Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.mft
File:                     jOAlJLw9JfyHOi9cRUpyjMUIAJ4.mft (raw, json)
Hash identifier:          /JQzkdxFXhz0RW8RpnHe7g4nx5K1bjy5r1N8YYVnP6Q=
Subject key identifier:   3F:17:B6:3F:32:4F:A0:ED:97:61:84:1D:D2:31:D7:D0:1B:B0:D2:35
Authority key identifier: 8C:E0:25:24:BC:3D:25:FC:87:3A:2F:5C:45:4A:72:8C:C5:08:00:9E
Certificate issuer:       /CN=8ce02524bc3d25fc873a2f5c454a728cc508009e
Certificate serial:       01832FE1CBC6B465E1ECF903D27B354BC269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.mft
Manifest number:          0AC1
Signing time:             Mon 12 Sep 2022 04:07:50 +0000
Manifest this update:     Mon 12 Sep 2022 04:07:50 +0000
Manifest next update:     Tue 13 Sep 2022 04:07:50 +0000
Files and hashes:         1: A4vUcx5ehjP6f2coHveQ4AdSzkg.roa (hash: pvhmP6kggOQ9g00F3Swb2I6wKYQHqXlkI1BO3aH1KTA=)
                          2: jOAlJLw9JfyHOi9cRUpyjMUIAJ4.crl (hash: fwy5JJhmPQwZ4S8Cq0GksbnwMOvgYKQ9th567RIIcqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2f:e1:cb:c6:b4:65:e1:ec:f9:03:d2:7b:35:4b:c2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce02524bc3d25fc873a2f5c454a728cc508009e
        Validity
            Not Before: Sep 12 04:07:50 2022 GMT
            Not After : Sep 13 04:07:50 2022 GMT
        Subject: CN=3f17b63f324fa0ed9761841dd231d7d01bb0d235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:27:79:26:1b:d2:ee:f8:e4:db:ac:0b:32:
                    39:3e:c7:61:2f:cb:bb:0b:a1:51:f6:3f:c3:41:1a:
                    02:55:07:e9:7d:4b:26:80:64:d1:50:70:21:4e:eb:
                    09:cb:1d:41:16:dd:b7:b0:98:84:dc:3c:15:49:27:
                    24:88:46:55:1b:65:96:8e:cc:d6:74:74:7f:5f:da:
                    cb:64:03:e6:8d:c0:32:39:20:58:7f:f8:1c:b4:f4:
                    93:c5:0e:be:97:f2:da:5c:18:2d:d0:f2:59:74:e2:
                    a0:af:b1:ea:83:06:22:bc:41:3f:ef:c5:5a:52:9b:
                    b8:22:dc:99:c1:a5:b4:fb:6a:d3:fb:86:dc:f2:73:
                    40:13:92:1e:3d:5c:9e:a2:19:a5:2f:91:40:14:a1:
                    24:21:d3:58:a9:07:db:d4:42:0d:c7:5f:0b:1e:b0:
                    2a:05:40:e5:b9:9c:f9:c5:dc:4f:30:cf:77:59:49:
                    f3:98:d3:92:93:15:1e:e7:5b:95:cb:91:c1:cc:73:
                    9f:c9:c8:a5:a8:2c:58:b7:d8:bd:03:2b:c2:d8:cf:
                    c7:38:2d:5d:0b:1e:bf:93:1f:2f:7b:7b:81:8d:5a:
                    5f:80:8c:8a:03:6a:fd:9c:83:a7:8d:d2:c2:38:5f:
                    70:c1:93:8a:90:9e:07:c8:ef:09:02:90:e8:fe:b5:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:B6:3F:32:4F:A0:ED:97:61:84:1D:D2:31:D7:D0:1B:B0:D2:35
            X509v3 Authority Key Identifier:
                keyid:8C:E0:25:24:BC:3D:25:FC:87:3A:2F:5C:45:4A:72:8C:C5:08:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:ed:3b:0e:a4:b1:6e:6b:70:07:ce:32:a8:f0:f1:c3:d1:
         d0:80:5f:fe:25:76:73:53:71:1f:32:4b:44:1c:ca:7a:52:c5:
         90:4e:55:dd:cb:88:6b:1b:ed:0f:57:08:14:36:49:2c:16:fb:
         94:f4:93:a1:d6:45:75:8a:d7:d8:e5:23:0f:d5:b9:94:9f:3a:
         d6:e0:83:16:6c:e4:ba:88:e4:be:26:d8:3a:c3:60:18:4e:d8:
         47:c2:5d:27:00:89:10:49:de:70:ec:15:5a:d1:ef:70:22:2f:
         0f:cc:59:27:91:9b:6b:25:9f:bd:d5:bd:e2:33:20:d3:40:6d:
         91:b7:e7:09:73:d1:d1:e5:aa:38:90:c1:fa:4d:36:b1:64:2d:
         05:a9:87:71:bc:8d:20:9c:ed:01:85:47:63:80:92:cb:10:60:
         5e:df:e6:96:c2:33:a8:14:6d:97:bc:bf:98:ed:3c:2a:30:39:
         e4:4c:e8:92:48:d6:90:a2:42:40:57:6c:46:89:3f:e0:b3:97:
         1e:82:c2:5c:5c:3c:44:7c:7f:5f:74:b8:b8:66:cd:54:5a:4e:
         96:6e:b8:6c:e3:73:ec:af:cc:ca:b3:82:7c:6f:28:8a:2b:db:
         d7:3a:e4:58:72:3d:70:85:f3:ee:c9:a1:cd:58:61:4b:a7:77:
         86:c0:72:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----