Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.mft
File:                     QKoMyOFlzXBSIfOqiqbmKIRiAT4.mft (raw, json)
Hash identifier:          2YFHJi58J8R7IWBc1nx2oKBCUujDMXURdyD+QZhs2/s=
Subject key identifier:   DF:9E:97:6E:B2:44:A5:7A:7B:71:A2:C6:C8:1F:19:3E:B6:0C:BC:AC
Authority key identifier: 40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E
Certificate issuer:       /CN=40aa0cc8e165cd705221f3aa8aa6e6288462013e
Certificate serial:       04312808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.mft
Manifest number:          0569
Signing time:             Thu 17 Mar 2022 04:22:28 +0000
Manifest this update:     Thu 17 Mar 2022 04:22:28 +0000
Manifest next update:     Fri 18 Mar 2022 04:22:28 +0000
Files and hashes:         1: IeRY6MOc7TUzSm5c2gVl8GaIE5s.roa (hash: JwQZcgGvSXmMcTojncSlPcC1b/DCcS1d8oZqu3JVKy4=)
                          2: QKoMyOFlzXBSIfOqiqbmKIRiAT4.crl (hash: frneJuWwMiGcjfHqmNQJl+VktWkwHFp5z16QylXqfUo=)
                          3: p64LUG21Vj-35LDyTABxX_6mgv4.roa (hash: Wg+rtlA/plrRN53FgO3sMliUqBZ0E+KEVyL6GvkHWI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70330376 (0x4312808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40aa0cc8e165cd705221f3aa8aa6e6288462013e
        Validity
            Not Before: Mar 17 04:22:28 2022 GMT
            Not After : Mar 18 04:22:28 2022 GMT
        Subject: CN=df9e976eb244a57a7b71a2c6c81f193eb60cbcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8b:6e:5a:27:56:98:a2:e7:40:b4:0c:9b:d3:
                    ca:1c:3b:b1:69:b0:c0:1a:c4:54:3d:86:56:72:fc:
                    a5:74:04:7a:d8:d3:52:37:d9:df:e9:66:25:e0:63:
                    de:b3:3f:c9:7c:a6:b8:c4:fd:cb:d5:cb:1f:27:a9:
                    2d:05:b1:c2:4e:73:c9:0c:84:54:8d:6a:ef:c4:9b:
                    9b:e3:74:32:57:93:2f:50:e7:a7:31:39:d7:6e:d9:
                    1c:29:10:86:31:4d:cc:da:cb:39:e3:81:cd:24:16:
                    e2:69:33:5e:b4:0b:c7:92:19:f3:c4:7b:8f:40:ca:
                    46:dc:7b:2a:8a:40:c2:9b:78:b3:3d:20:83:5f:b0:
                    e8:88:67:33:be:84:28:eb:62:0b:42:45:04:08:11:
                    ab:eb:0f:e0:0a:b7:df:8f:5b:ec:ba:b5:3a:42:f7:
                    d3:a1:57:1b:29:16:6f:5d:e2:6a:48:d8:e0:1d:ae:
                    5e:4c:89:d0:fe:da:1d:49:8d:70:5f:07:45:f4:e0:
                    bd:5e:f3:bb:6f:d4:10:73:fc:6c:8b:2f:ec:a3:a5:
                    3a:7c:fb:35:2e:6d:bc:04:cc:3a:73:db:84:8e:d5:
                    38:71:5f:ee:b0:f0:d9:fb:64:3d:82:18:24:17:23:
                    fe:bb:0b:89:0a:5d:d4:82:3d:f2:66:72:36:36:cb:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9E:97:6E:B2:44:A5:7A:7B:71:A2:C6:C8:1F:19:3E:B6:0C:BC:AC
            X509v3 Authority Key Identifier:
                keyid:40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9b:34:b2:31:e1:f1:49:ee:63:7d:95:3d:27:68:a4:04:d7:
         d1:01:6c:c6:6c:f6:94:06:93:77:20:ed:07:54:fe:fb:74:80:
         32:fe:e1:26:a7:0a:42:59:1d:c7:70:d4:1c:70:2e:c3:c3:41:
         26:75:f3:3b:46:0a:0f:59:b1:1c:cf:6b:d4:b0:2c:6c:b4:19:
         f7:9f:a2:96:dd:17:3e:c1:a1:a1:9d:68:9d:16:52:05:1f:aa:
         d9:bb:2c:28:e6:28:bd:2d:85:12:a4:71:79:cd:80:62:de:74:
         b0:21:95:f3:22:2a:90:59:d8:3a:c2:6c:83:46:11:92:b2:f1:
         80:b5:08:4d:cf:0e:85:e5:c6:64:43:1d:cd:c8:6f:91:58:bf:
         ae:67:eb:c6:21:a9:c2:b0:7f:82:75:cd:70:24:4a:55:95:c8:
         f2:a7:c5:bd:16:71:34:2d:16:ce:28:c5:f1:fe:55:b6:3d:f6:
         e9:c0:c1:31:70:07:7c:bd:27:d6:f9:7a:e3:f9:69:88:9c:2a:
         c8:b1:cf:1e:8e:55:86:2e:c3:7c:6b:8b:ac:2e:bd:82:b8:44:
         00:7d:0a:df:16:79:54:23:b2:8f:d5:32:42:33:7d:a7:89:cb:
         6b:a7:ca:bb:f6:39:38:25:51:ea:4a:1e:1a:ff:82:f1:e4:e6:
         f3:cf:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----