Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/1-rG6eDkejziVo8tr-psA32v3X8E.mft
File:                     1-rG6eDkejziVo8tr-psA32v3X8E.mft (raw, json)
Hash identifier:          rZC722q37bB1eWyEfH3LCfzWpoCVxglXnPk1yuDOPsY=
Subject key identifier:   4C:07:A9:47:13:BE:9C:2D:E0:56:AB:C4:1F:E7:1E:D2:FD:E2:23:E2
Authority key identifier: FA:B1:BA:78:39:1E:8F:38:95:A3:CB:6B:FA:9B:00:DF:6B:F7:5F:C1
Certificate issuer:       /CN=fab1ba78391e8f3895a3cb6bfa9b00df6bf75fc1
Certificate serial:       01850C14E384C94CBE006AB837C95CEBF46F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rG6eDkejziVo8tr-psA32v3X8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/1-rG6eDkejziVo8tr-psA32v3X8E.mft
Manifest number:          0B2C
Signing time:             Tue 13 Dec 2022 15:22:53 +0000
Manifest this update:     Tue 13 Dec 2022 15:22:53 +0000
Manifest next update:     Wed 14 Dec 2022 15:22:53 +0000
Files and hashes:         1: 1-rG6eDkejziVo8tr-psA32v3X8E.crl (hash: vdYGFyL43NsfbkrFitPyJ6JmCBoL6NHEVNjOcMvGNP8=)
                          2: gAQVxSEb47mmtTgajSawOiZwv78.roa (hash: A8Er/2K5xYpsCFxD2vfOyHxzxjnrie9M7Hf5vQRnGdY=)
                          3: gfo3khfLFDsWKhZ6hqj1lY53O90.roa (hash: pZ2L6PGo1iJ2GU6LAxKN3KxR9Io+TkwqK2RAqna262M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0c:14:e3:84:c9:4c:be:00:6a:b8:37:c9:5c:eb:f4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab1ba78391e8f3895a3cb6bfa9b00df6bf75fc1
        Validity
            Not Before: Dec 13 15:22:53 2022 GMT
            Not After : Dec 14 15:22:53 2022 GMT
        Subject: CN=4c07a94713be9c2de056abc41fe71ed2fde223e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:06:64:34:5d:12:cd:b4:e5:3e:f0:a0:bb:
                    80:bd:29:82:09:29:d1:20:d1:ff:33:88:ff:e0:bd:
                    ef:cc:d6:eb:17:8e:59:58:83:47:10:7b:c0:65:11:
                    fd:c4:b7:f2:6e:3a:d0:05:cb:bd:9e:ec:3c:b3:b2:
                    c5:32:96:d8:1f:5f:75:c5:d0:d9:5c:1a:9f:ed:79:
                    79:31:fe:05:95:f1:13:80:b7:bb:26:d1:99:bc:33:
                    a8:46:8a:46:6a:26:f6:92:46:0d:b4:cb:7c:97:d1:
                    65:75:e8:8a:9a:56:84:f8:6f:bd:40:ec:f8:bb:a9:
                    e2:92:d7:58:fb:07:df:f9:c8:22:8c:0e:d6:b8:68:
                    95:32:da:4b:6d:9e:4f:79:f6:62:51:4f:88:6f:44:
                    c1:7f:02:58:29:85:16:6d:11:52:c2:c2:19:62:53:
                    f6:e5:45:92:7b:69:1d:ce:76:68:42:b4:c1:42:b2:
                    8a:d8:7a:ec:12:66:32:a7:35:2b:19:91:c9:57:c7:
                    eb:fb:d9:e4:97:86:94:a4:62:23:b0:79:6d:eb:c2:
                    09:ea:7f:aa:ae:47:ec:36:ed:a3:61:7f:d5:23:5c:
                    0f:0a:fb:24:c9:76:1b:3e:59:af:6c:00:55:fe:2c:
                    5a:00:7c:63:86:0e:40:e1:a9:5b:bc:60:64:25:b0:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:07:A9:47:13:BE:9C:2D:E0:56:AB:C4:1F:E7:1E:D2:FD:E2:23:E2
            X509v3 Authority Key Identifier:
                keyid:FA:B1:BA:78:39:1E:8F:38:95:A3:CB:6B:FA:9B:00:DF:6B:F7:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rG6eDkejziVo8tr-psA32v3X8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/1-rG6eDkejziVo8tr-psA32v3X8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/84746e-80e8-4e03-87db-547b574907ed/1/1-rG6eDkejziVo8tr-psA32v3X8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:77:dd:af:52:c5:c1:4a:9d:5e:b3:07:2a:db:01:c1:5d:
         48:4d:67:f1:ed:71:5d:12:f6:a2:0b:b2:67:10:72:a6:1e:c2:
         40:08:2a:aa:4d:75:6b:34:aa:f4:ea:7a:90:2b:b8:3b:ff:3f:
         e5:00:73:eb:bb:93:af:8e:36:8b:5d:c3:b0:e4:98:20:e0:57:
         23:1e:b8:02:9c:a4:a3:55:8c:60:46:6f:4c:32:3e:c7:5d:b5:
         18:90:0e:36:db:88:ab:ec:bf:8c:55:7b:88:c8:7a:a1:a2:52:
         9d:35:6a:8e:a7:01:e5:32:5c:03:8c:d2:35:b0:32:7a:e2:97:
         4a:06:d9:16:5a:e3:1d:60:46:e9:0e:39:87:70:43:cb:a4:18:
         44:cf:51:ec:cd:5e:bb:c8:9f:9f:a4:1c:0a:69:e4:21:ae:f1:
         f9:42:00:4c:fe:28:f3:33:4b:41:06:d9:88:4d:c6:7c:82:e5:
         f9:80:8d:ff:ed:2c:5b:22:d7:ed:6b:f0:56:84:b6:6b:58:07:
         1c:02:ef:81:12:cd:64:19:34:bf:29:22:af:15:03:1d:cb:ac:
         00:bc:1e:e1:05:e7:7a:af:56:5e:37:c2:ab:0d:6f:b8:bb:b5:
         85:cf:be:b3:25:8d:58:3b:ee:0e:33:ff:f7:a2:f1:d3:26:01:
         36:f8:a1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----