Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/qIEARksYJsPERakchOLyMOY92y0.mft
File:                     qIEARksYJsPERakchOLyMOY92y0.mft (raw, json)
Hash identifier:          /GJGt49vRXEe3rLTO73gcRczB5OSK/2a0mDJne25j04=
Subject key identifier:   64:CB:30:45:B5:5D:C2:86:F9:8B:BB:22:07:6F:8A:59:1C:94:E0:3D
Authority key identifier: A8:81:00:46:4B:18:26:C3:C4:45:A9:1C:84:E2:F2:30:E6:3D:DB:2D
Certificate issuer:       /CN=a88100464b1826c3c445a91c84e2f230e63ddb2d
Certificate serial:       018440C703A51C14136BAC85C942F1B54BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIEARksYJsPERakchOLyMOY92y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/qIEARksYJsPERakchOLyMOY92y0.mft
Manifest number:          0535
Signing time:             Fri 04 Nov 2022 03:54:55 +0000
Manifest this update:     Fri 04 Nov 2022 03:54:55 +0000
Manifest next update:     Sat 05 Nov 2022 03:54:55 +0000
Files and hashes:         1: ACSgxkqUEABCwJ1GD5ZZlPakdLQ.roa (hash: ZtDVGNHGafNsVTnZeTj9lXtj/BXb+R/o9iV9G4jITC8=)
                          2: C-46aMZ4NuTI8RmKmHPtdIqFh-w.roa (hash: slV2a6O6Po8wfwEq/um3kzbfzvD7oA3rwieQy7xt2lM=)
                          3: qIEARksYJsPERakchOLyMOY92y0.crl (hash: 9k9UGYqbvYNbwj6LJcpgC4HXb53zTg/jlq5EWVI3LPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:40:c7:03:a5:1c:14:13:6b:ac:85:c9:42:f1:b5:4b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a88100464b1826c3c445a91c84e2f230e63ddb2d
        Validity
            Not Before: Nov  4 03:54:55 2022 GMT
            Not After : Nov  5 03:54:55 2022 GMT
        Subject: CN=64cb3045b55dc286f98bbb22076f8a591c94e03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:8d:29:cd:fc:6c:45:8c:67:81:fe:a1:4d:2b:
                    5e:25:93:7e:d3:31:00:1a:5a:50:ef:42:d6:75:27:
                    d4:f2:12:ea:a1:7e:fd:43:e9:58:b1:39:fd:0c:7e:
                    8f:27:22:a8:76:e4:02:2c:d3:78:9f:9c:c7:31:a4:
                    39:2b:ac:87:ec:d3:90:8c:1f:20:a6:56:a7:df:35:
                    36:d7:b8:2a:18:1e:d3:c2:01:55:ed:24:d3:33:9b:
                    0f:a9:b1:ca:05:dc:4a:e1:61:3a:d4:60:a0:5a:5a:
                    4f:67:f6:7a:1e:0c:c3:72:b9:20:cb:f9:28:1e:51:
                    94:1a:ab:2f:71:6a:21:e6:d2:17:01:ec:69:a4:3d:
                    91:1d:58:ea:f4:85:72:2f:f2:fc:3a:6c:b3:35:95:
                    87:7f:e4:02:32:9c:f3:f1:e9:aa:2a:90:21:65:e4:
                    ad:93:ef:6c:4c:df:30:ed:4f:c8:fe:e9:0b:63:e4:
                    06:20:e5:12:92:3d:6c:1f:ea:67:e7:1e:dc:cd:fe:
                    31:fe:e6:9e:aa:28:05:42:50:2a:c4:6a:2e:9a:e6:
                    d4:ef:47:c4:4c:f8:11:8e:e2:1a:78:f0:20:bb:d7:
                    c1:16:df:9c:dc:6f:c2:92:c5:4d:92:5c:4a:56:97:
                    c7:46:4e:81:b6:99:93:b4:06:f3:d3:f8:cb:71:07:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CB:30:45:B5:5D:C2:86:F9:8B:BB:22:07:6F:8A:59:1C:94:E0:3D
            X509v3 Authority Key Identifier:
                keyid:A8:81:00:46:4B:18:26:C3:C4:45:A9:1C:84:E2:F2:30:E6:3D:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIEARksYJsPERakchOLyMOY92y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/qIEARksYJsPERakchOLyMOY92y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/qIEARksYJsPERakchOLyMOY92y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:30:f9:ab:ca:e6:21:92:db:91:72:fb:91:3e:7f:00:91:
         67:51:7c:52:5a:4c:7e:e5:67:39:98:84:6c:26:ab:de:2a:93:
         c3:e9:3c:b3:2c:64:d9:c9:8f:c4:b3:4b:44:63:73:f5:df:38:
         25:5c:c4:cd:8a:ab:b7:f0:99:cf:4b:e0:d2:df:76:6a:2a:5a:
         88:c3:81:d2:64:dd:9f:f5:75:5f:f5:53:f4:c6:37:fc:3f:42:
         26:7a:51:c3:53:5a:6b:60:e9:5c:1e:0e:e0:ee:d1:3c:06:4b:
         57:f7:28:7f:2d:18:c7:d3:7a:a9:87:1e:76:bb:9c:66:f1:f6:
         ef:a0:1f:41:f0:73:ad:78:49:5b:fa:1b:ca:08:d9:bb:0c:9a:
         9b:75:dd:0e:ed:72:a7:20:9b:18:e3:2a:07:ab:ed:62:49:24:
         1a:60:9c:ec:72:da:1a:5b:cb:22:2c:80:27:ad:15:0e:3d:82:
         73:0e:fa:c5:45:40:d4:33:8d:ba:5a:1b:69:17:38:3a:ff:3a:
         24:76:32:51:27:e0:32:9b:82:34:3b:7e:bf:a6:e9:68:54:c5:
         3d:67:28:99:97:12:f0:89:f4:e4:ca:7a:ed:45:48:4f:00:ab:
         12:92:62:cb:0f:74:5f:70:80:0a:f4:df:05:14:fd:d5:c4:1b:
         f7:02:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----