Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/3S9BXhIMr16jGMMnw4GPVJP34OU.mft
File:                     3S9BXhIMr16jGMMnw4GPVJP34OU.mft (raw, json)
Hash identifier:          vGNlv8r5u0u0yUM/Y1jkAorDi3pDACEExvvm6XeakUI=
Subject key identifier:   4F:F5:41:8C:46:C0:AD:7A:D8:51:7B:5B:D8:09:DC:BA:C7:22:35:D5
Authority key identifier: DD:2F:41:5E:12:0C:AF:5E:A3:18:C3:27:C3:81:8F:54:93:F7:E0:E5
Certificate issuer:       /CN=dd2f415e120caf5ea318c327c3818f5493f7e0e5
Certificate serial:       018649DF126D7328F183E81B69EBC242B185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3S9BXhIMr16jGMMnw4GPVJP34OU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/3S9BXhIMr16jGMMnw4GPVJP34OU.mft
Manifest number:          39
Signing time:             Mon 13 Feb 2023 08:23:21 +0000
Manifest this update:     Mon 13 Feb 2023 08:23:21 +0000
Manifest next update:     Tue 14 Feb 2023 08:23:21 +0000
Files and hashes:         1: 3S9BXhIMr16jGMMnw4GPVJP34OU.crl (hash: PShhz6EQiQjU/s00WL+TFrfVGZXq/waTh+itO+D7YA4=)
                          2: GCqa7RQXSmmw4wLpuJRxQGBMm3Q.roa (hash: QwAN1IPFOUUjnA+jK8HfijwxugTxUw/RrqpZitjk2JA=)
                          3: ZGmFNPrMB-BXEGM4PjsKL6XfuzQ.roa (hash: /AMkyQANbJL2qULrOUJ1wGKwrbV1LK9B6IruvrHeUWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:49:df:12:6d:73:28:f1:83:e8:1b:69:eb:c2:42:b1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2f415e120caf5ea318c327c3818f5493f7e0e5
        Validity
            Not Before: Feb 13 08:23:21 2023 GMT
            Not After : Feb 14 08:23:21 2023 GMT
        Subject: CN=4ff5418c46c0ad7ad8517b5bd809dcbac72235d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:0d:53:2b:c1:7d:82:5b:c1:9c:ef:71:69:
                    d0:ac:7a:b6:4b:d1:c2:20:95:75:7e:51:9d:f9:af:
                    24:1b:0c:35:e0:13:ef:e9:cc:21:38:60:8b:ac:9a:
                    6b:01:67:2d:b2:10:c0:7d:63:54:69:37:86:80:90:
                    f5:76:b9:d8:24:b2:39:95:2a:c0:0f:9a:74:41:52:
                    15:11:72:55:1a:5f:1a:9b:19:34:b7:a7:11:76:7d:
                    f7:f0:47:da:c7:25:89:f8:93:74:8a:55:23:b5:bc:
                    15:04:c4:22:d2:fa:ee:7c:e7:3d:20:81:8b:45:39:
                    9e:22:e8:b3:17:43:8d:f0:3c:7d:90:7b:e1:bb:ca:
                    f6:57:59:2d:df:74:9e:6a:f2:5e:e8:96:6d:c5:b0:
                    24:3b:c7:b9:04:0e:55:3c:f6:33:fa:ed:4e:01:1d:
                    51:07:84:6b:93:bb:74:d4:88:3b:04:bb:42:c4:85:
                    2a:27:b1:54:08:ef:de:4a:68:6f:06:28:45:01:9f:
                    e0:b8:50:6a:96:be:f8:67:8d:29:8d:75:e7:c8:45:
                    54:b7:03:7a:b4:88:64:a0:ef:73:3b:a9:78:be:82:
                    65:da:e8:bb:d2:2d:1d:f6:37:5e:64:5c:a4:06:82:
                    b2:88:70:a5:23:f6:57:ca:da:52:a7:de:8d:fe:0c:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F5:41:8C:46:C0:AD:7A:D8:51:7B:5B:D8:09:DC:BA:C7:22:35:D5
            X509v3 Authority Key Identifier:
                keyid:DD:2F:41:5E:12:0C:AF:5E:A3:18:C3:27:C3:81:8F:54:93:F7:E0:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3S9BXhIMr16jGMMnw4GPVJP34OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/3S9BXhIMr16jGMMnw4GPVJP34OU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/3S9BXhIMr16jGMMnw4GPVJP34OU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:c4:d1:dc:8b:2b:33:28:16:f6:0e:09:b5:41:60:41:22:
         da:3c:69:34:7f:6c:fd:cf:fc:12:56:25:0c:7b:40:2c:d3:be:
         32:c1:6f:08:e4:ef:ce:17:3f:6a:a5:dd:ed:43:07:bc:d6:86:
         48:26:39:78:dd:c3:f5:11:f2:ce:0c:e4:93:f9:07:e3:3f:ff:
         15:09:df:bd:bb:7c:83:a2:82:27:28:61:43:1e:56:9e:12:8d:
         ae:76:ba:be:ee:41:c4:3e:88:11:0f:fb:ad:9c:83:c7:29:98:
         7f:45:d4:b4:dd:43:8e:4e:4f:35:53:d9:a7:0d:01:2f:95:09:
         91:3e:8c:f4:01:f2:4d:6c:39:fd:34:fb:25:6e:0d:9a:46:6d:
         58:23:78:09:88:1c:1b:0f:1d:50:6c:59:5c:a6:19:88:4b:cd:
         7c:48:b4:98:e5:84:30:2b:a3:50:74:4c:15:37:4d:37:9a:77:
         61:64:e1:23:00:65:d0:3d:df:4e:9c:ee:05:c2:fd:98:1c:b1:
         10:9f:5a:41:43:c7:8d:77:a2:f4:f4:34:bc:67:d7:02:ca:da:
         aa:23:61:65:2d:b8:84:18:63:88:f0:14:18:97:91:4e:da:5c:
         12:05:f2:e3:cd:f7:e4:80:40:7d:ed:7d:de:e3:86:47:9f:21:
         16:9a:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----