Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.mft
File:                     AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.mft (raw, json)
Hash identifier:          Oes5lxURjv12MyIaGw1dowUckoEfcz91KQ2JfhZfZf8=
Subject key identifier:   93:E6:E5:89:39:0D:0D:BE:1E:0B:56:CF:C3:B8:2C:B5:C3:70:F1:FF
Authority key identifier: 00:E2:D3:C0:80:07:75:93:94:70:6A:F7:4C:61:D2:B0:C2:76:62:C7
Certificate issuer:       /CN=00e2d3c08007759394706af74c61d2b0c27662c7
Certificate serial:       0183CAA7E264D95FE6F59E51502AC923080C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.mft
Manifest number:          0B0D
Signing time:             Wed 12 Oct 2022 05:25:43 +0000
Manifest this update:     Wed 12 Oct 2022 05:25:43 +0000
Manifest next update:     Thu 13 Oct 2022 05:25:43 +0000
Files and hashes:         1: AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.crl (hash: CVZgHZndK3GhRtDYkkJ0rvTfkutuTJJTUqq7vUA7yiU=)
                          2: fBXFslUUpTbGTh1hJsMdkzWkfvk.roa (hash: GdWh/g9MqqkH4BHRm9u9sAnFjReaPLRadd39AA83kB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ca:a7:e2:64:d9:5f:e6:f5:9e:51:50:2a:c9:23:08:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e2d3c08007759394706af74c61d2b0c27662c7
        Validity
            Not Before: Oct 12 05:25:43 2022 GMT
            Not After : Oct 13 05:25:43 2022 GMT
        Subject: CN=93e6e589390d0dbe1e0b56cfc3b82cb5c370f1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:7a:e5:65:2b:97:67:23:9f:12:04:00:fa:
                    3f:fe:eb:ae:91:04:7e:7d:17:c8:2b:ca:8a:6c:bd:
                    bf:7b:dd:14:07:90:28:55:14:d0:47:52:44:91:de:
                    79:2f:15:06:fd:0e:23:10:3a:7c:19:cf:d5:47:53:
                    ec:23:fb:e6:51:d9:de:45:26:aa:6e:a7:b5:63:bb:
                    b0:84:1b:d1:ad:6e:77:f2:00:b5:38:44:54:df:cd:
                    eb:1b:92:1c:2f:01:8d:7c:a3:a7:03:62:83:fd:1d:
                    fe:ac:c1:33:cc:48:98:35:06:c9:81:43:a3:b9:3d:
                    f0:66:3c:e4:21:5e:e9:d2:45:33:49:37:0b:16:10:
                    91:10:d3:c9:3e:1e:5f:62:c8:ef:4e:49:ba:6f:0a:
                    1a:c3:94:ab:26:ee:33:91:6e:c6:0a:0b:4a:c6:fd:
                    0c:7c:7b:75:3b:93:21:ba:b0:8c:f3:8b:e3:a8:1e:
                    3f:be:6b:b4:af:c9:7b:ce:55:4d:b9:71:0f:03:fe:
                    77:4d:83:dd:bb:5d:ba:10:7a:b8:74:44:0b:b2:bb:
                    4c:35:b6:c2:ab:74:e5:d8:2d:64:ba:61:8d:d3:71:
                    41:bd:6c:03:e8:64:05:b7:2f:be:7d:d4:69:9e:8c:
                    dd:1f:2c:cc:56:c5:89:cf:f6:51:6d:57:7d:7b:87:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:E5:89:39:0D:0D:BE:1E:0B:56:CF:C3:B8:2C:B5:C3:70:F1:FF
            X509v3 Authority Key Identifier:
                keyid:00:E2:D3:C0:80:07:75:93:94:70:6A:F7:4C:61:D2:B0:C2:76:62:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:0b:db:7e:db:1c:5b:4c:e6:19:ae:fb:83:0b:30:45:e8:
         10:dc:a4:97:97:50:ba:a7:5e:09:76:63:f6:ea:6b:5a:23:0c:
         54:3b:ff:33:9d:cb:36:ba:b0:53:eb:cc:ca:b0:88:98:b2:e4:
         97:9f:91:be:98:54:4f:0f:9a:d4:01:89:89:51:5d:ed:93:4c:
         80:92:91:06:cc:6e:eb:c8:b1:08:f0:3b:76:00:17:ed:89:ad:
         09:0f:23:26:43:6e:3c:79:4b:1f:c5:dc:70:70:50:2d:ad:be:
         0a:b5:f8:e5:53:64:80:94:fb:81:35:40:0e:fc:68:3b:be:e0:
         81:c6:a1:f2:f8:8c:26:6f:dd:3a:18:e6:11:f5:b8:ce:1a:a2:
         18:ab:d3:a1:b8:4a:40:7f:81:2e:fe:64:f0:cd:9e:49:bb:28:
         81:bc:c4:2f:c6:d9:c9:6b:cd:12:77:0a:58:b3:ba:34:53:dd:
         2e:55:16:40:89:6a:88:2b:16:f9:9e:e6:4a:74:ba:63:05:85:
         30:6c:52:3a:a5:97:eb:4a:9f:5d:d2:db:71:c5:9b:07:37:cc:
         df:19:d6:ff:c0:1e:bb:3c:a9:7a:88:ef:3f:ad:41:c9:54:e2:
         52:75:f3:47:fd:28:50:a6:80:b1:53:0e:4b:7b:76:6d:d4:7a:
         25:9f:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----