Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/2EtRNxSjhYweHVvTGq0IrkkRRUw.mft
File:                     2EtRNxSjhYweHVvTGq0IrkkRRUw.mft (raw, json)
Hash identifier:          SVz14g4zGY6/h6LA6mfxtY+gAmpmDMu5yCZHMMR9+1Y=
Subject key identifier:   83:64:80:AE:52:84:0E:9A:E1:A8:ED:B7:DB:B9:21:93:16:AE:B8:BC
Authority key identifier: D8:4B:51:37:14:A3:85:8C:1E:1D:5B:D3:1A:AD:08:AE:49:11:45:4C
Certificate issuer:       /CN=d84b513714a3858c1e1d5bd31aad08ae4911454c
Certificate serial:       01856265CDB875ED3686A9B05F35C4BD7225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2EtRNxSjhYweHVvTGq0IrkkRRUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/2EtRNxSjhYweHVvTGq0IrkkRRUw.mft
Manifest number:          03CB
Signing time:             Fri 30 Dec 2022 09:38:36 +0000
Manifest this update:     Fri 30 Dec 2022 09:38:36 +0000
Manifest next update:     Sat 31 Dec 2022 09:38:36 +0000
Files and hashes:         1: 2EtRNxSjhYweHVvTGq0IrkkRRUw.crl (hash: p3vwNo50VrkEd5BzMNoR+eHkZc7pjXnaTJHTTodBDu8=)
                          2: X7QPrILeBJCVwlYrLguM5j1-BLg.roa (hash: OSV6zCn+3jyJAkw0iJmDZ2rHTkUpuANjn2kH90IiZAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:65:cd:b8:75:ed:36:86:a9:b0:5f:35:c4:bd:72:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84b513714a3858c1e1d5bd31aad08ae4911454c
        Validity
            Not Before: Dec 30 09:38:36 2022 GMT
            Not After : Dec 31 09:38:36 2022 GMT
        Subject: CN=836480ae52840e9ae1a8edb7dbb9219316aeb8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:c1:5d:65:67:ad:97:9f:98:ae:22:23:54:
                    07:e1:49:3e:9f:4b:bf:c5:bc:6c:68:d4:16:2b:ed:
                    48:a3:82:eb:ee:f0:83:44:36:20:02:a3:a9:3d:74:
                    f6:d3:8d:62:03:f7:f0:39:62:bd:9d:a6:fd:fb:f2:
                    fe:dd:76:e7:1f:e9:58:ae:0c:17:89:17:9e:2f:9d:
                    31:fb:66:6f:72:0e:f1:ca:b2:8a:e4:a0:85:64:08:
                    e2:d5:a1:4d:c5:6e:b8:d2:67:3c:a5:c0:d9:32:c3:
                    94:32:89:3a:ff:5d:3b:a6:c9:60:65:e7:ce:7f:46:
                    bb:f9:a3:ef:87:b4:45:8c:86:6b:3b:b5:b5:92:ff:
                    d7:d6:df:4e:29:98:66:91:d2:35:0b:bf:83:28:5b:
                    98:60:8a:e0:47:0a:51:af:e9:13:a0:67:c0:db:5c:
                    81:60:d0:d8:40:d2:73:23:5d:c9:b5:11:df:ca:ce:
                    85:fa:e7:af:6d:63:95:97:36:0f:0e:b3:6c:2e:5e:
                    cd:66:21:86:84:5e:95:38:4a:a4:17:16:51:8b:89:
                    32:95:5d:55:39:6a:59:73:e4:cf:26:6f:0e:93:2a:
                    3a:c9:56:9c:d0:ae:ef:b2:46:f0:15:8f:4a:4c:2d:
                    47:c2:aa:be:c6:cc:9d:8f:2f:36:7d:6a:9d:39:59:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:64:80:AE:52:84:0E:9A:E1:A8:ED:B7:DB:B9:21:93:16:AE:B8:BC
            X509v3 Authority Key Identifier:
                keyid:D8:4B:51:37:14:A3:85:8C:1E:1D:5B:D3:1A:AD:08:AE:49:11:45:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EtRNxSjhYweHVvTGq0IrkkRRUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/2EtRNxSjhYweHVvTGq0IrkkRRUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/2EtRNxSjhYweHVvTGq0IrkkRRUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:1f:d6:ba:b0:32:88:00:19:72:fd:1a:6f:a2:e9:af:b1:
         a2:97:ff:04:9e:85:d1:04:f5:3a:a6:48:b3:a6:c3:28:33:28:
         c2:b5:4e:f5:ad:d0:c1:9a:95:cc:7e:72:7f:10:79:3c:18:3f:
         83:28:d0:63:41:2f:98:29:30:6b:93:2f:8e:9c:a0:97:d6:c9:
         7b:cd:f8:8a:1c:b2:9f:f3:39:07:53:7b:e6:68:f2:61:eb:b4:
         74:73:b9:22:e0:cf:a2:34:14:9c:ae:fa:75:4a:9c:95:55:65:
         70:3c:1e:9e:94:5f:35:fe:f1:dd:31:0a:f3:d5:1d:7c:df:02:
         67:9b:63:ab:5b:6a:61:b3:2f:70:d6:d1:11:5f:cb:2c:aa:30:
         43:07:25:78:74:cf:6a:ad:7e:02:5d:1e:ea:a7:93:c4:36:97:
         15:60:01:2b:26:d9:54:d9:88:17:87:cf:07:3a:f5:b6:3c:ad:
         ea:66:63:85:4a:df:b5:0b:89:b0:2f:40:54:7c:90:1c:ad:88:
         21:a9:79:28:76:5e:17:20:fe:fb:f7:a8:fa:d9:f9:57:86:7c:
         55:c1:11:e3:40:61:95:0b:e9:1a:9b:c9:a9:72:ee:be:ec:ac:
         31:d1:ab:c5:fb:c8:80:b3:39:27:7a:21:f7:a4:44:57:5a:ac:
         ab:06:16:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----