Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/yf2_Jxr_2t1QRy5GUQy3VixLBlo.mft
File:                     yf2_Jxr_2t1QRy5GUQy3VixLBlo.mft (raw, json)
Hash identifier:          p5STGpbgTrBZZnp/NNTPjEslNyLLVt2y1PRJI2krFYo=
Subject key identifier:   EB:02:B1:44:5D:BE:7C:86:9B:B3:8C:27:D3:79:AD:FE:C1:D7:3C:CE
Authority key identifier: C9:FD:BF:27:1A:FF:DA:DD:50:47:2E:46:51:0C:B7:56:2C:4B:06:5A
Certificate issuer:       /CN=c9fdbf271affdadd50472e46510cb7562c4b065a
Certificate serial:       01850EC9BDFE4F71F74B4A75CC12EF998572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf2_Jxr_2t1QRy5GUQy3VixLBlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/yf2_Jxr_2t1QRy5GUQy3VixLBlo.mft
Manifest number:          4D
Signing time:             Wed 14 Dec 2022 03:59:40 +0000
Manifest this update:     Wed 14 Dec 2022 03:59:40 +0000
Manifest next update:     Thu 15 Dec 2022 03:59:40 +0000
Files and hashes:         1: APboYrI5Wwxr4Xv0U8G-4yLuAJ4.roa (hash: KzSDgSYMKjVL/1gsEotEdL6tY1h+G+GC10gkq2+Uz0g=)
                          2: yf2_Jxr_2t1QRy5GUQy3VixLBlo.crl (hash: YwymvLCwtYlZhMNUOQi50GwsGL5jJz4MemJbWKGkUu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0e:c9:bd:fe:4f:71:f7:4b:4a:75:cc:12:ef:99:85:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fdbf271affdadd50472e46510cb7562c4b065a
        Validity
            Not Before: Dec 14 03:59:40 2022 GMT
            Not After : Dec 15 03:59:40 2022 GMT
        Subject: CN=eb02b1445dbe7c869bb38c27d379adfec1d73cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:09:32:0f:a7:c4:33:19:29:3f:67:b8:ab:
                    b1:46:14:26:ee:84:16:f7:c8:d1:c5:53:b3:0b:a1:
                    79:b4:5b:4f:88:df:46:4f:dd:99:7a:99:b4:84:0a:
                    82:a5:08:b8:b4:d0:99:76:2c:e4:fd:00:29:95:c2:
                    01:e6:53:5c:30:d3:d1:7c:f4:c6:c8:08:cd:61:bc:
                    93:b9:a2:4a:8e:45:9c:26:09:cf:0a:1b:0c:2f:e1:
                    b2:30:c7:6e:54:50:06:3f:b5:dc:3f:f4:cc:85:a9:
                    27:b3:29:be:5e:d4:aa:e7:2a:b4:45:00:c3:0e:0c:
                    d4:46:50:dc:5d:12:fd:6c:cd:a1:80:a1:f4:b7:aa:
                    23:43:8b:bf:1a:2f:c0:94:cd:e2:7f:15:19:67:c0:
                    b8:4f:c2:e3:40:8a:43:02:6a:a3:11:5b:a8:42:fc:
                    33:ab:75:7f:72:72:07:b4:cc:e9:d5:bd:2a:a0:39:
                    18:34:38:dc:a2:ac:d9:96:07:f0:15:7d:bb:c4:b3:
                    1e:2c:85:99:d1:af:a8:5b:3c:4f:8c:9d:df:44:46:
                    a8:9f:ae:fe:34:58:8f:7b:08:1f:dd:74:5f:81:54:
                    d0:43:56:50:24:38:5f:b2:e5:b1:ad:c4:e9:c5:00:
                    3f:f6:e5:d2:fd:22:b3:d1:5c:51:91:25:14:3c:2f:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:B1:44:5D:BE:7C:86:9B:B3:8C:27:D3:79:AD:FE:C1:D7:3C:CE
            X509v3 Authority Key Identifier:
                keyid:C9:FD:BF:27:1A:FF:DA:DD:50:47:2E:46:51:0C:B7:56:2C:4B:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf2_Jxr_2t1QRy5GUQy3VixLBlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/yf2_Jxr_2t1QRy5GUQy3VixLBlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/yf2_Jxr_2t1QRy5GUQy3VixLBlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c4:36:70:b6:03:92:ab:1b:35:a5:ca:2a:a9:b9:28:61:40:
         a5:92:5b:40:54:8d:e2:ff:c9:08:7e:14:90:d1:1a:92:eb:e4:
         1c:81:11:9e:68:d6:7a:51:8d:1d:67:36:6d:02:df:f7:fb:3c:
         52:a0:85:4e:bc:4f:5c:e8:9b:d6:65:70:64:db:4c:07:1c:da:
         0f:63:6a:9e:e5:49:07:60:9b:7c:26:e6:a3:b9:4f:f2:4b:28:
         f5:c3:da:11:b6:f2:49:98:1d:64:e7:79:ad:2f:12:27:80:61:
         93:03:64:f3:64:85:53:c1:ef:13:ca:13:57:2b:7d:71:93:74:
         76:fa:58:c9:fe:ab:1d:76:59:df:2d:78:ba:92:76:b9:dd:a1:
         fa:59:56:bb:01:f0:ac:63:cd:fb:e6:af:11:58:d5:c5:a9:f9:
         64:64:cc:9b:bb:0c:55:19:10:d0:7a:47:80:e9:ff:f5:f1:d2:
         15:35:96:d8:89:f5:85:15:2a:e3:12:5f:9c:ca:9a:a4:74:dd:
         ee:0e:5a:7a:d8:b5:4c:b8:7f:1c:32:b2:27:8b:57:ad:ed:fe:
         56:d4:b2:0e:f5:3e:d7:3a:07:df:9d:b4:e0:06:04:d9:eb:c0:
         5a:36:7a:e2:ce:c5:ac:17:18:14:a2:63:db:58:e0:ec:07:32:
         37:44:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----