Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/126dc5-6b16-4ff7-a7eb-2e68f46e4765/1/88YhFYXOBepowgwGx8A7RpsngpQ.mft
File:                     88YhFYXOBepowgwGx8A7RpsngpQ.mft (raw, json)
Hash identifier:          G98xzGIg80e2/2gP2AIgHS+Eu+ZXxP2zN0kNDGwPO18=
Subject key identifier:   64:54:0A:11:E0:E9:3C:5E:80:3A:81:27:DF:F2:12:DF:9F:D8:8E:67
Authority key identifier: F3:C6:21:15:85:CE:05:EA:68:C2:0C:06:C7:C0:3B:46:9B:27:82:94
Certificate issuer:       /CN=f3c6211585ce05ea68c20c06c7c03b469b278294
Certificate serial:       0182EE3A32F22356C24CF0BF4B055D541248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88YhFYXOBepowgwGx8A7RpsngpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/126dc5-6b16-4ff7-a7eb-2e68f46e4765/1/88YhFYXOBepowgwGx8A7RpsngpQ.mft
Manifest number:          0A8B
Signing time:             Tue 30 Aug 2022 10:09:27 +0000
Manifest this update:     Tue 30 Aug 2022 10:09:27 +0000
Manifest next update:     Wed 31 Aug 2022 10:09:27 +0000
Files and hashes:         1: 88YhFYXOBepowgwGx8A7RpsngpQ.crl (hash: SB220/bTST7BQM37gU/zfvuItGEAmw7bhZJky4k6DSc=)
                          2: KbXfPU7Wld2o0LHUOvpDpw2m2D8.roa (hash: 5rQhoUugeR661AdumD4DllasvJVJ1tzeS+cqwk9Ted8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ee:3a:32:f2:23:56:c2:4c:f0:bf:4b:05:5d:54:12:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c6211585ce05ea68c20c06c7c03b469b278294
        Validity
            Not Before: Aug 30 10:09:27 2022 GMT
            Not After : Aug 31 10:09:27 2022 GMT
        Subject: CN=64540a11e0e93c5e803a8127dff212df9fd88e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:61:fd:0c:80:cf:30:49:1f:09:50:5a:bd:
                    41:33:d9:86:06:3d:5d:b8:45:e0:8b:18:a8:c0:f9:
                    3e:06:e0:7c:56:b3:08:ec:34:a9:ab:8a:53:ef:35:
                    43:cd:9a:62:01:c4:90:e6:c3:6e:e2:ad:7e:31:24:
                    50:72:0b:6b:fc:e4:e1:77:d5:92:38:ce:20:e2:59:
                    5e:17:7b:34:e3:e1:0e:91:0f:71:6b:7b:26:89:67:
                    be:ba:18:55:f0:55:62:b5:4d:1d:82:d6:15:5e:2b:
                    97:65:d2:85:78:19:f4:41:36:0a:84:4f:0b:61:6b:
                    bd:c0:37:11:2b:23:81:26:c6:dd:72:7e:62:bd:33:
                    75:bb:3e:3e:a4:a8:55:e0:21:6a:31:bd:bd:4d:d0:
                    3e:04:76:d4:2c:9a:ca:00:c9:50:b2:50:e7:10:c0:
                    de:01:ec:03:4b:6d:be:3b:ad:ca:0f:25:28:2c:37:
                    61:92:b9:a8:b6:bc:7d:58:bb:fc:6b:82:fc:4f:7c:
                    99:0a:04:83:b9:d9:9b:f3:de:60:1d:6d:3e:81:b5:
                    f3:d6:e3:77:cb:73:c0:9c:a1:c8:cb:06:8a:3f:57:
                    52:de:54:85:cb:08:a1:e0:66:bb:1c:28:96:54:8f:
                    b5:5e:97:b6:8e:f6:aa:90:e0:5f:c6:09:3f:12:6d:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:0A:11:E0:E9:3C:5E:80:3A:81:27:DF:F2:12:DF:9F:D8:8E:67
            X509v3 Authority Key Identifier:
                keyid:F3:C6:21:15:85:CE:05:EA:68:C2:0C:06:C7:C0:3B:46:9B:27:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88YhFYXOBepowgwGx8A7RpsngpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/126dc5-6b16-4ff7-a7eb-2e68f46e4765/1/88YhFYXOBepowgwGx8A7RpsngpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/126dc5-6b16-4ff7-a7eb-2e68f46e4765/1/88YhFYXOBepowgwGx8A7RpsngpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:45:fb:f7:76:3d:5c:e0:3d:c0:a0:ff:e5:f6:72:09:d3:
         8d:4a:6a:7e:fd:bd:c8:6c:81:1e:b6:c2:aa:99:c1:e8:e0:75:
         ca:ea:ad:0a:e1:41:43:5b:b7:d8:28:b5:61:4f:e0:ca:ae:f3:
         48:67:28:ba:7b:d1:69:ec:bc:ee:8c:d5:f9:5a:fd:a8:a6:be:
         75:88:13:4a:1e:70:f0:80:13:82:82:9e:5b:0f:69:3e:f7:34:
         2f:20:f5:a1:a7:80:5a:e1:a8:37:93:96:95:ee:da:1a:f8:9d:
         bb:07:e5:f9:24:e4:0c:91:30:1a:08:43:2f:40:c5:d0:2e:69:
         15:55:40:9e:5f:5b:48:71:a3:d4:6d:b9:1c:00:f9:13:ee:0b:
         0e:da:98:12:e4:27:ba:f8:d9:d6:b5:e3:fe:4c:2d:28:9f:76:
         a8:42:f1:7d:d5:ba:31:32:b7:1a:57:e2:a6:ed:4f:74:d9:ad:
         80:b1:ca:1d:22:02:21:3a:89:5b:fc:b6:ee:ce:d3:8d:38:44:
         ea:95:ac:60:5e:35:24:ab:f8:48:74:27:06:e3:e5:c2:a8:bf:
         d9:bb:14:3e:2e:5b:63:6b:06:97:a8:91:76:4b:26:2e:65:93:
         45:97:5f:67:21:2e:be:99:49:bd:26:fe:5b:a8:ab:38:9d:af:
         bb:56:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----