Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/GFIox3FE2UXFFjPOy5TAKkNOHbY.mft
File:                     GFIox3FE2UXFFjPOy5TAKkNOHbY.mft (raw, json)
Hash identifier:          1mAoudLXT23544OeEjjAyro519zhLK3pvjLIBQbEw8o=
Subject key identifier:   D7:8D:19:E5:A2:EA:15:B3:38:46:18:B7:C3:80:8C:6C:C2:B5:C1:60
Authority key identifier: 18:52:28:C7:71:44:D9:45:C5:16:33:CE:CB:94:C0:2A:43:4E:1D:B6
Certificate issuer:       /CN=185228c77144d945c51633cecb94c02a434e1db6
Certificate serial:       0185334442268DFC720DCA6EF25B55C34607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFIox3FE2UXFFjPOy5TAKkNOHbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/GFIox3FE2UXFFjPOy5TAKkNOHbY.mft
Manifest number:          0BE1
Signing time:             Wed 21 Dec 2022 05:59:49 +0000
Manifest this update:     Wed 21 Dec 2022 05:59:49 +0000
Manifest next update:     Thu 22 Dec 2022 05:59:49 +0000
Files and hashes:         1: 4Bnj_0Vao_-5FisP_MtuW5EFa_w.roa (hash: LSad/t6XHduTIBM8OfE/Oc7h/oNh5E2DE7NxrPy6cz4=)
                          2: GFIox3FE2UXFFjPOy5TAKkNOHbY.crl (hash: G94LZNjurX8N1na2k9NbALeSGi5cIvvYJabpaprWBwM=)
                          3: GTWjtQYAxfvkecnQ-zFdmMBYh5g.roa (hash: kTjKv4qTko4takz7aKlVcOn1ONqk+RzfTKUKe0u8Df8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:33:44:42:26:8d:fc:72:0d:ca:6e:f2:5b:55:c3:46:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185228c77144d945c51633cecb94c02a434e1db6
        Validity
            Not Before: Dec 21 05:59:49 2022 GMT
            Not After : Dec 22 05:59:49 2022 GMT
        Subject: CN=d78d19e5a2ea15b3384618b7c3808c6cc2b5c160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:37:aa:d4:f6:1c:00:43:bf:8b:12:0f:2a:
                    52:9d:ee:d8:d3:3c:bb:1b:a9:2a:68:31:35:da:60:
                    05:34:fd:49:4e:27:37:9b:a0:eb:53:2f:93:e2:64:
                    af:54:a9:02:17:da:2e:67:0a:96:a1:ed:cc:81:c5:
                    19:67:1c:4b:5e:bc:af:5f:f1:07:49:13:e7:57:39:
                    8c:fe:b2:88:79:00:3c:ff:b2:ce:4d:60:ad:aa:b1:
                    91:09:fa:f4:23:2b:12:85:44:73:45:bf:6f:3d:0a:
                    95:b4:57:19:19:b2:94:81:93:3d:68:9a:34:ab:db:
                    a9:e8:01:03:ad:d8:f2:b0:73:3f:5e:78:7e:06:96:
                    bc:c5:9c:1d:18:37:6c:4b:de:07:ee:8b:2d:44:6f:
                    a4:75:d8:71:a4:43:bd:6d:95:5c:35:30:52:ff:ef:
                    c1:24:53:1c:91:29:40:75:9e:fa:02:7e:25:84:5e:
                    51:35:55:5e:6d:ab:8e:0f:2e:1a:e9:c0:c0:69:60:
                    cf:55:fa:d4:0a:26:af:57:9d:9d:85:59:03:a3:60:
                    05:86:fc:97:4c:b6:5d:cd:47:b5:74:1f:f6:f7:6f:
                    13:35:0d:32:5e:ea:37:53:d1:e3:b7:45:af:29:d7:
                    ae:11:c2:10:5f:93:84:91:b8:3d:d0:52:17:d8:e3:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8D:19:E5:A2:EA:15:B3:38:46:18:B7:C3:80:8C:6C:C2:B5:C1:60
            X509v3 Authority Key Identifier:
                keyid:18:52:28:C7:71:44:D9:45:C5:16:33:CE:CB:94:C0:2A:43:4E:1D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFIox3FE2UXFFjPOy5TAKkNOHbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/GFIox3FE2UXFFjPOy5TAKkNOHbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/GFIox3FE2UXFFjPOy5TAKkNOHbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:5d:c1:83:34:1f:94:4e:39:92:a9:f4:dc:ab:f8:7b:3d:
         a6:85:f6:04:75:2b:55:c9:38:ab:96:d0:a0:79:dd:1a:2d:bf:
         fd:8b:f7:9d:b0:95:32:7d:14:81:4f:bc:29:78:ef:fb:0e:ce:
         65:8b:69:af:bf:2b:2d:16:00:20:2d:6b:ff:c6:c9:0c:71:dd:
         bd:4a:2d:64:eb:71:14:e9:11:f4:f8:83:53:51:64:50:c2:84:
         29:3c:56:b8:96:68:3f:f0:2d:42:e4:6c:59:7f:50:bf:cc:0f:
         b5:ab:84:9a:86:16:b6:0a:1c:2b:b5:a5:f2:a0:d1:41:d0:2d:
         e7:69:df:9b:ed:48:2e:3e:3f:61:c6:c1:2f:a6:30:77:33:78:
         b7:e4:50:fe:59:7d:7b:65:95:20:31:0c:89:4e:26:55:e3:2e:
         5b:c7:25:88:0d:fb:9f:23:2c:20:3e:4f:98:1c:ef:a9:e4:fd:
         91:97:40:9a:c8:e0:fe:ec:45:ed:cc:97:e9:96:8f:b7:5d:5d:
         f4:11:69:2f:4d:17:08:89:3e:2d:00:c4:f8:16:69:11:69:71:
         07:d2:01:4f:ab:60:79:bf:0f:dc:af:48:9f:c6:c5:92:38:cb:
         d8:87:11:dc:49:a1:3a:32:c0:9c:ea:69:c5:a4:cf:48:22:13:
         71:eb:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----