Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/ZKXb7eWkK4HwgMej02dOVQrTtqk.mft
File:                     ZKXb7eWkK4HwgMej02dOVQrTtqk.mft (raw, json)
Hash identifier:          2bmaf4gxOIeIHJXRMBowEBIiaWMIreD3eQIvWhEg+Ww=
Subject key identifier:   D3:EA:5A:35:E6:18:6F:E8:1B:C9:FA:D7:24:F7:6F:2C:8C:72:B5:5D
Authority key identifier: 64:A5:DB:ED:E5:A4:2B:81:F0:80:C7:A3:D3:67:4E:55:0A:D3:B6:A9
Certificate issuer:       /CN=64a5dbede5a42b81f080c7a3d3674e550ad3b6a9
Certificate serial:       01845115CD25B6F38BBC8CC332E0E7902CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKXb7eWkK4HwgMej02dOVQrTtqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/ZKXb7eWkK4HwgMej02dOVQrTtqk.mft
Manifest number:          0B35
Signing time:             Mon 07 Nov 2022 07:54:53 +0000
Manifest this update:     Mon 07 Nov 2022 07:54:53 +0000
Manifest next update:     Tue 08 Nov 2022 07:54:53 +0000
Files and hashes:         1: LEZBvBJuXKRQudmiVKfT0bazP1g.roa (hash: mLqbd7ZQOulY7MWp9fEMD07MwUs6jRBZaPCg15Rc8gA=)
                          2: ZKXb7eWkK4HwgMej02dOVQrTtqk.crl (hash: Nze4Cb10jUkZditxsDcE1ktl3KS3Jdh/hqtNDsiK+zQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:51:15:cd:25:b6:f3:8b:bc:8c:c3:32:e0:e7:90:2c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a5dbede5a42b81f080c7a3d3674e550ad3b6a9
        Validity
            Not Before: Nov  7 07:54:53 2022 GMT
            Not After : Nov  8 07:54:53 2022 GMT
        Subject: CN=d3ea5a35e6186fe81bc9fad724f76f2c8c72b55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:81:90:ca:08:b2:c5:09:bb:a8:8b:d7:91:
                    1c:ef:a1:5b:af:5d:3c:02:f9:5b:09:53:58:bf:91:
                    bd:1e:56:cb:42:dd:ba:35:ad:af:03:ac:3d:f7:f6:
                    c7:a6:79:32:32:dc:52:81:0a:8d:e7:66:81:c8:b3:
                    d8:ae:06:16:06:24:7f:c8:77:45:10:33:54:1e:f1:
                    19:0e:cb:cb:c3:b5:aa:e8:dc:52:57:03:d9:c7:b1:
                    f2:38:67:b9:20:f5:47:7d:fc:02:8c:d7:70:36:c3:
                    dc:04:dd:07:fb:9c:36:77:f0:2d:9c:f5:fa:0f:40:
                    4b:4c:09:fd:9a:04:0c:a0:ba:b0:89:19:21:b9:65:
                    7b:6d:9c:dc:c9:c0:06:16:66:9f:c4:89:e0:4c:0c:
                    66:27:02:36:fd:1b:7a:cc:a3:f6:5f:eb:23:98:53:
                    0e:d5:a1:dc:3e:ad:c2:d6:70:d0:9d:d0:28:d2:eb:
                    7b:83:49:dc:67:9e:36:7b:4a:b1:52:32:25:f8:35:
                    40:a1:9b:a1:50:65:86:d6:28:be:99:4f:d7:38:c2:
                    f9:b6:1a:dd:ba:d8:5e:4f:5b:b5:14:a8:77:a7:c8:
                    61:98:ff:a4:10:8c:14:b4:cd:2f:8b:a2:01:98:b5:
                    3d:9c:55:84:d2:23:2a:c2:69:1a:c2:08:08:bd:65:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EA:5A:35:E6:18:6F:E8:1B:C9:FA:D7:24:F7:6F:2C:8C:72:B5:5D
            X509v3 Authority Key Identifier:
                keyid:64:A5:DB:ED:E5:A4:2B:81:F0:80:C7:A3:D3:67:4E:55:0A:D3:B6:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKXb7eWkK4HwgMej02dOVQrTtqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/ZKXb7eWkK4HwgMej02dOVQrTtqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/ZKXb7eWkK4HwgMej02dOVQrTtqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5f:c9:7f:46:2d:47:32:72:6d:49:4e:98:56:0d:39:6b:99:
         b9:4f:50:ba:af:08:2b:42:63:cf:a3:c9:0a:78:1a:4d:1f:ab:
         44:4b:21:2e:77:1d:76:40:86:18:05:f1:9d:71:a6:07:52:a7:
         7b:8f:61:3b:9e:e4:b0:93:59:65:ad:14:4b:56:eb:05:4b:ca:
         3e:b9:4e:c2:f6:73:a1:62:10:df:e9:43:16:d1:13:33:39:87:
         f3:7a:7e:b7:16:52:d0:40:af:45:a2:aa:94:e6:df:ea:7c:6f:
         f3:cf:bf:12:c2:d0:3a:a1:e5:5d:d9:c6:f9:cd:ce:dd:f9:84:
         f2:72:75:1f:01:e4:0a:fc:e1:d8:90:aa:ac:59:e3:33:92:bc:
         f9:38:c9:3e:cf:a3:fa:5d:96:02:0d:05:89:41:d8:14:50:8e:
         d0:df:a2:b8:45:10:44:45:fe:55:93:11:df:24:d9:eb:1f:e3:
         d3:13:3b:4c:8c:e8:2f:5d:f8:3e:24:cc:8d:da:b9:cf:d1:15:
         df:26:5e:85:66:c6:08:eb:0f:81:4f:d7:34:dc:55:59:99:98:
         73:ea:49:13:ae:96:b0:aa:93:10:4b:08:30:15:26:dc:fb:12:
         9e:21:39:ff:e1:77:55:95:61:fa:9d:d1:da:fc:b1:85:8b:1d:
         6b:2a:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----