Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/_qz-9Qws5e0Vn0-AZIPB6miC67A.mft
File:                     _qz-9Qws5e0Vn0-AZIPB6miC67A.mft (raw, json)
Hash identifier:          qc2Ujuc+HG76QXi7PJxImbHSF0esYrx9sJs3gKsOF/Q=
Subject key identifier:   11:37:6E:61:6D:4D:4A:4C:23:7B:69:AB:D0:6E:2C:66:B4:50:86:DA
Authority key identifier: FE:AC:FE:F5:0C:2C:E5:ED:15:9F:4F:80:64:83:C1:EA:68:82:EB:B0
Certificate issuer:       /CN=feacfef50c2ce5ed159f4f806483c1ea6882ebb0
Certificate serial:       133C9F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qz-9Qws5e0Vn0-AZIPB6miC67A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/_qz-9Qws5e0Vn0-AZIPB6miC67A.mft
Manifest number:          0879
Signing time:             Thu 03 Mar 2022 05:40:26 +0000
Manifest this update:     Thu 03 Mar 2022 05:40:26 +0000
Manifest next update:     Fri 04 Mar 2022 05:40:26 +0000
Files and hashes:         1: _qz-9Qws5e0Vn0-AZIPB6miC67A.crl (hash: gomZLgS62LeH6c3ZCVK3fTfOL4s+KzflhhG3TJ1wyF0=)
                          2: aLyHmHFniM1hsDVZGhN1C0Fr23I.roa (hash: oWpJnM+h54sEKcpxlIdIdNQ7DtduWNadRkYFGDjIw+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322740047 (0x133c9f4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feacfef50c2ce5ed159f4f806483c1ea6882ebb0
        Validity
            Not Before: Mar  3 05:40:26 2022 GMT
            Not After : Mar  4 05:40:26 2022 GMT
        Subject: CN=11376e616d4d4a4c237b69abd06e2c66b45086da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:8b:dc:5e:93:8e:33:da:ab:0f:2c:2e:e1:
                    f2:2f:32:b9:cb:fb:13:ac:d0:7c:43:9a:9f:fb:16:
                    ef:58:7e:6f:9d:87:fb:20:ac:7a:1d:c8:bd:67:50:
                    67:8b:92:e7:58:a4:a6:98:b4:8c:90:4d:3b:78:93:
                    65:11:b0:0d:9f:c8:48:ef:f2:cc:91:9c:cb:e8:50:
                    ea:ee:5b:a5:bf:6d:2c:04:b8:1d:8a:7b:a6:0c:e0:
                    a1:11:1a:7e:1f:e7:a2:e7:0d:cc:e2:c5:de:1e:08:
                    42:5e:d7:4e:a9:ab:71:7d:e3:56:08:56:f8:0e:e4:
                    a0:f4:a7:ff:32:16:6f:11:c9:fe:8c:db:dc:15:e4:
                    df:c9:9e:9d:ba:17:71:8d:e6:b9:99:50:00:33:81:
                    d5:f7:86:1f:81:03:05:0e:5e:c0:8d:89:13:e0:a9:
                    69:2f:67:60:56:9d:a2:c2:a5:75:ff:a0:91:d8:07:
                    e4:87:f6:e1:81:35:89:68:ac:93:df:f1:90:7a:34:
                    dc:cd:65:61:da:41:f9:4d:35:cd:b9:ea:61:58:5e:
                    68:43:c9:1d:df:1d:20:ef:33:9e:d6:00:db:9f:e7:
                    86:0c:1e:73:c9:5c:0f:00:6c:80:48:60:82:89:1b:
                    2f:06:af:b1:98:53:b6:02:2e:a6:34:bd:2a:3c:e9:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:37:6E:61:6D:4D:4A:4C:23:7B:69:AB:D0:6E:2C:66:B4:50:86:DA
            X509v3 Authority Key Identifier:
                keyid:FE:AC:FE:F5:0C:2C:E5:ED:15:9F:4F:80:64:83:C1:EA:68:82:EB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qz-9Qws5e0Vn0-AZIPB6miC67A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/_qz-9Qws5e0Vn0-AZIPB6miC67A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/_qz-9Qws5e0Vn0-AZIPB6miC67A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:64:86:c4:a7:02:de:be:8a:83:26:1e:ce:e5:38:10:52:fe:
         7f:2e:eb:6c:61:49:bf:f4:37:17:d3:d4:24:e1:16:0a:ce:90:
         c7:a3:1c:c9:52:97:43:b5:af:16:d0:05:2f:f2:6f:a4:17:a3:
         d3:8b:ce:3d:f1:c7:24:34:b4:78:8f:3f:d3:fb:f2:36:9f:fa:
         67:b5:56:51:5a:6b:54:c0:2c:cd:97:3e:0e:bb:23:92:4b:d2:
         be:5c:3a:c5:15:5a:76:02:a7:0d:27:46:88:bb:9d:01:f0:0d:
         cb:7d:ec:30:c4:6e:cf:ab:63:50:5e:56:a1:23:59:e5:ec:79:
         0b:54:7f:00:77:42:f8:57:2f:30:52:ef:19:86:54:74:3f:5d:
         e6:04:b1:bb:8e:c3:f2:38:19:ff:72:b0:34:ed:12:ed:3a:41:
         4a:66:90:7f:ac:36:02:2f:74:a3:db:83:1f:a2:75:80:d0:5b:
         18:f9:40:66:7a:b5:0c:d3:33:e6:5e:f7:0e:3a:ea:91:d6:59:
         9d:6b:72:54:ea:39:e1:9a:68:0a:f1:6f:41:6e:ff:29:23:8c:
         c9:4e:dc:ae:ec:12:af:5d:09:f8:5e:5a:48:41:06:da:ba:7a:
         b0:0f:76:73:47:08:18:30:03:cb:2a:00:16:33:8e:f6:7d:01:
         51:0e:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----