Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/FdHD_NaURW4yWyRgrrx4XJlVheo.mft
File:                     FdHD_NaURW4yWyRgrrx4XJlVheo.mft (raw, json)
Hash identifier:          hy7EVrG4S5PS3IPaRdYnn60BkA3ckOjif8XfmE4rvEU=
Subject key identifier:   53:6E:14:DD:9E:C6:11:DE:AB:D3:77:3B:B6:26:1F:3F:4D:6D:9E:E2
Authority key identifier: 15:D1:C3:FC:D6:94:45:6E:32:5B:24:60:AE:BC:78:5C:99:55:85:EA
Certificate issuer:       /CN=15d1c3fcd694456e325b2460aebc785c995585ea
Certificate serial:       01837DC54368AAD94ABBA8DF5163774E94D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FdHD_NaURW4yWyRgrrx4XJlVheo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/FdHD_NaURW4yWyRgrrx4XJlVheo.mft
Manifest number:          0AE1
Signing time:             Tue 27 Sep 2022 07:07:03 +0000
Manifest this update:     Tue 27 Sep 2022 07:07:03 +0000
Manifest next update:     Wed 28 Sep 2022 07:07:03 +0000
Files and hashes:         1: FdHD_NaURW4yWyRgrrx4XJlVheo.crl (hash: ctgVK3niqds06YmXuhgovK/PWTzlPpia2iNaIewfA5w=)
                          2: eA6SPgmSKNrRAHmK-h2fTJ16bIw.roa (hash: Yl7Bd+aZ4t+0RcfP3ORIicjbxC+fnE53ocZGl7qe2gs=)
                          3: q0QE8CoD_-ZRcpU0Up7QP-Rm81Q.roa (hash: EbXBV1bxi7fTZ6DOWZcOHBpSO0S4yDb8pszQTTMCCms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7d:c5:43:68:aa:d9:4a:bb:a8:df:51:63:77:4e:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d1c3fcd694456e325b2460aebc785c995585ea
        Validity
            Not Before: Sep 27 07:07:03 2022 GMT
            Not After : Sep 28 07:07:03 2022 GMT
        Subject: CN=536e14dd9ec611deabd3773bb6261f3f4d6d9ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e5:81:7c:97:a0:81:2e:4b:b4:93:45:5a:e0:
                    d5:ba:f0:1f:06:4b:66:cb:86:a6:e2:17:93:ed:41:
                    30:de:80:92:27:ee:1f:42:4a:9c:23:da:72:fc:34:
                    79:4f:5c:41:08:8b:f2:ce:e7:1d:29:3e:16:10:5a:
                    fc:01:9e:89:e2:b7:f7:6e:37:28:c0:cf:ac:48:15:
                    ea:9e:41:d6:06:bd:1f:a0:d9:6a:ce:d7:9b:94:17:
                    89:12:e4:ed:ea:fd:c3:99:7e:c2:90:d4:97:24:11:
                    cb:4b:ca:5f:fc:c3:db:c6:e6:bc:c4:fc:14:47:30:
                    51:11:cb:34:5f:bf:99:31:41:ee:fe:74:1d:c1:5a:
                    8c:dd:94:b8:aa:c9:6a:22:f8:94:bc:82:c8:ca:2f:
                    d7:d8:96:d9:32:40:22:e8:48:fb:94:ba:e4:75:7a:
                    0a:c0:a5:ea:25:c9:0f:1d:02:bd:b7:75:af:86:63:
                    4b:65:23:ca:88:0e:7c:d7:3c:1f:21:5f:43:98:e6:
                    f0:1f:72:60:b4:ac:c8:d3:50:99:8b:07:6d:76:e9:
                    73:c9:84:04:cb:70:95:29:6f:f2:f1:dc:1f:53:cf:
                    36:92:56:fc:92:b3:65:ce:d7:3e:a3:ed:44:84:5d:
                    ee:25:87:65:41:bf:09:cf:02:28:c5:cd:31:d0:b3:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:14:DD:9E:C6:11:DE:AB:D3:77:3B:B6:26:1F:3F:4D:6D:9E:E2
            X509v3 Authority Key Identifier:
                keyid:15:D1:C3:FC:D6:94:45:6E:32:5B:24:60:AE:BC:78:5C:99:55:85:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdHD_NaURW4yWyRgrrx4XJlVheo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/FdHD_NaURW4yWyRgrrx4XJlVheo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/FdHD_NaURW4yWyRgrrx4XJlVheo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:b8:b5:b0:02:18:48:64:45:4a:32:ba:3a:ce:af:aa:fe:
         2a:74:21:d8:62:a2:00:f7:61:91:90:8c:5f:04:5e:56:17:d7:
         34:26:52:a0:34:33:e4:85:46:50:dd:0a:7d:ea:c9:79:41:2a:
         59:ea:d6:a6:9b:f9:40:2f:67:68:a0:bc:a0:1d:b2:92:45:f0:
         60:98:49:21:de:6a:79:9f:03:07:a9:81:54:33:b3:93:34:10:
         7f:0a:b6:0f:0d:09:b1:19:c2:22:da:72:0a:f2:71:fe:42:4a:
         9b:56:2c:e6:65:3c:22:b5:a2:9e:d6:92:84:b0:73:02:9d:88:
         31:b6:85:7c:b4:50:91:6c:e7:d3:5e:2a:87:ff:83:29:39:6a:
         7e:74:c7:29:4e:35:d2:c5:3e:fd:a4:f6:ef:a2:81:99:84:b7:
         f3:af:81:2d:52:77:cc:4e:7a:2e:45:08:29:bd:75:17:50:5c:
         61:16:ca:f2:f2:33:92:d2:98:68:17:e5:8a:49:52:47:be:22:
         4c:7e:c0:c6:95:e3:c6:15:8d:64:08:58:0e:ea:28:df:9a:95:
         fa:b4:f3:a2:a7:14:95:41:c4:71:0b:6b:1f:f1:7e:a4:ab:73:
         89:68:4e:45:5c:ce:e7:25:fe:be:35:3a:e0:1d:87:1c:c1:d3:
         34:0a:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----