Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/vpqFGq6CY99flOkU6Oe-BDYOwxg.mft
File:                     vpqFGq6CY99flOkU6Oe-BDYOwxg.mft (raw, json)
Hash identifier:          e0OK450vkSxaIZVzt20Z8Y84vA+XjjjKg8VRq49oXvw=
Subject key identifier:   14:60:71:07:23:80:53:69:6F:ED:25:DC:43:EB:4F:AD:73:30:36:63
Authority key identifier: BE:9A:85:1A:AE:82:63:DF:5F:94:E9:14:E8:E7:BE:04:36:0E:C3:18
Certificate issuer:       /CN=be9a851aae8263df5f94e914e8e7be04360ec318
Certificate serial:       018552D3B9AD45AFD0237B9F136F1593632E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpqFGq6CY99flOkU6Oe-BDYOwxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/vpqFGq6CY99flOkU6Oe-BDYOwxg.mft
Manifest number:          0BEA
Signing time:             Tue 27 Dec 2022 09:04:45 +0000
Manifest this update:     Tue 27 Dec 2022 09:04:45 +0000
Manifest next update:     Wed 28 Dec 2022 09:04:45 +0000
Files and hashes:         1: vpqFGq6CY99flOkU6Oe-BDYOwxg.crl (hash: nfEHWisGhduhjY+6Qqyb/4Apnzye/ak7brgux+eOwHg=)
                          2: xyZE2-hxosuTMI29jk7qfhe6YLg.roa (hash: CGXLTu7ZNdcR8JmBRxUCd3UKGpECBvGqmRF2fI8eQ7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:52:d3:b9:ad:45:af:d0:23:7b:9f:13:6f:15:93:63:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9a851aae8263df5f94e914e8e7be04360ec318
        Validity
            Not Before: Dec 27 09:04:45 2022 GMT
            Not After : Dec 28 09:04:45 2022 GMT
        Subject: CN=14607107238053696fed25dc43eb4fad73303663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:89:a8:d7:ae:6e:b5:ec:71:2b:50:60:47:
                    22:d7:ab:26:d4:e5:51:15:a5:69:94:c2:af:b3:a7:
                    89:09:f1:af:a1:2e:e5:b3:a6:8b:19:52:de:df:4b:
                    55:3d:fd:00:9a:82:9f:a4:fb:ca:3d:17:2c:4f:73:
                    71:46:78:17:81:58:6a:de:9c:f9:86:5f:8f:f5:bd:
                    05:fd:de:ad:bb:67:1c:eb:36:98:d9:27:29:a8:21:
                    72:c1:0c:e1:e9:d7:a4:e7:1a:05:a7:ce:20:d7:ea:
                    4c:28:92:84:bd:87:ef:5c:62:36:0d:88:b3:87:89:
                    56:84:c6:0b:2e:0d:6f:1c:34:7d:bb:9d:87:ec:b9:
                    96:87:6b:d8:bf:ac:05:b9:ce:7f:04:ba:99:05:22:
                    b1:aa:5e:dd:5c:5a:96:d8:7a:ab:7d:2a:b9:30:d8:
                    89:05:36:ea:b4:e7:36:5c:c5:bb:4b:28:9b:b4:1d:
                    36:c0:57:82:8a:78:9a:31:40:65:c5:3c:23:4b:f7:
                    ef:4b:44:c8:65:ff:36:6d:6b:96:a7:ed:a8:04:2c:
                    e5:e5:94:a0:42:5b:8d:3a:93:f3:ae:c8:57:7d:5c:
                    40:42:f6:9c:87:55:b7:9f:c7:4d:91:41:9f:05:35:
                    4e:e9:7d:12:64:34:8f:0e:b2:10:9c:ac:e8:15:a7:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:60:71:07:23:80:53:69:6F:ED:25:DC:43:EB:4F:AD:73:30:36:63
            X509v3 Authority Key Identifier:
                keyid:BE:9A:85:1A:AE:82:63:DF:5F:94:E9:14:E8:E7:BE:04:36:0E:C3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpqFGq6CY99flOkU6Oe-BDYOwxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/vpqFGq6CY99flOkU6Oe-BDYOwxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/vpqFGq6CY99flOkU6Oe-BDYOwxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:9d:f3:95:df:50:55:94:9a:7f:b2:a7:86:28:6d:f2:63:
         88:55:42:c8:21:1f:68:2b:32:a8:88:c1:a3:68:35:15:d6:52:
         55:e1:bc:1d:54:14:16:a1:21:98:cc:3a:37:dc:56:9d:24:bb:
         ed:48:fc:af:f7:a7:6a:94:e6:16:2a:ef:58:de:07:ed:9a:95:
         c4:d9:ed:98:0d:e7:96:16:41:42:70:6d:f7:07:c1:8d:a7:29:
         3a:fc:aa:69:22:19:17:c9:bc:f2:8e:c5:4a:f8:d8:d0:a3:f2:
         96:8a:c3:10:0c:b4:86:8d:f1:26:a0:0f:46:dd:26:ba:fb:47:
         bc:b3:26:75:d9:f2:84:b4:bc:53:b6:f0:ca:41:47:d7:07:68:
         45:d7:59:a8:5d:5f:c6:7c:0c:ae:d9:6f:61:14:25:bc:07:ec:
         56:2b:8e:7c:63:23:b4:e4:ab:28:da:61:c7:2c:99:1c:fa:41:
         87:b0:ee:d7:d0:d9:6f:0f:ce:9e:dd:81:30:1e:cb:97:48:f1:
         3e:07:f9:88:63:c9:28:dc:fa:62:d7:f8:30:97:4f:24:fa:81:
         73:5e:cc:19:13:e4:3d:ac:60:59:22:33:07:5b:94:01:0c:2a:
         31:bc:01:3f:6d:86:b6:6b:66:62:d9:06:f2:ed:c1:41:55:4f:
         99:82:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----