Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/laLk04Q0UU-LkAqk5TYYW831GIg.mft
File:                     laLk04Q0UU-LkAqk5TYYW831GIg.mft (raw, json)
Hash identifier:          Koo+8gPLAXFuJ3dbfY9AuDuIC18Q8T7WPtwA/31qaPY=
Subject key identifier:   C3:BB:1F:97:11:B1:23:87:1A:D8:E7:9F:22:D8:E3:A3:44:AB:52:52
Authority key identifier: 95:A2:E4:D3:84:34:51:4F:8B:90:0A:A4:E5:36:18:5B:CD:F5:18:88
Certificate issuer:       /CN=95a2e4d38434514f8b900aa4e536185bcdf51888
Certificate serial:       01851A8DD5DEE19523ACB2B31EB23DF06956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laLk04Q0UU-LkAqk5TYYW831GIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/laLk04Q0UU-LkAqk5TYYW831GIg.mft
Manifest number:          0959
Signing time:             Fri 16 Dec 2022 10:49:40 +0000
Manifest this update:     Fri 16 Dec 2022 10:49:40 +0000
Manifest next update:     Sat 17 Dec 2022 10:49:40 +0000
Files and hashes:         1: 7O7Ecw3wl2eccWDUTY2zfLh7dmU.roa (hash: wjbZfmnk15RfODruPMA5SAk6kN4QwyPhXxqNxzOY7i8=)
                          2: laLk04Q0UU-LkAqk5TYYW831GIg.crl (hash: 99i9iuJeEFVrHe26PJO1nV7HLASr6+GOWYdd+WKkGfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1a:8d:d5:de:e1:95:23:ac:b2:b3:1e:b2:3d:f0:69:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a2e4d38434514f8b900aa4e536185bcdf51888
        Validity
            Not Before: Dec 16 10:49:40 2022 GMT
            Not After : Dec 17 10:49:40 2022 GMT
        Subject: CN=c3bb1f9711b123871ad8e79f22d8e3a344ab5252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:b7:2f:8f:db:e6:9c:02:d4:32:9c:56:7e:
                    bd:98:d5:03:c6:59:5f:e9:1f:24:a0:74:0b:e9:ae:
                    a6:17:05:82:5c:4a:37:0c:a7:0f:63:5b:51:c3:f3:
                    e3:4e:d3:4d:d8:59:6c:9f:fe:6f:66:a9:9f:93:63:
                    d0:7b:ec:ba:94:7b:73:3a:5e:f2:82:2b:fc:4d:35:
                    2f:57:3a:2b:0f:b9:b2:68:5c:54:b6:9d:10:64:bd:
                    1a:bb:81:35:93:8f:25:64:38:b8:f0:63:bb:dc:c8:
                    51:20:66:63:b0:ae:8b:b4:7a:9c:47:a1:51:34:98:
                    10:41:37:5a:0c:d3:4c:91:0b:ae:8e:dd:f0:11:3d:
                    0b:36:bf:b3:26:91:24:79:3f:36:a2:1a:d5:13:3c:
                    d1:5d:6d:4b:31:be:ec:1c:ad:98:a3:9e:fe:ea:1e:
                    06:37:e7:85:78:7d:5a:e0:e2:65:34:b1:40:43:a3:
                    40:65:38:fd:23:8f:55:b0:3d:73:c2:84:09:49:02:
                    f1:93:22:7e:1a:ff:71:1a:8f:ee:4a:8e:c2:5e:4c:
                    91:2f:e4:4e:e0:ad:f7:48:29:d6:3b:ab:e2:44:86:
                    12:4b:04:f2:42:7a:07:eb:86:55:0f:f9:f4:71:3f:
                    1f:67:e5:0f:4d:a8:f1:da:90:3d:ce:b2:68:74:fa:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BB:1F:97:11:B1:23:87:1A:D8:E7:9F:22:D8:E3:A3:44:AB:52:52
            X509v3 Authority Key Identifier:
                keyid:95:A2:E4:D3:84:34:51:4F:8B:90:0A:A4:E5:36:18:5B:CD:F5:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laLk04Q0UU-LkAqk5TYYW831GIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/laLk04Q0UU-LkAqk5TYYW831GIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/laLk04Q0UU-LkAqk5TYYW831GIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:98:bb:11:2d:b5:63:0a:c8:28:2d:38:aa:84:60:cf:e7:be:
         b5:66:a4:0c:2d:5f:0a:c8:c5:6d:27:58:29:54:07:31:65:be:
         bd:bb:5a:05:3c:03:d1:d4:80:d9:bf:3c:2c:26:81:db:14:fa:
         9c:4a:9c:a6:5c:d4:f0:29:47:55:6b:c9:9a:dc:f1:1d:a4:23:
         b9:f7:46:ca:bf:f5:d0:9e:71:6c:d9:03:3d:13:c3:5b:ae:b4:
         1e:09:b7:d1:cb:4d:f9:bf:50:38:ad:fd:15:4d:fd:62:dd:8f:
         ee:5a:f8:1b:74:60:a4:85:d7:92:d7:44:1c:a2:74:2a:53:98:
         56:14:e3:52:eb:ef:24:d0:1e:48:61:d2:5f:0d:7e:ad:e7:28:
         a2:34:e1:e7:47:4a:14:2c:0f:0e:78:df:18:e1:0a:50:22:ca:
         04:5a:db:7e:af:f9:df:66:4f:21:c1:99:80:0b:9e:fc:cb:ab:
         e6:f9:05:3d:5c:25:24:e6:ab:3d:ef:a9:da:81:a3:d0:90:7c:
         58:83:42:b6:a0:6b:19:ad:ff:24:5a:5a:fb:d0:bb:da:e4:e2:
         44:5f:f8:b4:9b:75:df:f1:26:25:00:20:79:3a:4d:7e:df:29:
         9b:be:63:62:ea:ed:a5:28:35:88:2b:f1:34:da:3e:6b:c1:73:
         f2:49:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----