Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/bYNHLpivNQ5-HYm3N_8blYbOCnI.mft
File:                     bYNHLpivNQ5-HYm3N_8blYbOCnI.mft (raw, json)
Hash identifier:          eslUIil/NrraquO3Jiz9zkZhE1P5c422dUWrZMWdjI0=
Subject key identifier:   C0:C5:89:26:79:16:EF:17:1D:D2:61:C9:90:4A:C2:DC:5A:D0:DC:A1
Authority key identifier: 6D:83:47:2E:98:AF:35:0E:7E:1D:89:B7:37:FF:1B:95:86:CE:0A:72
Certificate issuer:       /CN=6d83472e98af350e7e1d89b737ff1b9586ce0a72
Certificate serial:       018556C2EABD81315CD9C5D21E7724D9A4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYNHLpivNQ5-HYm3N_8blYbOCnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/bYNHLpivNQ5-HYm3N_8blYbOCnI.mft
Manifest number:          030C
Signing time:             Wed 28 Dec 2022 03:24:52 +0000
Manifest this update:     Wed 28 Dec 2022 03:24:52 +0000
Manifest next update:     Thu 29 Dec 2022 03:24:52 +0000
Files and hashes:         1: 62hjq5uSHUAM3MCgd0YnK-mO6kg.roa (hash: 21JK/KHS6F/CVBAJgKVSBhwGLP0v1vU3/qg3q+pvLHY=)
                          2: bYNHLpivNQ5-HYm3N_8blYbOCnI.crl (hash: QQuDns0vJsLKZ4xZWSeTopG5lkjIR7e1+ndFuUdPbtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:56:c2:ea:bd:81:31:5c:d9:c5:d2:1e:77:24:d9:a4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d83472e98af350e7e1d89b737ff1b9586ce0a72
        Validity
            Not Before: Dec 28 03:24:52 2022 GMT
            Not After : Dec 29 03:24:52 2022 GMT
        Subject: CN=c0c589267916ef171dd261c9904ac2dc5ad0dca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:5b:26:2e:e5:3d:1a:20:60:20:66:0a:9d:
                    c3:60:1a:79:83:8e:44:97:91:c5:25:02:1b:c9:ec:
                    1d:0f:00:30:8a:38:82:59:a7:f6:f2:65:10:48:60:
                    6c:80:29:d9:f8:57:bc:78:41:fe:87:88:89:66:67:
                    f9:e2:47:ce:e6:5e:fd:95:58:b6:7d:57:eb:f1:d2:
                    c3:af:14:8b:61:ca:87:f0:96:ad:c5:b5:87:07:1c:
                    67:cc:3f:ba:95:63:eb:ca:ab:fb:ee:c1:7e:43:96:
                    92:2e:8c:d9:6f:b8:93:1b:79:cf:6f:05:81:d6:69:
                    f4:84:6c:21:22:a6:44:97:13:41:71:fc:4e:84:e7:
                    03:a6:73:74:49:a7:5b:96:54:d4:17:7f:74:a7:d6:
                    e8:e1:d7:6b:64:24:5e:6c:5c:f9:9a:bf:7f:5e:5f:
                    99:04:dd:29:4d:2e:ff:f2:03:0c:91:36:84:29:f2:
                    b7:2b:45:68:88:2f:4d:93:68:58:99:c1:f2:a0:80:
                    4a:7c:18:8d:ed:e3:a5:b2:d6:c9:01:e9:b6:b3:c4:
                    f5:83:73:65:e4:d6:9a:ec:cb:cf:f6:24:d7:8a:b1:
                    d4:b5:f9:4c:b7:e3:43:ce:eb:bf:d0:d8:9e:ca:2f:
                    e6:70:0c:4d:0a:39:a3:7c:cf:35:fe:0c:e9:0e:9e:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C5:89:26:79:16:EF:17:1D:D2:61:C9:90:4A:C2:DC:5A:D0:DC:A1
            X509v3 Authority Key Identifier:
                keyid:6D:83:47:2E:98:AF:35:0E:7E:1D:89:B7:37:FF:1B:95:86:CE:0A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYNHLpivNQ5-HYm3N_8blYbOCnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/bYNHLpivNQ5-HYm3N_8blYbOCnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/bYNHLpivNQ5-HYm3N_8blYbOCnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:25:18:b9:32:f9:72:78:4f:50:3b:03:35:37:99:4c:4f:a8:
         01:7b:42:3e:8e:cc:2f:b3:96:c8:ed:48:03:ae:ba:68:be:5c:
         1b:05:f0:19:5e:4f:fa:64:88:41:17:c3:12:f7:9a:da:ca:25:
         43:00:9d:59:2b:2a:02:6f:46:6a:71:9d:57:a9:06:2e:26:a2:
         2f:b0:56:6a:53:58:75:f2:42:99:87:85:2b:c9:ae:6a:b6:8b:
         7e:96:42:11:5e:9c:68:6b:06:97:aa:d7:14:cc:26:c4:5b:0b:
         0b:b6:98:de:fa:7b:25:ff:06:3e:98:78:c6:41:48:fe:4d:8f:
         80:0e:d1:e1:2e:5d:3a:cd:1d:d2:ce:c4:50:4b:b1:02:c8:30:
         0d:d8:63:f6:8b:da:2c:38:b1:25:96:86:8c:fb:fd:56:af:b4:
         ed:3f:15:38:c4:22:0d:e4:a8:98:a0:f3:4e:01:ae:cb:0f:25:
         29:e3:f8:99:54:19:65:99:de:2c:3f:b8:d6:d3:cb:6e:a5:b1:
         99:7b:78:dd:88:67:a3:c7:8c:2c:3b:42:dd:88:c2:79:ce:f4:
         a2:54:d9:d9:da:23:00:2a:65:de:6f:3b:55:a5:6f:14:84:c1:
         9c:bb:0f:50:47:74:54:e5:ee:2a:3b:80:61:58:0e:77:c8:6f:
         16:5b:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----