Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/l9NLXQZr4d0EHs3dall9qEwPreM.mft
File:                     l9NLXQZr4d0EHs3dall9qEwPreM.mft (raw, json)
Hash identifier:          tXnwT8ZHdJouxUNJzb0pj8L37hy9F9nde3OjMhM1Pt8=
Subject key identifier:   05:C2:1C:3D:AE:3E:D0:B9:94:06:17:85:A5:EC:50:FD:B8:C4:6F:2E
Authority key identifier: 97:D3:4B:5D:06:6B:E1:DD:04:1E:CD:DD:6A:59:7D:A8:4C:0F:AD:E3
Certificate issuer:       /CN=97d34b5d066be1dd041ecddd6a597da84c0fade3
Certificate serial:       0183556EE4D1DA3FA64EF3388D029E07B320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9NLXQZr4d0EHs3dall9qEwPreM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/l9NLXQZr4d0EHs3dall9qEwPreM.mft
Manifest number:          0A3A
Signing time:             Mon 19 Sep 2022 11:07:54 +0000
Manifest this update:     Mon 19 Sep 2022 11:07:54 +0000
Manifest next update:     Tue 20 Sep 2022 11:07:54 +0000
Files and hashes:         1: 3Q2KuacCxx1olqw4Cv-4YmpagD8.roa (hash: GrTTA3uVP4XlmDextyQcP58w0FkqfpV+5+lXGp6Lym8=)
                          2: CkjzUJM2lagBIbkfToLU6pE-ksE.roa (hash: /Lkai0Rb1mLQC6t1f2VQUqmqWsK25zvLJ99yESu3w0E=)
                          3: l9NLXQZr4d0EHs3dall9qEwPreM.crl (hash: 4l3Ly+5nIQGL6/t9cg9nU+8SMUU0EptKtvxGB5RL3r4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:55:6e:e4:d1:da:3f:a6:4e:f3:38:8d:02:9e:07:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97d34b5d066be1dd041ecddd6a597da84c0fade3
        Validity
            Not Before: Sep 19 11:07:54 2022 GMT
            Not After : Sep 20 11:07:54 2022 GMT
        Subject: CN=05c21c3dae3ed0b994061785a5ec50fdb8c46f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:2c:c1:e7:51:57:d6:4d:6a:32:df:5a:b0:
                    b1:b7:8c:e4:b8:04:81:a6:32:94:d5:64:7f:84:ed:
                    6e:c3:70:00:81:48:b2:93:0d:6c:fe:ba:d4:a7:71:
                    ab:96:ce:b6:da:2d:b3:96:15:ad:fd:83:a6:a7:c5:
                    14:22:6b:d5:43:dd:37:b5:0a:8f:ca:0a:33:c6:37:
                    67:49:d5:79:ad:68:c3:87:d9:e5:36:58:5b:59:33:
                    00:ba:e9:f1:31:1d:31:0f:62:e1:b6:5d:6d:6a:ee:
                    09:33:80:84:21:4c:31:2b:ce:d2:19:65:47:78:f3:
                    b9:4b:00:90:51:5b:38:da:51:1f:e3:c8:76:b2:81:
                    da:d4:dd:bb:26:ca:04:35:65:c8:de:ad:e4:c5:7c:
                    ab:09:d1:2b:f8:d0:5f:a7:6f:36:ff:79:34:e7:21:
                    f8:f9:49:7c:a5:6b:33:4a:37:f5:12:69:c2:83:d2:
                    1c:da:cf:e5:35:bd:0d:a9:48:43:1c:39:d4:09:21:
                    01:8f:6a:33:0b:64:98:d3:c4:90:a0:b6:c5:84:55:
                    c0:d5:45:92:98:4a:a1:8a:0f:9b:f1:af:3e:c4:24:
                    5c:35:36:9f:8c:83:6c:d7:06:71:cb:e3:22:68:1f:
                    55:69:af:e6:7f:44:de:5e:7c:f0:91:f0:cc:f6:3d:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:1C:3D:AE:3E:D0:B9:94:06:17:85:A5:EC:50:FD:B8:C4:6F:2E
            X509v3 Authority Key Identifier:
                keyid:97:D3:4B:5D:06:6B:E1:DD:04:1E:CD:DD:6A:59:7D:A8:4C:0F:AD:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9NLXQZr4d0EHs3dall9qEwPreM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/l9NLXQZr4d0EHs3dall9qEwPreM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/l9NLXQZr4d0EHs3dall9qEwPreM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:cc:ed:ae:2d:ab:64:3a:55:93:f4:e0:4b:72:30:ea:45:
         a5:83:44:c7:cd:78:19:7c:77:b6:f7:3c:0d:4e:a2:c7:f9:13:
         17:2a:2f:7e:75:d9:ec:ae:9d:ce:ac:f5:66:45:7b:d7:b5:24:
         c8:3b:55:1e:d0:a5:95:44:b0:82:6d:4a:0d:e1:d9:0b:fc:13:
         87:4f:ec:b9:7a:9e:9a:41:a4:03:5c:f3:cd:d4:62:a9:d0:58:
         27:f6:a4:9f:13:f6:4c:7c:2c:6d:98:e7:96:5a:b9:c8:95:de:
         02:74:0e:2c:af:e0:bd:1c:aa:c6:d9:10:ee:76:73:da:c0:98:
         65:17:03:64:b3:1b:22:aa:0f:f8:51:35:bb:53:40:38:b2:fd:
         4e:a9:87:07:2e:66:43:f4:6b:f1:f8:55:21:b7:46:7f:6e:1d:
         b9:32:fe:19:f0:52:6a:01:65:61:2c:77:9d:b8:01:4e:b8:fd:
         62:a0:05:5a:c3:3e:bb:05:5a:0f:6b:6d:fa:4a:f6:f6:b3:bf:
         a1:c5:09:6b:2e:72:78:39:30:be:7f:2a:59:51:85:f5:5c:37:
         6f:74:44:09:d6:74:71:23:fa:9b:9d:96:27:d7:a7:f7:0a:f2:
         75:b9:18:9f:8a:f8:1a:0a:ae:55:72:03:ac:45:56:a2:6e:cd:
         bd:3c:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----