Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.mft
File:                     KYUhYvBzIksa9b5vf9moQKKE27s.mft (raw, json)
Hash identifier:          i1+3CJ+QlzCjv31aB9+llsPg5SwOaUl7hmtlhkbS1/U=
Subject key identifier:   23:BD:0E:18:71:4E:A4:70:CC:10:5C:C2:54:95:D8:14:CD:74:CF:6F
Authority key identifier: 29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB
Certificate issuer:       /CN=29852162f073224b1af5be6f7fd9a840a284dbbb
Certificate serial:       01841BBC11F1889D2412EA1D308DEDE4221B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.mft
Manifest number:          0167
Signing time:             Thu 27 Oct 2022 23:17:00 +0000
Manifest this update:     Thu 27 Oct 2022 23:17:00 +0000
Manifest next update:     Fri 28 Oct 2022 23:17:00 +0000
Files and hashes:         1: BoM0XyVz8ok5PrtgEH3QgYBJ8FQ.roa (hash: j4lelBxBFlkaP7wQsZEquyNVwFvWXCf4wNT2MG18dvw=)
                          2: KYUhYvBzIksa9b5vf9moQKKE27s.crl (hash: QfRTMOwix1zy6NQQ80sow3wyakdGkvEtzkqLMgA86C8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1b:bc:11:f1:88:9d:24:12:ea:1d:30:8d:ed:e4:22:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29852162f073224b1af5be6f7fd9a840a284dbbb
        Validity
            Not Before: Oct 27 23:17:00 2022 GMT
            Not After : Oct 28 23:17:00 2022 GMT
        Subject: CN=23bd0e18714ea470cc105cc25495d814cd74cf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:9c:1b:55:94:c1:be:3f:9c:21:7f:47:3d:
                    0b:8f:d4:19:20:ae:c1:37:7b:35:d9:9c:57:be:0a:
                    2d:90:80:15:7f:13:b9:f9:30:8f:df:1d:ea:99:64:
                    76:87:b3:2b:28:36:56:c9:42:80:5c:f6:6b:97:b3:
                    47:a5:f0:bd:eb:d2:9d:54:c6:20:6f:dd:43:93:14:
                    5b:4a:2c:7d:64:a5:c3:df:18:a4:17:49:75:67:d9:
                    c0:68:48:e3:3d:20:b5:d6:d6:66:ad:b2:fd:f5:17:
                    86:8e:9b:ee:01:e5:70:ed:cf:ff:fc:3d:43:8e:10:
                    c3:bd:b1:bd:00:1d:14:9b:83:20:fa:26:93:99:28:
                    ad:e8:8d:6a:3b:12:b4:73:25:b2:01:b7:60:88:6b:
                    97:33:5a:d9:a5:09:1e:0a:9f:81:84:46:73:cd:c3:
                    04:05:e8:90:0c:e5:f7:28:c5:80:84:b0:53:cd:9e:
                    97:cf:5b:62:d3:e0:61:31:1c:dc:9c:fc:c4:4e:a6:
                    65:b4:26:8f:3e:67:d7:f8:e5:b5:20:f4:a8:1b:05:
                    d0:cc:a4:cf:34:d4:a0:42:ec:51:84:79:23:57:df:
                    d1:17:5a:a6:92:1e:a2:36:7b:fb:96:4b:bf:b2:14:
                    14:19:89:6a:e8:12:4e:3b:bf:c3:e0:5a:07:13:98:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:0E:18:71:4E:A4:70:CC:10:5C:C2:54:95:D8:14:CD:74:CF:6F
            X509v3 Authority Key Identifier:
                keyid:29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b9:79:51:49:87:4c:a7:58:a0:1b:66:13:06:f7:de:d2:a5:
         17:02:8e:b1:c1:a5:85:e6:a6:2f:e8:d0:3e:2a:10:0c:ab:5d:
         65:a2:ea:8c:da:20:72:ab:4f:76:15:e3:51:88:44:d3:df:9b:
         23:9b:be:e0:5c:6f:90:7a:0b:a2:43:f9:d2:f1:de:d1:43:44:
         2a:dc:f6:22:a6:d9:bf:ee:02:31:71:b4:0d:a2:33:3d:c6:14:
         72:67:2b:77:30:c2:9f:51:40:65:89:d1:3c:e5:bb:3e:de:d9:
         4e:11:3d:9b:75:ab:f2:de:7d:63:7d:82:54:5e:aa:4b:15:cc:
         f5:9f:56:c8:9d:c2:61:72:d0:3c:c6:71:3a:99:6b:f5:35:71:
         02:d7:73:cb:aa:1d:e7:d8:ad:3f:bd:2b:bf:f7:00:62:5b:74:
         10:be:06:cb:d5:60:fe:d0:ab:e6:e1:a9:ae:90:b6:77:25:69:
         31:02:c3:32:27:38:02:88:9a:d4:1e:63:41:4b:7c:09:d6:93:
         14:42:59:6f:f3:77:5b:03:45:b6:75:77:19:06:b2:e3:85:c4:
         08:af:a5:76:77:26:b7:64:e4:be:5b:30:e1:8d:61:78:e8:82:
         e2:66:de:14:de:a4:ce:50:d1:a8:22:54:82:27:b0:7c:91:c3:
         89:ac:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----