Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/9mSUVFjTtNZ8G2RAgtN1TWaQg08.mft
File:                     9mSUVFjTtNZ8G2RAgtN1TWaQg08.mft (raw, json)
Hash identifier:          5fccFELMwX1sIkqBBbUKx7m1W6IcFZxEESd1HxdzTmc=
Subject key identifier:   B0:B5:9B:DF:26:60:7D:FF:42:4B:DC:B8:66:D1:9A:6D:76:1C:DC:D6
Authority key identifier: F6:64:94:54:58:D3:B4:D6:7C:1B:64:40:82:D3:75:4D:66:90:83:4F
Certificate issuer:       /CN=f664945458d3b4d67c1b644082d3754d6690834f
Certificate serial:       0184FA8148DB3E35168E7E398F16C5459184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mSUVFjTtNZ8G2RAgtN1TWaQg08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/9mSUVFjTtNZ8G2RAgtN1TWaQg08.mft
Manifest number:          03
Signing time:             Sat 10 Dec 2022 05:28:07 +0000
Manifest this update:     Sat 10 Dec 2022 05:28:07 +0000
Manifest next update:     Sun 11 Dec 2022 05:28:07 +0000
Files and hashes:         1: 2NuyiE8BWgwVAxkdS14XIQunYB8.roa (hash: crPArSo6OpGkTeKRxFWWOPoQ7j75PrRXTw4xrLEIvaI=)
                          2: 9mSUVFjTtNZ8G2RAgtN1TWaQg08.crl (hash: kIzSXQAOD4ACMD+4YchUCPmZIrWxOen4AogzCIoiClY=)
                          3: ABVuaCVtGeCaZippO6wGiV6L1CQ.roa (hash: zygja2lfzlXDoiFwohVVy3V/Iu5GXToe7liGPYvZOWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:fa:81:48:db:3e:35:16:8e:7e:39:8f:16:c5:45:91:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f664945458d3b4d67c1b644082d3754d6690834f
        Validity
            Not Before: Dec 10 05:28:07 2022 GMT
            Not After : Dec 11 05:28:07 2022 GMT
        Subject: CN=b0b59bdf26607dff424bdcb866d19a6d761cdcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d9:70:1f:f3:8c:67:32:32:04:35:5a:ed:db:
                    b7:b8:64:92:7b:a3:66:5a:e7:db:1b:c2:1a:ab:1f:
                    e7:44:b7:ff:78:a3:6e:ff:c3:16:dc:6a:12:e7:a8:
                    d1:d3:84:89:03:54:f4:d5:d5:8a:4d:75:73:9b:93:
                    c6:c0:7a:cd:87:bf:cd:e8:60:f1:21:ec:7e:9d:b5:
                    62:49:27:8e:1f:52:4a:ed:b3:8e:e4:9d:08:f8:6c:
                    1c:0d:01:c3:24:85:32:e3:d5:4c:86:08:b0:25:99:
                    1b:d3:d3:4d:f5:99:38:dc:a6:97:66:87:55:2d:60:
                    48:d2:5c:2e:dc:19:1d:22:5b:87:18:34:c7:78:9c:
                    c8:e9:2f:a4:bd:2e:94:cb:43:be:1c:17:77:33:1b:
                    09:4b:93:a0:b1:8e:50:ef:ba:30:dd:d8:4b:fc:49:
                    40:29:07:55:2b:91:79:1f:72:14:33:db:5f:8b:53:
                    76:8f:55:99:7f:a1:89:ee:09:00:02:ac:e9:9f:da:
                    6b:04:b4:d3:40:0a:d3:ef:e2:d2:d6:29:84:17:04:
                    bf:8b:e2:5e:86:3f:9a:49:a7:2b:07:53:3f:57:7b:
                    67:c3:38:97:26:ec:57:67:8e:1d:2c:b1:61:15:e3:
                    07:ff:3a:a2:bc:74:a2:2a:d5:dd:69:e4:dd:b8:7c:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B5:9B:DF:26:60:7D:FF:42:4B:DC:B8:66:D1:9A:6D:76:1C:DC:D6
            X509v3 Authority Key Identifier:
                keyid:F6:64:94:54:58:D3:B4:D6:7C:1B:64:40:82:D3:75:4D:66:90:83:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mSUVFjTtNZ8G2RAgtN1TWaQg08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/9mSUVFjTtNZ8G2RAgtN1TWaQg08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/9mSUVFjTtNZ8G2RAgtN1TWaQg08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:a1:68:fc:b5:12:56:d5:66:2e:96:b8:5e:2d:e0:2c:2f:
         fe:85:52:32:c7:f9:26:0d:7b:eb:32:3c:04:d3:a5:82:29:54:
         9d:90:13:fb:db:cd:d8:cf:bb:39:52:94:f0:6b:6f:cb:4e:ed:
         03:42:eb:87:97:e0:4b:7b:7f:f5:97:f4:77:12:c7:30:1b:88:
         64:7b:32:f0:d2:4c:24:bc:37:2b:7b:30:c0:81:c6:5e:60:cd:
         89:8f:9a:f1:c9:63:d9:90:51:f1:64:b8:0f:86:97:99:a3:ce:
         c7:78:3e:cb:e9:84:05:7d:62:b5:77:16:7c:32:ee:43:cd:5d:
         62:f8:f3:b9:7c:3b:71:bc:2e:f9:b5:48:e6:26:d3:bc:52:a3:
         2d:5e:15:dc:88:d1:42:be:90:bd:24:4b:c0:72:a5:5e:87:cd:
         59:c1:b3:d4:78:23:b4:62:88:6e:32:74:24:21:14:84:3b:e1:
         be:0b:c8:ab:54:1b:f7:ed:97:0c:f7:df:e5:ad:11:5b:27:6b:
         32:a7:ae:6f:8d:42:57:29:a6:56:85:3b:46:3c:77:f9:58:4a:
         f6:4c:3e:b6:79:df:73:bd:2c:5b:36:86:9b:86:bc:bb:b2:80:
         bd:79:61:99:01:91:96:cf:8a:01:9f:ae:a9:04:5d:14:38:5c:
         47:3a:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----