Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.mft
File:                     gQLT4NXyHscsdFcxpkH7eQN4feA.mft (raw, json)
Hash identifier:          8wXnmzS9DTvSPoBG7+FkChqU6mxQdK8sxgqdW8clFSA=
Subject key identifier:   81:E7:45:2D:FA:49:C9:7E:DF:F7:93:BA:1A:BB:92:75:EB:7C:E2:98
Authority key identifier: 81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
Certificate issuer:       /CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Certificate serial:       01851A16C2F190D66BB0B5C427E25A16C3C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.mft
Manifest number:          0BD6
Signing time:             Fri 16 Dec 2022 08:39:37 +0000
Manifest this update:     Fri 16 Dec 2022 08:39:37 +0000
Manifest next update:     Sat 17 Dec 2022 08:39:37 +0000
Files and hashes:         1: VsriWu3mSA-9f-KynH04RHIYRDg.roa (hash: Bx716ZcFflvxik4uKsnRqf2byoR49WwChVryjxNrPSw=)
                          2: gQLT4NXyHscsdFcxpkH7eQN4feA.crl (hash: eIuyt2hTBZ0h8hyA4+nmlATyCjevEPwG2RWziThMqXc=)
                          3: jnPInYm7Kn8hBnr39VxT0fa-3jo.roa (hash: x5akOieyT7XWAWGWhyQltCct/O+kU1A/3YiZPQuDK0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1a:16:c2:f1:90:d6:6b:b0:b5:c4:27:e2:5a:16:c3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8102d3e0d5f21ec72c745731a641fb7903787de0
        Validity
            Not Before: Dec 16 08:39:37 2022 GMT
            Not After : Dec 17 08:39:37 2022 GMT
        Subject: CN=81e7452dfa49c97edff793ba1abb9275eb7ce298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7e:4e:0a:34:13:67:2c:24:a9:32:02:a5:93:
                    d5:98:3d:5c:93:c9:c4:44:a1:c9:a3:85:ee:13:a3:
                    27:0c:47:56:a9:d8:f5:21:4c:07:49:d0:34:28:76:
                    c0:36:fe:17:8b:47:55:43:f1:cc:f2:62:07:a6:83:
                    33:53:97:0b:51:b7:5c:c2:e2:cb:c3:02:dd:99:ce:
                    e9:15:b1:b4:a7:0e:c9:85:6e:9d:69:1a:a0:37:0c:
                    9d:ff:3d:5c:9e:53:b2:52:b1:6c:58:a7:7c:5c:f2:
                    bf:10:67:f0:fd:7f:65:c7:f6:f1:98:dd:ab:18:30:
                    70:0b:87:9d:cb:8c:f8:31:47:ba:d4:93:46:c0:d3:
                    1c:96:3e:ad:59:5a:2b:e1:49:9b:94:43:02:dd:d9:
                    d6:f4:7c:a9:e9:14:ff:80:8c:10:a0:67:68:9b:87:
                    11:52:ad:35:89:03:57:d2:1b:59:fd:9c:e5:66:12:
                    69:e5:72:db:a9:26:82:6e:bd:8e:2e:5a:a3:ce:e9:
                    1e:1c:6e:ed:bd:41:b1:2f:ab:ea:03:b8:4c:dd:9c:
                    0d:3f:4b:16:ef:a4:03:fb:e4:2f:42:2c:c8:5e:18:
                    80:a9:f6:85:4f:27:53:64:18:57:50:2c:ec:20:5e:
                    bd:b5:ac:31:3c:00:4e:33:41:b5:63:b9:6c:f7:0b:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E7:45:2D:FA:49:C9:7E:DF:F7:93:BA:1A:BB:92:75:EB:7C:E2:98
            X509v3 Authority Key Identifier:
                keyid:81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:d6:6a:3f:56:e1:18:6a:30:c6:d0:f6:85:5e:9e:d8:19:
         27:3b:27:92:55:ce:95:26:4b:67:b8:46:a2:b4:1b:a3:3a:03:
         73:5c:58:89:41:09:5d:3f:3b:c8:dc:35:72:cc:9a:2c:e6:07:
         2b:8d:b8:84:08:a7:37:91:45:8b:e9:e9:c8:65:37:aa:ce:ad:
         6f:5c:7a:98:c5:73:95:bf:45:f1:c0:0a:3b:3b:7a:82:6a:68:
         d6:27:58:9d:4e:9e:cb:90:00:5b:23:95:7e:a0:c4:54:7c:e5:
         b2:73:9b:01:56:fd:82:01:31:36:0f:d6:89:db:9c:e0:56:ab:
         23:ac:5a:b8:88:91:ee:0f:e2:86:1c:09:c9:3b:87:33:9b:04:
         c5:f9:85:f1:d5:46:ec:94:6f:1f:4e:70:fa:4d:2b:b6:5d:fa:
         e8:f3:b7:8f:17:64:28:fa:09:ba:f5:80:56:01:1b:10:e3:a4:
         94:0b:ad:b6:b8:2e:95:8a:c7:96:c9:dd:af:dc:36:36:20:20:
         61:e0:24:c2:ae:28:d6:7a:bc:10:87:99:19:22:3c:bb:b0:96:
         b4:d5:ae:74:97:e3:fb:d3:05:e9:5a:17:81:17:63:5a:55:38:
         16:73:cb:bd:94:f0:76:71:a7:43:5f:62:6b:9d:e1:93:de:61:
         5d:c9:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----