Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/NaXtNraVI9DspNTF21Jkqs5iKYQ.mft
File:                     NaXtNraVI9DspNTF21Jkqs5iKYQ.mft (raw, json)
Hash identifier:          3JKUC5dp84HwrI+ue5VWy1U+jy81tCqRT2H6UNulcG8=
Subject key identifier:   11:9A:F9:C8:A2:0A:A6:04:6A:35:33:32:11:4E:A0:27:BC:D5:CA:26
Authority key identifier: 35:A5:ED:36:B6:95:23:D0:EC:A4:D4:C5:DB:52:64:AA:CE:62:29:84
Certificate issuer:       /CN=35a5ed36b69523d0eca4d4c5db5264aace622984
Certificate serial:       0185296E69DD139DA6FFD6DCC33A118528BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NaXtNraVI9DspNTF21Jkqs5iKYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/NaXtNraVI9DspNTF21Jkqs5iKYQ.mft
Manifest number:          0144
Signing time:             Mon 19 Dec 2022 08:09:39 +0000
Manifest this update:     Mon 19 Dec 2022 08:09:39 +0000
Manifest next update:     Tue 20 Dec 2022 08:09:39 +0000
Files and hashes:         1: NaXtNraVI9DspNTF21Jkqs5iKYQ.crl (hash: U69HwHU6f5ILjMxvv6ymhFlYmnQGTflAJw2/GtgKRnQ=)
                          2: ShnVdGQxcray8mEgNsDTf2_UexI.roa (hash: kwV6P1R6VDo384GnMCruLQUC8GhLq+6BjO+peHwu2Lo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:6e:69:dd:13:9d:a6:ff:d6:dc:c3:3a:11:85:28:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a5ed36b69523d0eca4d4c5db5264aace622984
        Validity
            Not Before: Dec 19 08:09:39 2022 GMT
            Not After : Dec 20 08:09:39 2022 GMT
        Subject: CN=119af9c8a20aa6046a353332114ea027bcd5ca26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:a9:29:0e:88:8b:bd:21:28:c4:37:3a:ab:
                    f7:6e:59:4f:90:0d:2b:1b:21:bc:a7:3c:12:87:35:
                    c6:90:c3:da:6e:6b:02:ce:9b:08:5f:65:8e:d6:28:
                    8e:16:9c:cc:2a:75:4a:01:7b:20:34:aa:e2:ba:35:
                    6d:35:a5:a0:b8:03:05:05:4d:dc:da:98:e3:4f:47:
                    8f:d8:a9:56:39:61:bb:6d:58:47:b7:aa:e9:4f:7e:
                    d7:c0:23:3d:8b:2a:6f:84:5b:fc:4c:55:ab:28:b4:
                    aa:71:70:0d:d1:f5:bc:a3:1d:2d:5a:f8:99:a8:da:
                    b6:0a:40:17:90:06:b2:fc:29:ff:3e:e7:86:47:1d:
                    20:62:b1:a8:56:da:fc:68:da:65:31:87:16:4e:30:
                    e0:6c:68:cd:49:17:85:c5:00:d9:c1:6a:fa:b2:0b:
                    19:75:f6:94:9e:25:bf:48:20:1f:77:88:6c:84:e6:
                    56:a2:37:d2:d1:91:71:87:e9:5f:17:5f:3c:8f:93:
                    f7:fd:72:2c:f1:16:7b:7b:e6:0d:10:91:2f:57:d5:
                    18:55:ee:83:bf:8c:1c:53:48:78:cd:f7:bb:f1:4e:
                    eb:b8:dc:ab:f2:3a:ce:4e:db:0a:cf:cf:bb:58:a1:
                    01:6e:c7:e1:3a:5a:15:e0:34:80:5b:74:4d:7a:71:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9A:F9:C8:A2:0A:A6:04:6A:35:33:32:11:4E:A0:27:BC:D5:CA:26
            X509v3 Authority Key Identifier:
                keyid:35:A5:ED:36:B6:95:23:D0:EC:A4:D4:C5:DB:52:64:AA:CE:62:29:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaXtNraVI9DspNTF21Jkqs5iKYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/NaXtNraVI9DspNTF21Jkqs5iKYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/NaXtNraVI9DspNTF21Jkqs5iKYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3f:5a:c2:a5:6e:f3:68:9d:3e:69:c2:fb:ab:8d:94:70:2d:
         bc:de:da:c6:91:08:75:23:25:3f:8e:95:50:4f:13:c8:96:64:
         8d:cc:f9:da:19:99:96:db:1f:5f:ae:ae:6b:16:c0:17:44:3c:
         7d:3d:81:2f:26:f8:7a:e9:ab:d4:ee:75:07:f1:c9:83:f1:75:
         c2:f7:0a:38:8e:62:6d:ed:cb:40:62:80:e2:08:71:f6:3a:a2:
         ed:6f:53:f5:ff:2e:ad:5c:be:0e:0b:4d:46:9d:f7:93:c9:d8:
         6b:b0:d7:05:34:ad:93:b5:cf:e1:c0:b2:8a:f5:1d:9e:8c:32:
         0c:d9:26:ec:80:3b:2a:9a:a8:f9:64:77:ea:0e:60:03:56:d7:
         42:fc:d2:c6:98:c1:f1:13:0f:22:fb:e2:81:6b:31:f5:a1:46:
         9f:d4:ff:c4:67:f6:d2:d4:04:f5:3d:75:e7:d8:e1:dc:99:a9:
         6d:e0:42:d8:09:5b:3e:ea:29:f1:ea:31:c8:a2:03:35:88:44:
         6b:d5:5a:26:a6:be:40:86:eb:ba:fd:31:9c:92:67:da:40:d4:
         10:6d:6a:87:ad:61:e3:93:1a:17:76:48:f3:a4:c0:09:38:3a:
         20:6a:ef:34:67:6e:6a:8a:07:33:b7:1a:29:f4:80:5f:63:3d:
         a6:63:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----