Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/S4PrWKICMU7h_bIjjytolfZDxXs.mft
File:                     S4PrWKICMU7h_bIjjytolfZDxXs.mft (raw, json)
Hash identifier:          G1dOc7YSh7TgRY/BiVLuPVGimfViQzyn4FigRaw/CI8=
Subject key identifier:   79:99:07:67:F5:2F:0A:2C:05:A5:71:A6:58:E8:A0:B0:01:C2:CA:0C
Authority key identifier: 4B:83:EB:58:A2:02:31:4E:E1:FD:B2:23:8F:2B:68:95:F6:43:C5:7B
Certificate issuer:       /CN=4b83eb58a202314ee1fdb2238f2b6895f643c57b
Certificate serial:       01840D651CBFF5CCA33704B775B51103D22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4PrWKICMU7h_bIjjytolfZDxXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/S4PrWKICMU7h_bIjjytolfZDxXs.mft
Manifest number:          0B31
Signing time:             Tue 25 Oct 2022 04:27:20 +0000
Manifest this update:     Tue 25 Oct 2022 04:27:20 +0000
Manifest next update:     Wed 26 Oct 2022 04:27:20 +0000
Files and hashes:         1: KGRSyDYNB8t7DwpFkBuzI4RtTUk.roa (hash: LlpElT622jmRXZ3e99ETnyg9j44fpFThRZPmA3f1h44=)
                          2: S4PrWKICMU7h_bIjjytolfZDxXs.crl (hash: OsESrTxiSLOZ7o0hQf5jKTSfVnBK8e5ISFY4A1HIaMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:65:1c:bf:f5:cc:a3:37:04:b7:75:b5:11:03:d2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b83eb58a202314ee1fdb2238f2b6895f643c57b
        Validity
            Not Before: Oct 25 04:27:20 2022 GMT
            Not After : Oct 26 04:27:20 2022 GMT
        Subject: CN=79990767f52f0a2c05a571a658e8a0b001c2ca0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:99:df:d6:76:49:0f:b3:d0:56:bd:82:9d:
                    43:ec:d5:9b:e1:a0:54:45:ce:9e:cf:80:99:e7:0b:
                    00:1d:65:d0:f7:1a:05:17:9d:1b:e8:b3:21:95:ea:
                    3d:a9:f9:97:67:5d:22:dc:d5:e6:f6:b9:4f:d3:76:
                    26:7d:08:19:87:66:65:15:9b:9d:96:43:98:28:da:
                    fa:76:78:91:c2:b4:c9:4e:0b:ec:4b:53:46:d0:06:
                    c7:16:02:63:e3:1f:6f:c2:18:a0:1a:7e:7b:d6:30:
                    25:fa:fa:32:cc:8d:50:1c:ae:a0:ac:b0:88:8e:24:
                    eb:3e:b3:ac:37:5f:29:42:98:5d:a1:7e:d3:e4:d5:
                    5c:d3:c3:44:3a:f1:08:93:70:7c:8f:c2:d9:49:63:
                    32:2b:98:9d:b0:8a:28:5f:17:49:a6:10:0d:f1:af:
                    13:46:a9:62:83:fb:0d:1c:08:0f:bb:aa:2f:b5:a9:
                    4f:49:4c:4c:a3:5e:c0:62:3e:d7:e0:4b:a4:87:57:
                    5c:9a:5f:e4:87:aa:e5:34:82:3e:37:72:54:06:a9:
                    e8:a3:7a:51:49:b9:b7:ef:2e:01:4a:84:41:d6:4c:
                    79:2f:8c:1b:f6:a0:8c:14:78:96:43:8e:7b:90:d3:
                    ae:c5:91:59:e4:7b:f6:6e:50:67:d7:85:cc:bb:f4:
                    15:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:99:07:67:F5:2F:0A:2C:05:A5:71:A6:58:E8:A0:B0:01:C2:CA:0C
            X509v3 Authority Key Identifier:
                keyid:4B:83:EB:58:A2:02:31:4E:E1:FD:B2:23:8F:2B:68:95:F6:43:C5:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4PrWKICMU7h_bIjjytolfZDxXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/S4PrWKICMU7h_bIjjytolfZDxXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0d7a7e-e404-46a6-a890-ffe01e46c502/1/S4PrWKICMU7h_bIjjytolfZDxXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:34:b1:ef:4a:ce:3b:8c:18:c7:18:24:5e:19:c3:5c:29:d8:
         17:e8:46:b9:51:56:60:a0:7c:12:57:87:25:c0:c9:e0:51:85:
         95:38:be:78:db:20:0e:f3:26:53:a7:04:6c:ae:bd:6c:59:83:
         86:9e:f4:3a:7f:50:71:23:76:54:88:73:92:e0:fa:3c:51:38:
         c7:27:79:90:75:9f:71:17:54:3b:7b:c3:c9:19:64:16:94:ef:
         b0:4e:16:50:7b:4e:4d:22:b4:c9:78:90:7d:ad:78:8e:76:b1:
         52:40:90:6a:9f:1e:63:aa:2d:a2:e9:7e:38:b7:e6:60:21:fe:
         5b:3f:c9:6a:4b:7a:88:71:e5:7e:db:9d:55:83:c6:a6:05:99:
         24:cf:33:33:54:90:8c:4f:9d:cf:3f:bc:d5:1d:f9:a1:9a:3f:
         50:ec:63:c8:5c:8c:4b:7c:91:f8:f3:1e:02:fb:9e:55:9f:e0:
         b6:e3:b6:70:1c:5c:2d:e9:f2:d5:54:37:5c:36:3f:d5:09:e3:
         7c:34:10:10:39:5d:f4:10:de:34:49:6e:38:44:a9:50:ce:0d:
         d4:d0:d2:a3:47:9c:2a:79:9f:d5:a9:04:99:d5:56:62:57:73:
         06:10:22:b1:ae:56:c1:1d:5a:51:df:ca:7c:9a:7d:57:59:28:
         64:94:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----