Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.mft
File:                     Wgd55l0LoQ3bJbSCm9clzmyr4YI.mft (raw, json)
Hash identifier:          ldVeK9eiN7eAKjKzd0GVt4BNVVbadnN078HaaHw71p4=
Subject key identifier:   83:BD:C8:88:B0:30:84:65:FE:1A:75:A6:C3:29:38:C0:E3:0E:8F:DC
Authority key identifier: 5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
Certificate issuer:       /CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Certificate serial:       0185386DE5B1FEA5377D1F41DAA00C5F976A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.mft
Manifest number:          03B3
Signing time:             Thu 22 Dec 2022 06:03:24 +0000
Manifest this update:     Thu 22 Dec 2022 06:03:24 +0000
Manifest next update:     Fri 23 Dec 2022 06:03:24 +0000
Files and hashes:         1: F4BnQRNBueM-Wi0ik8xjqd16XbA.roa (hash: SOlLZr2StKOKMjzpXsl95F/f7Ebr/nQIpokX2fiEhQQ=)
                          2: GhNqttgDWziKulJldiaRxSH-acU.roa (hash: J4ubMbmgVSaFt+jwwxn7P1osR0IlYPH427MaRsnydF8=)
                          3: IPdhta8-SeDR-Qa0tyDqOmS64i4.roa (hash: Fy1d+v/ah9mj63ESv1YwpPHrVT47IS3NL/GplA8hXq4=)
                          4: Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl (hash: /FKsis+0IH0GK0iqQgLT0jXepuYhPgHmFY9I1pw44VQ=)
                          5: Xx_H3BFJqZeNYaXL-nZCu0N6R_M.roa (hash: SQL/oPq1yQvwRsA9wvAOluJM6z7Njhhyxcqs18D0C5s=)
                          6: h8SfwRbK368oFi78rR2XGkZPbNU.roa (hash: ElvtvstD0BwuDb1nmTO7s+WuDPXQ9LdclByOZIKOkfU=)
                          7: k64lNe7WF0dd6Mgx0LI9H8Df3Yo.roa (hash: fkg44GY3561RjYHK5bn2RVUDYpUmaX4pBDVRCr94y2U=)
                          8: lFzoF3pVgcqn63bIt--BeMp2r64.roa (hash: g9jpIqbpDULGSkN/H1eLFDRP39ZQcTwgiziGjThYoH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:38:6d:e5:b1:fe:a5:37:7d:1f:41:da:a0:0c:5f:97:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
        Validity
            Not Before: Dec 22 06:03:24 2022 GMT
            Not After : Dec 23 06:03:24 2022 GMT
        Subject: CN=83bdc888b0308465fe1a75a6c32938c0e30e8fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:80:d0:b4:ef:fb:f6:f4:0e:f6:8a:b5:9f:
                    57:c0:8c:7b:15:08:c5:91:b4:99:b5:9c:2a:8c:0d:
                    4e:28:27:e2:2e:bf:4b:86:69:a5:47:b5:6c:9c:dd:
                    8d:d7:9e:7c:5a:a5:b3:7f:6c:c2:5e:8d:80:54:16:
                    64:97:4b:a3:77:37:9f:5c:c7:4c:85:a5:d7:8e:85:
                    ab:81:e7:7f:ec:b2:cc:7f:f7:68:4b:22:88:ff:53:
                    73:62:f0:49:0c:dd:50:ca:fa:49:2e:1c:05:93:b7:
                    09:01:c6:cf:bd:15:5f:66:c4:60:95:ab:29:18:b1:
                    13:49:04:26:fd:bf:b9:a4:be:95:74:3c:15:83:4a:
                    ee:95:db:c6:e1:8d:c5:ab:5a:30:0e:fd:94:8a:af:
                    3f:ba:3a:6a:6c:08:a9:d5:90:7a:a8:4d:21:93:15:
                    5f:cf:45:58:75:a6:f0:2e:7a:37:73:f1:8f:cc:83:
                    c3:96:83:c7:aa:f9:0d:48:9e:5d:1f:14:7c:97:66:
                    46:39:84:c7:b6:51:e9:c3:d6:bb:8c:6d:d3:1e:a4:
                    de:20:af:1f:7a:ea:d2:f6:5e:3b:c0:7f:53:66:e8:
                    d4:33:39:cd:77:18:26:35:83:9c:65:36:12:26:de:
                    5d:38:39:0c:0f:2f:91:11:f4:50:09:f5:b4:ca:7d:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BD:C8:88:B0:30:84:65:FE:1A:75:A6:C3:29:38:C0:E3:0E:8F:DC
            X509v3 Authority Key Identifier:
                keyid:5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:0b:ef:20:df:bb:ef:b6:5c:ed:fd:c6:17:4b:03:38:20:
         54:da:65:d0:c0:6a:e4:19:63:d3:cd:3d:88:fa:b5:80:33:14:
         04:b6:bf:e1:7f:83:a8:ad:55:41:8f:57:5c:fa:44:1d:74:75:
         b9:af:d3:01:4f:15:53:20:62:b9:54:ef:0d:5b:fc:8f:f0:9a:
         e7:4a:b7:18:f2:90:26:6f:00:ba:fd:59:8c:67:1c:ee:ab:c1:
         7f:a4:b7:a9:77:d3:49:b9:b9:c8:97:b7:ef:af:e4:f6:90:d2:
         94:e3:5e:4b:46:e5:2d:8f:6c:58:a8:63:98:c8:65:4f:02:2f:
         8b:3f:16:01:30:67:17:dc:88:be:df:18:a4:41:b3:90:a2:70:
         27:0d:af:25:15:46:53:bc:69:8e:7c:9e:e8:90:a6:80:b9:1e:
         c6:a3:ef:8a:06:ac:3a:e6:af:18:16:51:6d:30:8e:8d:f2:bb:
         3c:c5:2d:ab:59:8c:e1:90:cf:7d:4b:97:f7:8a:e5:03:f6:7f:
         11:68:59:58:0a:6f:f3:0e:1f:ab:6f:55:0a:41:e1:66:4a:f5:
         84:63:ca:c6:78:b0:22:da:aa:b7:e0:6f:90:48:3c:3c:64:91:
         d7:51:de:ff:b8:c1:06:93:ab:19:be:4d:9d:27:37:04:96:85:
         71:9c:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----