm9K2XD3iwd-EiTRCJrkHoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/HdmBdm9K2XD3iwd-EiTRCJrkHoY.mft
Manifest number:          04FD
Signing time:             Thu 22 Dec 2022 00:23:18 +0000
Manifest this update:     Thu 22 Dec 2022 00:23:18 +0000
Manifest next update:     Fri 23 Dec 2022 00:23:18 +0000
Files and hashes:         1: 9DtVwtp-Dxt0J-9EUekpxwj0VP8.roa (hash: g3kqd4Z6n2NH/Yg/gnKW6fvoWTv48yq6oZHteG/QMpI=)
                          2: EujgYtHHJrLUHHXf4GeEDMM0Y_w.roa (hash: 77JdsV9RN9Hk1+lHXPYl4dMQw43Q5bG/dZdzzak7eCU=)
                          3: HdmBdm9K2XD3iwd-EiTRCJrkHoY.crl (hash: oq1k/9zBUyKgwrCa1DIV87t7PjoRWLpEg/hMeNXvWR4=)
                          4: T2o0OC4-HOXXtQDWXvUxR_R0fzk.roa (hash: 6emS8s1rc8FCTDcpErzLHerR/WeQ032slHQOhiU4/GE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:37:36:89:27:91:ef:f8:99:2c:b7:41:ac:53:5e:20:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd981766f4ad970f78b077e1224d1089ae41e86
        Validity
            Not Before: Dec 22 00:23:18 2022 GMT
            Not After : Dec 23 00:23:18 2022 GMT
        Subject: CN=cd42f9d74fdec23cb8e14a79b7b6675c57c16809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:d5:57:b0:63:7b:e3:ac:96:19:3a:f7:a0:
                    8b:03:e0:1d:28:a7:6f:58:58:ee:8a:9e:e3:ae:c4:
                    0c:b7:7f:85:07:15:f7:7e:8c:b9:d8:c9:6c:ce:4e:
                    dd:d6:17:22:d2:7f:06:d6:c3:eb:a1:ff:b3:60:11:
                    e6:3c:cf:f3:36:c6:6e:bd:d7:37:89:01:2b:ff:4c:
                    02:6c:f6:64:cf:9f:e3:c1:42:d6:6e:85:d6:f4:16:
                    98:7a:7b:5c:c7:55:2a:8d:33:ee:e4:03:5a:b2:49:
                    89:c4:15:12:0c:f8:c2:d1:1d:be:de:60:fe:fc:89:
                    88:78:7e:da:d2:d9:30:2d:3d:b5:37:4a:33:56:89:
                    08:3e:4e:07:bb:b6:c6:6c:aa:f1:14:33:90:c5:68:
                    1b:a5:2b:30:70:70:31:f8:22:7d:5e:1f:0f:1e:f1:
                    f5:90:09:c8:29:60:fb:09:3d:57:00:54:83:71:31:
                    d3:7c:46:36:7c:2c:99:d1:c2:ac:eb:c3:20:c7:a6:
                    61:39:5d:2b:9a:2d:4d:af:f1:44:11:5e:4f:a6:34:
                    97:ad:2b:32:71:9f:3e:a0:a0:b3:88:e9:f4:76:7b:
                    a8:74:74:4c:02:cb:3e:e8:45:93:48:74:de:dd:b6:
                    7a:7c:5c:ac:66:90:58:e8:a1:33:12:f8:cb:fb:01:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:42:F9:D7:4F:DE:C2:3C:B8:E1:4A:79:B7:B6:67:5C:57:C1:68:09
            X509v3 Authority Key Identifier:
                keyid:1D:D9:81:76:6F:4A:D9:70:F7:8B:07:7E:12:24:D1:08:9A:E4:1E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmBdm9K2XD3iwd-EiTRCJrkHoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/HdmBdm9K2XD3iwd-EiTRCJrkHoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/HdmBdm9K2XD3iwd-EiTRCJrkHoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:4f:30:48:ff:64:31:67:34:d9:10:bb:3c:b1:ed:ca:83:
         32:20:c8:3d:ab:51:4c:e6:b6:70:65:a6:9d:42:c5:34:43:be:
         c7:24:ee:da:69:2c:0e:c1:4e:24:cf:00:0c:f2:0a:b0:ef:d2:
         6a:07:d2:b4:6a:c8:1d:9c:34:61:fe:24:60:e3:a2:a0:43:d1:
         2c:e3:69:24:e7:23:d8:a5:36:54:8e:d0:d5:39:1b:b5:b6:6f:
         2e:cb:93:f0:5d:cb:4f:35:5d:9c:5a:09:e1:0c:c0:9f:95:99:
         79:89:93:5d:e8:1c:a1:eb:13:ec:f6:c0:08:5a:4c:c7:5b:de:
         2f:84:81:b0:04:6e:aa:56:1d:0d:c7:8c:81:d8:6f:f1:c5:e4:
         54:16:b9:da:2a:a9:27:4c:0a:ff:c8:44:ca:4b:b8:a6:b4:fd:
         1f:ed:4c:34:5b:23:62:c2:8e:8e:97:8d:93:de:38:8e:e9:56:
         93:ed:6c:e4:59:77:79:ac:6b:16:d5:21:9f:3c:b7:3b:04:23:
         53:5b:55:0a:58:91:68:94:59:48:cd:b7:d3:2f:8e:4e:c4:91:
         f3:0b:be:7c:5b:b8:4b:8f:32:0a:71:84:d1:ea:3f:17:c9:69:
         8e:02:53:e6:ad:fc:9a:5a:81:d9:e7:47:0a:f1:33:ca:b5:5b:
         d7:7b:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----