Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/rb3VPlaH2MfnGMRZvcTijlU83M4.mft
File:                     rb3VPlaH2MfnGMRZvcTijlU83M4.mft (raw, json)
Hash identifier:          b9hOAshHZllK7TzO4nrxhqnLbxNwYR5v+vwkjms6FNg=
Subject key identifier:   E7:4D:47:DC:26:36:8D:13:7B:3B:46:2F:CE:93:85:3F:B8:45:86:80
Authority key identifier: AD:BD:D5:3E:56:87:D8:C7:E7:18:C4:59:BD:C4:E2:8E:55:3C:DC:CE
Certificate issuer:       /CN=adbdd53e5687d8c7e718c459bdc4e28e553cdcce
Certificate serial:       018533F898B91428D3DB451E8EA0CCA2FDF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rb3VPlaH2MfnGMRZvcTijlU83M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/rb3VPlaH2MfnGMRZvcTijlU83M4.mft
Manifest number:          058C
Signing time:             Wed 21 Dec 2022 09:16:48 +0000
Manifest this update:     Wed 21 Dec 2022 09:16:48 +0000
Manifest next update:     Thu 22 Dec 2022 09:16:48 +0000
Files and hashes:         1: 1k4W-al_xv9PvGDYWKQOzTQRKSI.roa (hash: bOKHaZNt1RI6+xhfQfwGIupCckwH8bVa+w0TUeT4F0Q=)
                          2: naxADLD0lHuAzNz_rzCPaFd_dgU.roa (hash: DXM4L34ArquqO7dmpH0NzgjxEVit18G9jFrIIdYstrA=)
                          3: rb3VPlaH2MfnGMRZvcTijlU83M4.crl (hash: gdIHk7HZZ2ozlFD2s8JXT3ddtoVHT6Hc5Q4YSh4ekt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:33:f8:98:b9:14:28:d3:db:45:1e:8e:a0:cc:a2:fd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbdd53e5687d8c7e718c459bdc4e28e553cdcce
        Validity
            Not Before: Dec 21 09:16:48 2022 GMT
            Not After : Dec 22 09:16:48 2022 GMT
        Subject: CN=e74d47dc26368d137b3b462fce93853fb8458680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:6c:7f:06:24:93:19:0d:3a:60:91:2b:23:
                    8b:7e:56:b9:e6:21:29:ed:4b:c0:4d:e3:7a:9e:b6:
                    f5:1b:14:26:06:17:08:c8:77:3b:b2:bb:3e:47:d1:
                    0c:1c:f2:44:45:6d:fc:11:f3:65:ef:fd:7b:e2:2e:
                    5a:96:81:19:92:e2:c0:37:b6:1c:01:33:4b:9d:14:
                    02:a9:eb:51:e0:05:25:36:7c:84:80:68:60:c2:c0:
                    eb:7e:ea:5d:bb:4a:fc:1c:53:ec:73:69:93:d8:f9:
                    42:df:9e:c3:f9:10:69:38:09:61:12:47:4f:18:16:
                    a7:a6:6a:af:60:95:77:a3:2a:96:34:d4:04:3b:25:
                    b5:bc:df:5d:ff:a9:37:bd:88:ee:98:fc:48:6f:d3:
                    a3:ba:29:93:86:be:1d:72:9c:54:ca:2b:2e:e6:f8:
                    0d:48:04:41:9f:85:e7:53:26:c6:c4:e8:d3:92:67:
                    89:fc:36:03:91:85:5f:3b:0a:a6:3a:68:c7:09:1f:
                    d3:21:d2:68:a6:b7:ec:9c:f8:3c:dd:e7:0d:92:45:
                    3d:c5:3e:17:bc:11:f5:a4:d1:3f:49:4f:e4:0a:1c:
                    a1:50:1f:64:15:4c:88:6d:b5:80:86:1b:7d:9c:47:
                    7e:28:3a:48:53:27:e6:05:b4:34:12:b7:f6:60:d7:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:47:DC:26:36:8D:13:7B:3B:46:2F:CE:93:85:3F:B8:45:86:80
            X509v3 Authority Key Identifier:
                keyid:AD:BD:D5:3E:56:87:D8:C7:E7:18:C4:59:BD:C4:E2:8E:55:3C:DC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb3VPlaH2MfnGMRZvcTijlU83M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/rb3VPlaH2MfnGMRZvcTijlU83M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/rb3VPlaH2MfnGMRZvcTijlU83M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:15:dd:e4:fb:bd:bc:1f:cf:83:65:49:72:df:7c:3b:ed:fc:
         e8:08:5c:80:24:08:1d:dc:5c:7e:85:c9:ce:cc:38:e0:6b:bb:
         38:f9:1c:55:35:93:a1:d0:a9:eb:7e:31:66:c1:7a:86:79:b8:
         af:f5:92:76:87:d4:67:83:94:2c:e3:f7:a7:c4:7a:d1:73:c7:
         e0:3f:b6:fa:f1:93:be:25:a4:6b:96:7b:62:37:1c:56:38:fb:
         e2:3f:46:88:ba:0c:70:69:ba:9f:db:ff:56:42:c2:ae:a4:1c:
         04:92:31:06:eb:12:f6:ac:21:b1:9a:af:42:2e:fd:bb:35:e7:
         e5:53:df:cb:a7:33:7b:39:96:88:31:c5:7e:82:0c:e9:14:e1:
         20:dc:d6:57:18:af:92:e8:ca:6b:c1:58:90:56:a0:33:0c:0a:
         39:c7:1c:50:00:3f:4d:e6:c3:79:52:c8:47:86:5e:d7:df:44:
         09:79:fd:ad:e2:5a:26:c5:21:cd:77:c3:7b:9a:0f:e2:e3:14:
         46:f6:2b:ab:df:c9:34:d8:e0:3d:ea:63:0d:1e:aa:50:db:3b:
         02:d4:7b:5b:63:ff:18:1a:45:dd:e1:4a:56:ef:89:72:db:e6:
         90:d0:06:ef:6a:58:6a:07:7c:ed:dd:b5:f9:30:64:c7:2b:d2:
         7f:40:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----