Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/lDbbHOpuWr0LpGx-phtmCmfRQwo.mft
File:                     lDbbHOpuWr0LpGx-phtmCmfRQwo.mft (raw, json)
Hash identifier:          eC59B69M7jhIOi9UnbXxVaipITqUu2GfnfzpdveIHlY=
Subject key identifier:   5E:28:25:7A:7D:6E:F5:22:D2:9E:D3:8C:FB:A0:AC:A6:A2:6F:9A:BE
Authority key identifier: 94:36:DB:1C:EA:6E:5A:BD:0B:A4:6C:7E:A6:1B:66:0A:67:D1:43:0A
Certificate issuer:       /CN=9436db1cea6e5abd0ba46c7ea61b660a67d1430a
Certificate serial:       0184660422F2F4167FD64088F5C365CBFC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDbbHOpuWr0LpGx-phtmCmfRQwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/lDbbHOpuWr0LpGx-phtmCmfRQwo.mft
Manifest number:          02EE
Signing time:             Fri 11 Nov 2022 09:27:37 +0000
Manifest this update:     Fri 11 Nov 2022 09:27:37 +0000
Manifest next update:     Sat 12 Nov 2022 09:27:37 +0000
Files and hashes:         1: ZVt4oIx6VzLU8EBbGxz23otYpv0.roa (hash: 4NK1hT3HfY3Mp1WYw8bj1lzyYg0MhyYIMvZe37iwpXM=)
                          2: lDbbHOpuWr0LpGx-phtmCmfRQwo.crl (hash: VZjawVul5+QuPn14DKggRjyl5SpITc1uTJUXxO3Qzoc=)
                          3: mfMCZ1mf89wixwVauU3h51QTuGM.roa (hash: oGAM1pmedeyu8/n4qv3VxktbCa48+2Wk22NdgTHjWRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:66:04:22:f2:f4:16:7f:d6:40:88:f5:c3:65:cb:fc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436db1cea6e5abd0ba46c7ea61b660a67d1430a
        Validity
            Not Before: Nov 11 09:27:37 2022 GMT
            Not After : Nov 12 09:27:37 2022 GMT
        Subject: CN=5e28257a7d6ef522d29ed38cfba0aca6a26f9abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:b9:5a:0b:9a:62:45:dd:a2:8f:1b:bb:9d:
                    91:ca:a8:97:86:8b:88:f2:b4:bd:e5:70:00:74:45:
                    d2:3a:58:ed:8c:fc:81:88:24:2a:28:9e:31:13:6e:
                    0f:9a:4b:36:ee:68:4f:9a:08:7a:34:e5:3a:8b:f7:
                    40:f0:9e:a1:cb:21:d6:c8:ea:1a:e4:57:92:c8:f8:
                    2e:48:dc:49:38:4d:f9:5c:46:7f:92:91:29:5b:34:
                    53:17:00:28:ab:e0:5a:fe:96:2a:74:0f:95:c7:11:
                    a4:bc:5c:15:ee:72:06:8b:77:ec:be:2b:fe:68:e9:
                    d3:66:55:98:46:47:f2:66:b1:f9:d5:86:01:3b:1b:
                    b7:3c:c9:68:1c:16:d7:27:42:7a:4b:91:36:75:85:
                    3f:18:d0:24:66:a3:b0:62:a5:1f:f7:25:e8:55:c7:
                    6e:57:07:f8:a0:c0:ed:d6:2d:ea:da:dc:0d:4d:f7:
                    9f:6b:12:52:35:c1:12:7f:06:7d:1a:8d:8c:f4:73:
                    fb:9c:c0:77:ca:5c:66:fd:b8:96:68:96:0e:95:4a:
                    89:33:ad:23:9a:02:11:29:e2:66:15:ad:a1:36:bd:
                    22:e4:5b:61:a7:86:7d:04:ec:b3:67:9f:dd:dc:8e:
                    ab:06:f9:10:4d:e7:c4:c2:17:82:bf:4e:57:13:d1:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:28:25:7A:7D:6E:F5:22:D2:9E:D3:8C:FB:A0:AC:A6:A2:6F:9A:BE
            X509v3 Authority Key Identifier:
                keyid:94:36:DB:1C:EA:6E:5A:BD:0B:A4:6C:7E:A6:1B:66:0A:67:D1:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbbHOpuWr0LpGx-phtmCmfRQwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/lDbbHOpuWr0LpGx-phtmCmfRQwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/lDbbHOpuWr0LpGx-phtmCmfRQwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:81:8b:0d:ae:39:76:aa:73:88:ce:b3:da:03:3a:a0:ee:b7:
         bc:b5:67:5b:f8:f0:eb:81:ae:47:13:f5:a6:79:71:8b:fc:ea:
         f9:55:13:d8:f5:3f:81:82:64:72:c5:92:0d:2f:1b:f0:62:87:
         f1:9a:f3:80:b5:e3:02:fb:f8:90:52:96:a9:2d:46:fe:eb:c4:
         61:7f:ef:9b:34:50:6d:89:1f:16:66:a8:75:64:39:f3:42:08:
         15:c7:e5:9b:e1:e9:27:20:1b:3c:b2:ef:54:00:2c:13:c2:25:
         75:9f:85:1b:35:7a:1f:f5:60:67:be:ea:d0:0e:25:52:6f:b4:
         9a:fe:6f:8b:9e:47:36:75:4c:3b:f4:7d:31:ec:98:2a:f6:64:
         79:f5:2c:06:00:f3:7e:38:f0:90:e8:ef:87:34:4c:6b:cf:64:
         50:1d:08:99:2d:27:6d:db:d8:3b:fc:91:0d:c6:13:6d:2a:e2:
         e1:c8:1a:c4:6f:5d:d5:c5:11:34:5d:f9:a2:3f:04:f7:ef:1f:
         f3:84:b8:65:57:51:e2:50:e7:83:08:67:d4:32:53:e0:93:33:
         00:04:99:4b:28:e2:f2:b5:fe:e0:80:d6:d4:62:b9:9d:59:79:
         b7:cd:72:13:17:8a:bb:6e:e8:e8:cd:c9:2e:49:5a:3d:cd:cc:
         0a:c3:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----