Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.mft
File:                     YYnHSVAuVTZqNQvqlzVPaZfDwyE.mft (raw, json)
Hash identifier:          TUZhI11vtlEDC2m57MSRWP/J/mVeILRqsldX/xHlfas=
Subject key identifier:   32:7B:00:74:4E:AC:A3:3F:02:AF:20:0B:E5:39:8D:E8:0C:1D:AD:CD
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Certificate issuer:       /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial:       018514271E4B54BD3E83214C5A436E4C7EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.mft
Manifest number:          0800
Signing time:             Thu 15 Dec 2022 04:59:45 +0000
Manifest this update:     Thu 15 Dec 2022 04:59:45 +0000
Manifest next update:     Fri 16 Dec 2022 04:59:45 +0000
Files and hashes:         1: FusjygidKuUutace3mT7vGxAP0E.roa (hash: NCt5Qe+pUazJ5y3MEixmTkNQOIMLlP6yHwo9BwSiEMQ=)
                          2: MTsmQPClBNmC2T2oFuK7i2FwAqw.roa (hash: J20qBCvDkUjH7/hleIl3umrizlYWKMIDReaNbInZprM=)
                          3: YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl (hash: /GDDCTI+VAfwme1BMAwYeNPQ9gsjKnB3VIxnwcraOWg=)
                          4: eYj0R1E8HY0xpma4AJZi2e8KaK0.roa (hash: NQQKkRneNchEQdem13lJi4kWKbtSKSbCuSWDPNOOkYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:14:27:1e:4b:54:bd:3e:83:21:4c:5a:43:6e:4c:7e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
        Validity
            Not Before: Dec 15 04:59:45 2022 GMT
            Not After : Dec 16 04:59:45 2022 GMT
        Subject: CN=327b00744eaca33f02af200be5398de80c1dadcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:68:e7:cf:5c:95:12:c2:b9:27:42:02:8d:
                    40:84:5f:bb:e1:f7:90:da:cf:58:7d:06:e3:50:d2:
                    8a:9d:09:f7:0a:03:0f:ce:76:b0:f8:49:58:d2:4b:
                    a5:44:9a:95:30:fd:ce:ff:b3:50:91:c1:d1:68:1a:
                    da:72:a1:11:38:7a:d2:04:e2:41:34:31:a1:05:58:
                    79:74:8c:a4:f9:d7:22:c8:a8:dd:f4:56:ea:f4:98:
                    b0:e7:6e:0c:be:cd:41:a7:70:0b:65:08:c4:d4:1a:
                    08:83:9a:ff:7b:11:61:5b:f6:41:cc:00:0a:76:9c:
                    d0:cd:d0:b7:5a:11:da:38:07:e8:c9:4f:86:b8:58:
                    ab:67:95:68:cd:85:57:7a:88:44:bf:db:83:f4:c8:
                    4d:83:e4:fd:7d:f3:40:2a:92:3f:f6:77:01:78:a9:
                    2d:0e:c5:51:da:48:49:c5:f4:27:d2:e0:05:1d:68:
                    26:83:ac:39:0d:ad:7c:23:94:17:48:2d:af:05:64:
                    ed:86:8d:f4:2c:45:b9:3c:ed:63:11:1b:86:93:3f:
                    d9:c8:dd:96:62:d6:58:31:cf:b9:dd:22:e4:50:19:
                    d7:1f:8c:fb:54:0e:8f:cd:14:36:09:66:92:c3:89:
                    3e:cb:96:8f:75:05:53:ca:23:0b:71:b9:93:8e:e5:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:00:74:4E:AC:A3:3F:02:AF:20:0B:E5:39:8D:E8:0C:1D:AD:CD
            X509v3 Authority Key Identifier:
                keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f5:de:cc:23:06:81:e6:7b:44:e0:51:3a:6f:dd:27:2b:99:
         36:d9:4f:c6:64:e3:8c:2f:c2:fe:c4:b1:6b:34:26:b7:cc:09:
         c4:aa:20:e4:2e:a0:8b:bf:0d:04:8d:49:c4:05:5a:8f:f4:0e:
         ed:ee:2d:95:f3:a5:5f:ab:ad:b5:6e:5b:d2:a0:1c:b6:96:a2:
         d5:6f:16:ad:4e:58:48:c4:de:7e:10:c7:3f:6e:d6:8f:39:77:
         3a:fe:6a:41:6a:7b:f2:ca:76:25:cf:c0:25:14:af:ad:41:2e:
         54:bc:de:7c:86:9f:48:9f:6a:dc:27:67:26:3a:3a:8f:36:a4:
         7d:be:63:c9:1b:1e:f6:cc:a4:60:7f:e5:00:ad:8a:ae:52:77:
         78:4c:46:13:d2:b6:2f:61:50:16:d2:c2:41:c8:ce:77:4d:4b:
         7b:5d:f7:ec:51:44:7a:49:46:01:02:fb:e3:e6:46:e5:f7:3a:
         cf:ae:08:ed:ad:df:1c:45:8c:74:55:8e:43:54:83:c0:08:c4:
         cf:8f:cc:ad:5b:55:d6:13:d6:8a:d0:fc:f5:73:77:75:e9:47:
         a0:66:66:46:f1:db:e9:ee:d3:8a:b5:05:76:b5:cf:fa:96:50:
         af:72:5a:18:dc:e9:c1:34:f6:31:7d:cf:16:ca:74:d0:91:24:
         a2:b8:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----