Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/__YhBCy9DKjl2esaM0tBpDgc6hg.mft
File:                     __YhBCy9DKjl2esaM0tBpDgc6hg.mft (raw, json)
Hash identifier:          lkMRjtRXelcHiGGgmwfuwXTtRtDA/b9d5i4ewHS+cqI=
Subject key identifier:   40:9F:86:19:08:D5:8E:92:8D:BB:83:0B:E6:B4:EF:55:1F:FC:B0:D0
Authority key identifier: FF:F6:21:04:2C:BD:0C:A8:E5:D9:EB:1A:33:4B:41:A4:38:1C:EA:18
Certificate issuer:       /CN=fff621042cbd0ca8e5d9eb1a334b41a4381cea18
Certificate serial:       01841B3EFC20D2FD73DECFC4181EEB76F4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__YhBCy9DKjl2esaM0tBpDgc6hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/__YhBCy9DKjl2esaM0tBpDgc6hg.mft
Manifest number:          68
Signing time:             Thu 27 Oct 2022 21:00:23 +0000
Manifest this update:     Thu 27 Oct 2022 21:00:23 +0000
Manifest next update:     Fri 28 Oct 2022 21:00:23 +0000
Files and hashes:         1: ZNwM-fViuGe7uppEAjuE-lOuY_8.roa (hash: Z3MNGzwq1BVbQsGv0BY+SnL7r5SL3FgFq+aZsSMBzuY=)
                          2: __YhBCy9DKjl2esaM0tBpDgc6hg.crl (hash: tPVNrg46HU66L+K0Q1c5wXjYsNia1FDcBo0gnhoQx/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1b:3e:fc:20:d2:fd:73:de:cf:c4:18:1e:eb:76:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff621042cbd0ca8e5d9eb1a334b41a4381cea18
        Validity
            Not Before: Oct 27 21:00:23 2022 GMT
            Not After : Oct 28 21:00:23 2022 GMT
        Subject: CN=409f861908d58e928dbb830be6b4ef551ffcb0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:82:d3:9f:a9:b9:69:18:27:8a:4f:90:fb:
                    b2:7b:9c:57:9c:01:5f:92:4e:4b:b7:eb:69:e8:5c:
                    41:22:28:e4:90:32:74:be:89:01:f7:18:dd:61:aa:
                    f3:fd:a0:34:9b:5d:0a:3d:7b:41:8d:d0:04:13:54:
                    34:e2:4b:47:a7:ea:89:6e:10:39:9d:19:ea:93:d7:
                    c0:2b:e3:56:63:92:29:c8:47:f6:ef:d4:45:06:fe:
                    dc:19:78:d9:b2:63:c9:de:82:23:20:78:86:f3:16:
                    73:4c:67:14:f4:52:db:46:30:46:68:2d:ea:2a:e1:
                    c6:0a:95:a4:ad:db:ca:d5:05:e5:a7:5f:6d:0e:a0:
                    49:75:a1:12:17:68:fc:a5:60:f9:27:21:a3:22:ea:
                    26:fb:25:d8:32:71:aa:22:80:b6:3b:24:2a:21:30:
                    f9:c9:e9:03:79:5f:55:0e:f5:5a:33:ed:97:af:2f:
                    ee:a3:02:8f:bc:a0:a1:be:14:d9:ab:7b:a7:83:aa:
                    65:52:26:1d:93:25:24:b9:8a:a0:ad:a4:24:70:05:
                    f8:d2:90:5f:66:99:c4:97:6c:1e:a7:68:78:73:d4:
                    61:50:a9:b1:6b:cc:fa:8a:25:d6:ff:e5:d0:e2:30:
                    58:00:c8:b5:90:22:d7:1a:f3:a3:aa:53:7e:74:7c:
                    44:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9F:86:19:08:D5:8E:92:8D:BB:83:0B:E6:B4:EF:55:1F:FC:B0:D0
            X509v3 Authority Key Identifier:
                keyid:FF:F6:21:04:2C:BD:0C:A8:E5:D9:EB:1A:33:4B:41:A4:38:1C:EA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YhBCy9DKjl2esaM0tBpDgc6hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/__YhBCy9DKjl2esaM0tBpDgc6hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/241a77-46f7-4821-be9f-9ff0f52f10e8/1/__YhBCy9DKjl2esaM0tBpDgc6hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:e4:6c:c8:cc:23:17:cc:82:fd:34:f4:8b:a7:58:f5:73:
         30:08:b1:8e:d7:2c:6a:31:9b:3f:c6:fb:06:48:06:bd:d1:29:
         e3:ae:14:33:76:d5:05:93:a4:bd:84:13:82:31:74:23:48:d6:
         b6:f6:2b:6a:f0:e4:80:0a:43:51:b9:6b:4a:5c:80:14:41:eb:
         57:f7:a5:76:c2:c8:59:46:40:b9:d9:11:a6:97:6b:01:c9:74:
         b2:f1:87:8b:a5:cf:b5:59:23:27:f8:6f:56:af:76:00:f9:fd:
         75:27:30:c9:a8:7e:d2:ba:6f:dc:8f:94:b3:12:cd:d8:33:bf:
         fe:0c:23:bb:e4:ce:ed:bc:3c:38:9c:dc:f9:99:85:e0:f8:53:
         be:77:04:f1:3c:3b:e0:40:ec:51:7c:70:cc:bf:6f:5b:8b:ec:
         ce:b5:17:ed:b2:7c:90:f6:1c:8b:42:e1:00:9a:a0:82:69:41:
         1f:ee:1d:62:fa:01:2f:f8:50:fd:95:16:c2:d5:a7:6d:2c:42:
         84:e8:b2:4c:ac:e6:c3:ae:0a:77:46:e5:11:ac:aa:c9:f2:3b:
         dd:67:ae:63:12:50:60:eb:0c:1d:ef:5e:d6:d4:96:85:f2:19:
         b7:95:26:3a:fb:0c:b1:46:53:7c:13:42:e5:c3:85:de:51:4e:
         49:0b:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----