Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft
File:                     RWKHhwTK4hMrBVji8oKXh0bYirw.mft (raw, json)
Hash identifier:          69Fdkpo0t/EjjDR/a69lM8zrByQ7+mTfxVY13lv3ibo=
Subject key identifier:   8D:09:9A:A6:BE:F1:4F:33:CF:DC:C7:87:19:62:E0:31:76:34:6A:4F
Authority key identifier: 45:62:87:87:04:CA:E2:13:2B:05:58:E2:F2:82:97:87:46:D8:8A:BC
Certificate issuer:       /CN=4562878704cae2132b0558e2f282978746d88abc
Certificate serial:       01852174F8D11F2E41828FFAF1126C880C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWKHhwTK4hMrBVji8oKXh0bYirw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft
Manifest number:          A8
Signing time:             Sat 17 Dec 2022 18:59:51 +0000
Manifest this update:     Sat 17 Dec 2022 18:59:51 +0000
Manifest next update:     Sun 18 Dec 2022 18:59:51 +0000
Files and hashes:         1: RWKHhwTK4hMrBVji8oKXh0bYirw.crl (hash: tjzFVsxGSBBgE8xdu43uqIYpxlgZFcMmTVtITMl8lZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:21:74:f8:d1:1f:2e:41:82:8f:fa:f1:12:6c:88:0c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4562878704cae2132b0558e2f282978746d88abc
        Validity
            Not Before: Dec 17 18:59:51 2022 GMT
            Not After : Dec 18 18:59:51 2022 GMT
        Subject: CN=8d099aa6bef14f33cfdcc7871962e03176346a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:38:70:d9:25:b9:90:7b:54:db:79:82:47:
                    2a:4d:dc:31:e7:f3:28:18:08:fc:40:f4:e9:91:a3:
                    8e:c0:eb:28:33:7d:df:ea:a5:0c:6e:8e:b6:e3:d0:
                    ac:34:84:8c:00:66:fa:5e:03:ec:97:13:01:11:e8:
                    0e:c1:0f:05:4b:54:8a:1c:9e:0e:16:21:c1:c7:af:
                    92:e9:60:ae:69:29:ec:03:47:f2:be:cd:64:b0:31:
                    ca:e0:b4:53:01:23:ba:47:a0:b1:0b:87:30:89:f6:
                    e1:c0:10:ec:c2:f7:8a:e3:bc:79:6e:9c:1a:92:1c:
                    55:b7:d9:c4:06:31:5f:a7:9b:ed:ae:8c:ab:77:08:
                    ec:88:8a:55:b3:30:a6:25:aa:54:44:f8:d7:a5:dd:
                    0c:ad:82:f8:e8:1f:65:e0:36:33:10:0a:51:24:39:
                    c4:9f:8c:29:d9:9d:d5:15:09:c5:3c:51:c7:87:0c:
                    9b:8c:5f:06:a6:67:8c:62:6e:89:d5:5e:d7:f2:0d:
                    80:ba:14:93:c1:f3:be:bd:ef:b6:b6:d0:b7:47:17:
                    40:c1:93:54:d9:c8:1e:ee:31:3f:b3:41:b7:df:27:
                    0d:8b:aa:5f:c4:8a:a1:2f:fe:87:15:33:89:9d:36:
                    46:c1:8b:79:8d:ef:1d:b5:f0:9a:c7:98:df:4d:31:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:09:9A:A6:BE:F1:4F:33:CF:DC:C7:87:19:62:E0:31:76:34:6A:4F
            X509v3 Authority Key Identifier:
                keyid:45:62:87:87:04:CA:E2:13:2B:05:58:E2:F2:82:97:87:46:D8:8A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWKHhwTK4hMrBVji8oKXh0bYirw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:75:26:56:ea:e7:2d:5a:a1:71:da:d4:d4:54:59:4d:8e:fd:
         76:00:3f:45:fa:ca:fc:a0:14:0b:42:2e:0b:93:5b:22:08:93:
         a1:17:b6:8a:bb:b8:14:8b:fa:ae:4a:a3:b0:26:be:e1:c2:2d:
         c7:3d:a3:91:d1:35:58:05:3e:76:23:bf:52:ef:ef:a0:47:fb:
         fc:b9:ac:43:a9:9a:83:04:ab:28:fe:cc:0f:ef:bb:7b:58:22:
         22:92:67:e9:af:4d:53:7d:98:c3:5d:8e:02:a8:44:ae:90:16:
         40:98:ac:68:f3:48:8e:93:54:e6:dd:1f:f3:22:bf:08:40:2a:
         b7:6a:a4:47:fe:cb:6e:47:b7:6e:57:b6:a5:2d:35:23:64:fc:
         87:e3:64:8c:35:19:d2:78:a4:30:c0:be:9a:27:e0:76:e2:39:
         19:0c:76:2f:d7:39:f1:00:86:70:6b:b8:53:ca:0f:7e:34:91:
         1f:47:b3:df:08:60:68:e6:23:fb:91:dd:ce:df:f7:c5:16:b4:
         ae:34:31:2f:11:2e:40:cd:c8:0f:85:a8:21:d8:08:2c:1b:de:
         de:d1:1c:fd:7e:a9:22:95:90:ed:d6:a3:a3:ac:72:a8:d6:c8:
         d9:e2:6c:5e:a9:a9:a1:fe:31:2d:ad:90:4c:6f:73:6c:1d:ed:
         77:43:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----