Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.mft
File:                     F2kHJ7RI3QCVPNTaXYg1EhpUzkg.mft (raw, json)
Hash identifier:          FPvJK9rsBD4NVMT81BE+eOqUjJ5MK9PFjIu1aiMm71w=
Subject key identifier:   B0:9B:20:BD:2E:E7:F7:EF:87:EC:40:95:B6:4E:46:04:E9:B0:A8:A8
Authority key identifier: 17:69:07:27:B4:48:DD:00:95:3C:D4:DA:5D:88:35:12:1A:54:CE:48
Certificate issuer:       /CN=17690727b448dd00953cd4da5d8835121a54ce48
Certificate serial:       0185578C545AEA320F7F4062AD31D5AB6BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.mft
Manifest number:          05AF
Signing time:             Wed 28 Dec 2022 07:04:52 +0000
Manifest this update:     Wed 28 Dec 2022 07:04:52 +0000
Manifest next update:     Thu 29 Dec 2022 07:04:52 +0000
Files and hashes:         1: A1ixkbqmMtvYAZcel_5ewkBhHwE.roa (hash: s8nf90OCiu5rziOd63ttKW4nP3Q5FYjX75AeqTrdFQI=)
                          2: F2kHJ7RI3QCVPNTaXYg1EhpUzkg.crl (hash: 8KqybptTJb0lK9UDW0oZEXjClKuq8xhxYpEMnt5hWJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:57:8c:54:5a:ea:32:0f:7f:40:62:ad:31:d5:ab:6b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17690727b448dd00953cd4da5d8835121a54ce48
        Validity
            Not Before: Dec 28 07:04:52 2022 GMT
            Not After : Dec 29 07:04:52 2022 GMT
        Subject: CN=b09b20bd2ee7f7ef87ec4095b64e4604e9b0a8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:b8:01:0c:bc:8e:a5:c2:9e:1d:1c:4e:d8:
                    a2:3f:ac:70:55:ca:96:48:48:a5:12:eb:81:10:60:
                    9c:63:f1:de:73:60:a0:a9:85:17:c1:e9:26:ea:3b:
                    5f:e2:ba:71:be:81:03:a9:a7:67:14:d1:c9:f0:7d:
                    f6:bd:66:9e:45:82:d2:42:bc:35:de:f8:f4:8e:74:
                    17:23:cc:97:b1:f5:11:83:1f:65:55:b6:57:1d:22:
                    f6:68:fc:f8:2d:c1:e4:5a:84:44:05:85:e8:13:81:
                    29:16:90:9c:17:55:72:f0:97:17:d5:e5:77:7f:5e:
                    e8:6b:1b:d8:0f:a6:5d:a7:a8:a2:8f:a0:3a:9a:4f:
                    54:c6:41:d6:84:d2:b4:ab:2c:17:4c:ee:d6:c7:60:
                    d1:0b:09:7c:a7:9f:9d:98:27:b0:f7:6b:ba:69:b4:
                    8a:66:5b:70:8d:7f:72:51:86:1a:ab:29:b8:55:a9:
                    ca:b2:a2:ab:c6:c2:3a:c8:cc:fc:31:b6:74:e2:84:
                    ef:db:9d:bc:7e:dc:64:51:ba:59:a0:00:31:10:ca:
                    2d:32:e8:4f:75:1a:87:66:fd:09:16:be:2c:71:65:
                    48:66:20:4b:b6:b5:cd:41:dd:31:ef:94:db:73:0b:
                    2a:8b:f7:d1:cd:8a:f8:9b:5c:9d:39:06:86:1c:6f:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9B:20:BD:2E:E7:F7:EF:87:EC:40:95:B6:4E:46:04:E9:B0:A8:A8
            X509v3 Authority Key Identifier:
                keyid:17:69:07:27:B4:48:DD:00:95:3C:D4:DA:5D:88:35:12:1A:54:CE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3b52f9-4a2c-408b-95aa-d6a2bb85bd03/1/F2kHJ7RI3QCVPNTaXYg1EhpUzkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:4c:0d:29:cd:d5:43:50:a6:5c:69:74:ae:b8:bb:e2:1c:
         85:81:13:11:a2:15:37:4e:fe:51:4c:88:86:77:16:15:c3:a8:
         67:18:a7:1b:a8:0d:07:c2:24:e7:4c:cd:7c:3e:7b:34:59:22:
         13:c9:b7:aa:22:81:7e:ca:48:29:79:a0:1f:40:08:82:ec:bf:
         a8:dc:e8:6a:64:c1:67:0a:5a:b9:70:0a:55:fd:30:db:0d:82:
         7f:8d:ec:74:33:26:c7:4b:9c:4a:04:db:70:dd:ba:95:05:fb:
         aa:e0:da:21:9a:a8:90:01:4e:79:c7:49:96:52:6f:93:35:cd:
         0c:f0:b4:8e:8a:62:94:5c:34:b8:af:b4:49:f7:ef:98:68:bb:
         c6:a2:32:61:53:5f:c8:76:75:ef:51:76:7e:d7:28:dc:c8:d9:
         ff:6a:c9:c1:37:05:d7:a9:b3:bf:73:91:36:fd:25:3b:b0:1a:
         9c:05:90:b9:cb:05:da:1f:53:38:f9:9c:eb:0d:68:b2:65:a2:
         89:3b:8d:51:4c:15:06:a3:9b:80:d0:e5:97:c3:b2:2b:8f:a5:
         50:95:2b:4a:79:3d:39:9d:27:58:be:72:aa:0c:9f:eb:d6:f6:
         32:a1:df:09:74:4a:98:35:69:f1:49:1f:26:c6:b9:94:b0:d1:
         7d:e1:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----