Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.mft
File:                     Yred09xkY98APtjxHnzWvbFArvU.mft (raw, json)
Hash identifier:          Uc7sHRASPj+QqCHGLmHD/VkZP6CTAqT4rFG85dzwbZE=
Subject key identifier:   49:69:3C:B7:54:38:A2:FC:E4:8E:9A:6F:4D:DB:20:D3:18:C2:FD:9C
Authority key identifier: 62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
Certificate issuer:       /CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Certificate serial:       018557B0E5363824DC31587F2F7E5CD33A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.mft
Manifest number:          0881
Signing time:             Wed 28 Dec 2022 07:44:48 +0000
Manifest this update:     Wed 28 Dec 2022 07:44:48 +0000
Manifest next update:     Thu 29 Dec 2022 07:44:48 +0000
Files and hashes:         1: Qt8yEHByvdn8mRQ6Amic33MszDw.roa (hash: QXkEFUPaieI4Pf7S4DbvxyrjsF15CfDhg88+ElTii5o=)
                          2: Yred09xkY98APtjxHnzWvbFArvU.crl (hash: KoNhDylx9SaO7W7dv2v7807BKP/BNY5e86j5aGN4DkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:57:b0:e5:36:38:24:dc:31:58:7f:2f:7e:5c:d3:3a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
        Validity
            Not Before: Dec 28 07:44:48 2022 GMT
            Not After : Dec 29 07:44:48 2022 GMT
        Subject: CN=49693cb75438a2fce48e9a6f4ddb20d318c2fd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:21:00:a2:e5:10:e8:db:a8:eb:3d:e0:8d:
                    10:79:ee:fe:f0:dd:04:7e:d3:fc:46:d3:a5:c2:e7:
                    c4:98:63:f8:77:59:cf:7b:a5:1a:94:ba:42:72:91:
                    2a:54:13:6a:34:28:34:87:4b:27:e6:1d:52:3a:df:
                    80:fb:63:33:99:13:2d:c7:aa:d3:5a:a8:42:8b:80:
                    80:32:03:36:62:46:47:84:7e:da:f9:d7:81:34:9e:
                    c6:b2:4a:e1:6d:7a:75:1b:c1:a4:16:d5:63:e4:0e:
                    71:37:a8:a0:9b:e3:c9:fb:98:6a:6f:f6:67:a7:59:
                    50:0b:7c:d2:1d:3f:06:60:3b:8b:0e:87:f5:62:7d:
                    5a:d0:d3:95:22:d6:60:b7:6c:ab:0d:ba:b1:c4:d3:
                    32:f0:83:d8:83:25:ca:aa:ac:49:aa:cf:ac:55:74:
                    20:ca:d7:88:0b:d1:c9:3a:15:29:f3:1f:92:47:93:
                    22:50:80:5c:65:48:fa:e3:1c:51:50:14:33:65:5b:
                    92:21:e8:92:04:80:93:39:15:9b:05:36:96:f6:76:
                    08:49:1a:96:5f:39:13:d3:94:87:87:c4:c7:c8:35:
                    18:3e:dd:46:d6:e6:21:71:1f:c1:d1:31:15:33:e0:
                    8a:ec:35:6c:71:cc:b3:14:c8:1f:4e:03:8b:f3:22:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:69:3C:B7:54:38:A2:FC:E4:8E:9A:6F:4D:DB:20:D3:18:C2:FD:9C
            X509v3 Authority Key Identifier:
                keyid:62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:aa:6a:6a:f1:6c:b1:de:fa:32:11:14:9f:16:14:6a:24:b1:
         da:15:ba:93:35:99:69:2e:61:ac:d9:f2:5f:d4:d3:b7:be:60:
         b5:d4:00:d5:ff:9e:95:1e:8b:c5:1d:4a:54:37:0c:00:fc:a1:
         42:d7:85:53:b0:22:11:06:3b:1c:fd:c0:58:99:00:d9:b1:e0:
         f5:1d:6b:8f:6a:69:d4:73:a8:89:e7:9c:26:4e:62:77:4b:da:
         a9:be:e5:4f:14:a7:68:61:9d:6f:29:84:c4:a3:50:21:db:dd:
         de:82:c7:c1:52:c6:26:96:44:9d:0c:e4:64:d4:9e:a5:4c:55:
         bc:09:66:0c:83:73:15:6b:08:07:3d:6c:01:35:0c:e0:60:fa:
         d4:c1:44:03:87:0d:fd:f2:7f:11:92:37:15:28:c8:dc:3f:a7:
         63:b9:8b:56:e7:71:e4:c9:a4:7a:e3:34:36:03:ae:6f:f7:63:
         d5:84:f1:c3:6c:18:e9:8c:97:b1:c1:47:8b:21:ba:75:93:2a:
         d9:46:67:43:5f:c6:93:36:be:ee:f1:19:6a:26:de:12:ef:5f:
         bd:d1:c6:d9:ea:87:0c:59:82:a1:65:39:fc:6a:78:a6:74:2e:
         0f:de:3d:1f:9f:78:32:c7:9c:a3:3d:50:ec:c3:a7:52:4b:f6:
         70:df:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----