Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft
File:                     1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft (raw, json)
Hash identifier:          HTPwjIcUGAaC6Rp8xTpZIPTXb3QqEApOHUhzlJK3QjA=
Subject key identifier:   BA:3E:3E:9C:78:26:CD:28:46:B1:00:49:C1:E7:39:83:FD:4A:1F:66
Authority key identifier: F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D
Certificate issuer:       /CN=f8f393fc2725d2460b6a2b981746d476340be06d
Certificate serial:       01841CD80B717F8DD7E32811A41511A1C501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft
Manifest number:          0B3C
Signing time:             Fri 28 Oct 2022 04:27:11 +0000
Manifest this update:     Fri 28 Oct 2022 04:27:11 +0000
Manifest next update:     Sat 29 Oct 2022 04:27:11 +0000
Files and hashes:         1: 1-POT_Ccl0kYLaiuYF0bUdjQL4G0.crl (hash: XedAYOdUPhqDrufwG1ATOjqsxUOsz7iEKcDGrizIk0M=)
                          2: 33tQCTO5lQt8wj6qHBbFW1cbGto.roa (hash: sTEolqzI8aUE+cW4mc6SXtWC8fnNrSXdtdqWw8MvONM=)
                          3: adPRzTj-91qe6dCfwpRqEelLMT8.roa (hash: 87HQIiQLgkkmMFMDWJAsvemOcE5MmdTvPw5dF3cS7No=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1c:d8:0b:71:7f:8d:d7:e3:28:11:a4:15:11:a1:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f393fc2725d2460b6a2b981746d476340be06d
        Validity
            Not Before: Oct 28 04:27:11 2022 GMT
            Not After : Oct 29 04:27:11 2022 GMT
        Subject: CN=ba3e3e9c7826cd2846b10049c1e73983fd4a1f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:76:76:f8:3d:50:39:7e:af:9b:c0:b3:1c:81:
                    e2:92:53:bf:f7:25:54:5b:59:c3:b9:fe:4e:5a:12:
                    3e:ba:8a:a2:e7:06:02:c6:5b:3b:cd:e2:61:ec:7b:
                    ec:4e:0b:c0:26:e5:5a:76:39:a7:03:d4:56:c4:49:
                    9b:1f:d6:b0:55:27:90:86:4d:f4:ce:bc:c3:0d:ac:
                    23:6a:0a:b5:3c:0c:32:62:d0:80:25:55:df:92:a0:
                    81:19:d6:04:3a:7b:18:dd:ba:97:59:22:d7:89:52:
                    69:73:74:d5:4a:b8:93:8e:0a:0b:42:f0:7f:47:30:
                    1e:29:b4:26:6d:46:42:e8:0e:e2:d3:9c:e0:64:04:
                    7c:ac:f6:98:5c:78:9c:ea:f9:1d:0f:4e:33:47:3e:
                    0b:14:e2:98:0a:d1:0c:9f:1d:7e:6a:c7:5c:1d:7a:
                    b5:1e:95:27:9f:a5:6b:8a:ed:20:e3:c0:00:b7:65:
                    5b:54:6e:e5:af:64:9e:bd:36:14:08:70:ec:0b:44:
                    fe:33:53:41:6d:ab:84:c2:87:10:32:2a:4b:94:c9:
                    74:87:f0:20:e0:10:ca:74:c9:8a:73:67:3b:ab:f4:
                    75:d2:e2:db:60:ae:78:ca:f4:b0:ba:49:4b:8f:27:
                    e3:e8:45:df:8d:95:24:7c:a0:2b:03:5f:80:ff:de:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3E:3E:9C:78:26:CD:28:46:B1:00:49:C1:E7:39:83:FD:4A:1F:66
            X509v3 Authority Key Identifier:
                keyid:F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:48:6b:59:01:aa:3b:86:8b:7f:0a:7a:52:6e:b2:97:1d:44:
         e4:de:31:a8:c7:ba:51:ae:f4:e8:15:0a:49:ba:61:f9:d4:70:
         de:51:5c:4d:ef:99:6e:3d:ab:af:90:ff:43:a6:7b:b9:c9:50:
         9d:cc:ba:a6:d5:6f:06:50:af:17:56:7b:83:66:13:8b:5e:0f:
         94:df:37:43:0f:69:b8:97:58:d3:70:cb:e0:39:61:89:e1:5e:
         d5:38:a4:77:a7:1e:e3:93:23:1b:8d:07:40:32:17:cb:e3:4a:
         b7:61:b8:51:d0:aa:1a:cf:78:93:ef:af:db:eb:43:f3:c8:bf:
         7d:2f:7b:8b:b2:6a:02:a4:e4:b2:d0:2b:bf:f7:67:4c:d8:f1:
         20:7e:ad:90:a3:5d:43:84:ac:7c:9c:d0:4f:02:4e:0a:27:cc:
         12:b6:81:1e:bb:9d:43:34:7d:94:f4:f2:c2:34:5a:81:bd:ee:
         a6:85:e5:6c:b8:e2:94:10:d0:72:ce:3b:b7:1a:f7:11:d0:fa:
         20:8a:3d:4e:15:b0:65:a1:8b:0a:19:9c:2d:a8:fd:13:41:3e:
         39:13:68:2d:d6:31:c0:13:ca:09:df:77:2e:1c:1f:91:d9:12:
         cb:6b:35:5c:f0:05:44:b4:81:d7:49:ff:84:c6:cb:3c:9e:3d:
         cb:7a:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----