Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/QV8_7i62C9ABw-sej5CFRYD54RA.mft
File:                     QV8_7i62C9ABw-sej5CFRYD54RA.mft (raw, json)
Hash identifier:          YGVyo8bEOCR4USkDahJZeETCqsyBE7Qw+QGNluYB0YA=
Subject key identifier:   93:2B:7B:88:4F:53:59:3E:DB:C5:92:7F:32:BA:23:5E:F1:76:C8:E3
Authority key identifier: 41:5F:3F:EE:2E:B6:0B:D0:01:C3:EB:1E:8F:90:85:45:80:F9:E1:10
Certificate issuer:       /CN=415f3fee2eb60bd001c3eb1e8f90854580f9e110
Certificate serial:       018532AF2FE6F991D73FB1677E043C3746A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QV8_7i62C9ABw-sej5CFRYD54RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/QV8_7i62C9ABw-sej5CFRYD54RA.mft
Manifest number:          015F
Signing time:             Wed 21 Dec 2022 03:16:59 +0000
Manifest this update:     Wed 21 Dec 2022 03:16:59 +0000
Manifest next update:     Thu 22 Dec 2022 03:16:59 +0000
Files and hashes:         1: 4Hc3IcJ3EF-Mw7DR1txjzzg1byc.roa (hash: b48wACST+bPwbCdYkTgO6JNvRbMmWqqTx/kia91Kh/0=)
                          2: QV8_7i62C9ABw-sej5CFRYD54RA.crl (hash: LUeabxp4x+Ze3PXYFcmk5l1T/wAO+i19d1Xn+LDYgE8=)
                          3: Y-AU4wTn_XiMUnj0AvOJrn8t-Yw.roa (hash: SeKbymQZ0AEyDNmI7OJpkpstYgp9/O62/FybkS1/BbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:32:af:2f:e6:f9:91:d7:3f:b1:67:7e:04:3c:37:46:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415f3fee2eb60bd001c3eb1e8f90854580f9e110
        Validity
            Not Before: Dec 21 03:16:59 2022 GMT
            Not After : Dec 22 03:16:59 2022 GMT
        Subject: CN=932b7b884f53593edbc5927f32ba235ef176c8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:1a:82:14:2c:74:ca:bb:6b:79:e4:33:8a:
                    20:ed:eb:e6:db:50:b3:48:54:d4:bb:71:17:01:65:
                    da:d9:2c:e9:ad:83:ed:dc:3e:39:71:4a:6d:21:a2:
                    dd:1e:8f:f3:5f:b7:01:53:14:3e:75:a9:0f:5f:67:
                    3a:9e:5b:03:e6:ab:51:c2:d7:e7:4c:d0:ef:9b:18:
                    dc:da:06:b6:b0:b8:1a:6c:68:f3:48:1c:61:4f:31:
                    89:3e:22:4e:8d:9c:f4:96:d4:e4:0e:e8:e2:5b:93:
                    51:ad:d6:07:83:8b:8d:7d:8b:00:07:91:aa:4f:de:
                    01:86:8b:fa:00:4c:79:bf:4b:ba:c8:f4:d1:f0:6a:
                    46:81:ab:9c:06:fc:69:29:2e:95:8b:b2:2f:3b:5c:
                    7d:0d:55:46:74:7e:f8:9d:e1:58:42:3c:82:27:7b:
                    da:45:5c:2e:83:0f:90:37:82:47:eb:39:50:79:8c:
                    8b:26:be:8d:2b:b0:96:65:87:1b:22:72:ad:b1:ad:
                    66:09:db:9b:86:b3:1f:bc:72:f3:ae:6b:82:7b:65:
                    84:c9:b7:39:f5:b9:fe:2f:f0:fc:d0:96:ca:99:4a:
                    8c:a6:f8:a2:62:9d:1e:3a:0c:39:ce:8a:ed:99:25:
                    cd:4d:57:ad:cb:66:a6:e6:d5:66:9a:6a:4f:68:c9:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2B:7B:88:4F:53:59:3E:DB:C5:92:7F:32:BA:23:5E:F1:76:C8:E3
            X509v3 Authority Key Identifier:
                keyid:41:5F:3F:EE:2E:B6:0B:D0:01:C3:EB:1E:8F:90:85:45:80:F9:E1:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QV8_7i62C9ABw-sej5CFRYD54RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/QV8_7i62C9ABw-sej5CFRYD54RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/QV8_7i62C9ABw-sej5CFRYD54RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0f:6a:bf:64:e6:b5:70:d8:8e:c2:2d:a3:73:a0:b1:c9:dd:
         f1:7e:3d:e5:16:9c:e2:38:aa:b7:78:49:b8:e6:48:80:dd:56:
         81:5e:42:f4:8f:f0:a5:49:57:ac:f1:cf:87:db:32:0f:f1:bc:
         2c:ef:f6:f6:ef:b7:11:5a:33:1a:23:90:0e:a8:cd:1e:f5:2a:
         73:56:24:60:92:f5:fc:76:37:3e:1e:63:81:aa:f4:43:76:a0:
         ce:55:b8:4f:8d:b6:33:18:9c:0e:94:75:e6:4d:f6:43:81:5b:
         f0:03:ae:58:02:ab:7b:b8:c6:42:85:09:16:b9:e7:5a:c1:1d:
         71:91:a9:27:97:99:30:af:76:84:75:fd:7d:61:29:0b:66:a7:
         8d:e4:18:82:4b:32:a0:f3:3f:3e:a2:8c:da:15:fb:ab:32:63:
         4b:1c:d3:04:46:69:46:ad:39:a1:3b:a7:43:7f:54:8d:61:64:
         c9:93:eb:cd:03:4f:75:11:7d:6b:66:1c:02:15:0c:a1:19:e6:
         d5:3a:51:68:3c:95:73:48:01:ff:e2:a0:32:ce:40:5c:a6:09:
         85:ba:67:db:d9:7e:d1:f7:d4:43:28:3b:b7:aa:7d:78:a7:ce:
         c2:5f:a8:e6:40:c0:db:87:52:29:55:75:6c:03:44:fb:f1:05:
         92:31:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----