Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/nZGpaaubnuLWpcZOiyn0rjuy6pE.mft
File:                     nZGpaaubnuLWpcZOiyn0rjuy6pE.mft (raw, json)
Hash identifier:          RWbbsDot6mr1MZsr/GTopX//vOkUrZzrCkqcNIYt1p0=
Subject key identifier:   DB:10:8F:E3:EE:F7:BD:6B:36:6B:C8:76:B4:30:96:F8:7E:8A:67:9A
Authority key identifier: 9D:91:A9:69:AB:9B:9E:E2:D6:A5:C6:4E:8B:29:F4:AE:3B:B2:EA:91
Certificate issuer:       /CN=9d91a969ab9b9ee2d6a5c64e8b29f4ae3bb2ea91
Certificate serial:       01840DDC163249EA523CEBF9227E2A517217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nZGpaaubnuLWpcZOiyn0rjuy6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/nZGpaaubnuLWpcZOiyn0rjuy6pE.mft
Manifest number:          0649
Signing time:             Tue 25 Oct 2022 06:37:18 +0000
Manifest this update:     Tue 25 Oct 2022 06:37:18 +0000
Manifest next update:     Wed 26 Oct 2022 06:37:18 +0000
Files and hashes:         1: YFL4p-D3lpuZsId4HUOKmPJkgDQ.roa (hash: FfGFNpNFaW8OF2YP5tdMbLR6yco/gM3JjlvaNCJiHlI=)
                          2: nZGpaaubnuLWpcZOiyn0rjuy6pE.crl (hash: QUyGzM+5PQ5pOcpQavKiuViDLejuryWTWWfGO7z5BME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:dc:16:32:49:ea:52:3c:eb:f9:22:7e:2a:51:72:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91a969ab9b9ee2d6a5c64e8b29f4ae3bb2ea91
        Validity
            Not Before: Oct 25 06:37:18 2022 GMT
            Not After : Oct 26 06:37:18 2022 GMT
        Subject: CN=db108fe3eef7bd6b366bc876b43096f87e8a679a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:35:97:13:a9:1c:8b:28:4b:c3:59:72:e5:
                    30:d2:6e:d5:4e:bf:51:0b:08:c6:73:8c:b4:53:4e:
                    b0:67:8e:93:ff:44:32:30:f3:7a:22:41:05:fc:40:
                    e3:ae:70:02:3f:f8:f3:0e:76:5a:17:dc:13:02:d0:
                    9b:f5:8d:f4:a1:e4:ae:15:f5:2d:97:97:6b:44:84:
                    bb:2d:8e:4e:47:89:21:f6:a9:0d:f6:d2:d8:53:a4:
                    7f:c0:8f:dd:d0:ae:8a:d7:f9:63:94:b1:a3:28:51:
                    aa:ed:63:eb:00:ab:05:4b:8d:cd:8c:34:03:05:70:
                    55:2d:49:4f:57:39:c4:1f:61:53:7f:f9:21:a4:8d:
                    eb:c2:71:1d:e0:4a:05:af:1d:1d:aa:91:8d:42:c3:
                    b6:f1:56:29:b8:d9:08:99:b2:06:27:a1:14:5b:9b:
                    a1:ac:32:36:f2:75:f3:c8:a3:79:ad:b2:4b:38:a0:
                    fd:27:95:02:54:d6:dd:3a:ed:0e:28:31:68:0e:cb:
                    30:7e:05:c9:4e:f4:aa:0c:ce:c5:17:69:09:dc:77:
                    9f:fa:5a:01:2d:4e:c3:a5:30:63:13:67:04:39:fa:
                    f4:c1:a8:ea:c1:58:84:30:34:d7:44:0f:49:10:0b:
                    ef:82:51:b9:da:73:75:09:83:a3:55:54:27:ab:3f:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:10:8F:E3:EE:F7:BD:6B:36:6B:C8:76:B4:30:96:F8:7E:8A:67:9A
            X509v3 Authority Key Identifier:
                keyid:9D:91:A9:69:AB:9B:9E:E2:D6:A5:C6:4E:8B:29:F4:AE:3B:B2:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZGpaaubnuLWpcZOiyn0rjuy6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/nZGpaaubnuLWpcZOiyn0rjuy6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/nZGpaaubnuLWpcZOiyn0rjuy6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:cc:06:81:db:f8:2d:1b:19:ac:a7:68:15:34:10:50:2c:
         af:1e:fc:b9:92:c4:4a:2f:de:51:29:c7:a0:d1:d1:b1:97:b6:
         f7:4e:e7:5f:43:4c:f9:d4:8d:aa:e4:8b:fc:12:9c:0f:63:4f:
         5d:68:cc:f6:9b:07:50:29:07:3c:ee:2e:99:c9:de:ba:a4:92:
         7a:1e:d2:13:b0:3e:37:1a:0d:f0:77:34:b0:e6:a0:a1:65:d2:
         99:6c:cd:52:75:36:18:9a:2b:05:bf:fe:24:d4:df:20:4a:aa:
         c2:f2:bd:ef:49:53:9a:05:52:0e:68:af:cf:df:1c:64:77:d0:
         b6:ec:3f:96:e1:cb:d9:74:df:f4:39:dd:32:0f:cd:1a:0b:7e:
         e2:86:2c:78:c9:79:79:88:bf:a4:0f:b4:53:f9:c0:77:01:b0:
         4e:30:37:ea:0c:7f:62:07:80:9f:87:19:5a:41:6c:84:a6:28:
         6b:57:2b:f2:29:71:37:0e:4e:05:7d:58:59:8d:57:5c:88:1f:
         a0:d7:ac:50:b8:b0:c4:4f:26:33:14:7c:58:dd:f6:56:d9:b8:
         f2:13:22:15:c9:9a:4f:fb:2b:93:91:5f:ad:ba:1e:ff:b9:7a:
         d3:44:0b:e4:3e:4f:3b:ab:ef:34:e4:c6:c4:61:05:a3:32:1d:
         ad:42:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----