Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/63AkG5zzB3yGUFRnoYsgx0qZZ4M.mft
File:                     63AkG5zzB3yGUFRnoYsgx0qZZ4M.mft (raw, json)
Hash identifier:          SyRPG6kwAZ7eHBA7zo1zQxz99JjMWDFpwYws4dWpsZI=
Subject key identifier:   09:C5:55:C3:D4:6A:2B:B2:D2:E1:F8:6A:36:9B:99:2D:12:23:FE:B6
Authority key identifier: EB:70:24:1B:9C:F3:07:7C:86:50:54:67:A1:8B:20:C7:4A:99:67:83
Certificate issuer:       /CN=eb70241b9cf3077c86505467a18b20c74a996783
Certificate serial:       0183EDED32F2D3D571957A77DC05EB33FF00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63AkG5zzB3yGUFRnoYsgx0qZZ4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/63AkG5zzB3yGUFRnoYsgx0qZZ4M.mft
Manifest number:          0AB1
Signing time:             Wed 19 Oct 2022 01:48:08 +0000
Manifest this update:     Wed 19 Oct 2022 01:48:08 +0000
Manifest next update:     Thu 20 Oct 2022 01:48:08 +0000
Files and hashes:         1: 63AkG5zzB3yGUFRnoYsgx0qZZ4M.crl (hash: T7S4g2UIVnRXwzNam45J3yBdr6JnFL/xdnI2JJTf500=)
                          2: Ip4CwzF8nLwP2B5nL4dp7dSi3h0.roa (hash: OZ/HSnhwsezuqo9BLR7x0pZSG517HbtwKgzafTL6yjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ed:ed:32:f2:d3:d5:71:95:7a:77:dc:05:eb:33:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb70241b9cf3077c86505467a18b20c74a996783
        Validity
            Not Before: Oct 19 01:48:08 2022 GMT
            Not After : Oct 20 01:48:08 2022 GMT
        Subject: CN=09c555c3d46a2bb2d2e1f86a369b992d1223feb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:cc:e7:a7:a1:c2:2e:cf:4a:73:c1:60:a0:
                    ba:0e:79:d9:c9:d5:17:37:76:7a:a9:6f:9f:e3:8c:
                    e3:bd:69:09:7b:14:a6:97:11:b3:e0:42:ec:a7:b4:
                    53:ad:68:6d:08:f4:ef:3b:dc:d7:fc:ed:b3:fa:5b:
                    d9:f6:2f:ca:ec:ba:7c:af:18:1d:0a:69:1a:f1:6e:
                    a8:aa:f6:1a:63:5b:e2:a4:b9:66:df:27:00:39:f3:
                    17:93:c6:a1:9c:23:ca:84:2d:30:e6:ff:ef:fc:ae:
                    17:65:be:8a:d2:ee:4f:ba:fd:d2:e8:bb:29:59:c7:
                    49:a1:a5:b0:f9:28:17:1f:97:07:ec:7a:53:9e:c8:
                    c1:c8:bb:4a:5f:f3:67:ca:84:ee:33:b5:f1:77:88:
                    db:46:50:3a:69:ba:be:25:57:2d:bb:01:b6:66:11:
                    7c:f6:8f:a4:7e:f7:0f:f2:83:19:a0:f0:9a:11:c7:
                    9a:f9:e1:f6:90:c6:c5:aa:a3:33:9f:2d:64:83:86:
                    7e:b2:dc:3a:4d:df:2d:b0:f7:c9:d6:d4:fa:eb:65:
                    24:49:11:29:11:e8:38:9a:06:56:19:39:ad:3d:e2:
                    c3:ec:ac:d1:cf:7f:05:9e:3f:11:6f:ba:9c:44:62:
                    e1:e7:e1:77:ea:a1:5c:47:a8:b8:09:31:1b:cf:91:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C5:55:C3:D4:6A:2B:B2:D2:E1:F8:6A:36:9B:99:2D:12:23:FE:B6
            X509v3 Authority Key Identifier:
                keyid:EB:70:24:1B:9C:F3:07:7C:86:50:54:67:A1:8B:20:C7:4A:99:67:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63AkG5zzB3yGUFRnoYsgx0qZZ4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/63AkG5zzB3yGUFRnoYsgx0qZZ4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/63AkG5zzB3yGUFRnoYsgx0qZZ4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:e1:0d:ee:e9:b1:c2:56:63:41:2f:e7:26:ba:ea:42:56:
         a6:94:26:a4:08:eb:a6:fd:d9:83:d0:28:05:c6:16:5f:cf:a5:
         32:e7:a2:47:cb:28:45:42:39:ce:79:b0:83:b7:18:eb:27:46:
         75:af:ad:20:5e:ea:52:16:0d:de:be:bf:e2:24:68:07:ea:0d:
         fc:98:7b:b2:7f:66:e1:04:7f:8c:3c:b9:3d:29:82:cb:36:27:
         66:f2:13:c8:b4:fa:de:0b:cd:ad:81:d1:f4:aa:0c:a3:a1:87:
         43:4e:69:c8:24:08:f7:b1:c2:7e:5f:78:28:d2:e7:c8:d7:a8:
         f9:cd:ef:8b:cd:23:63:97:8c:83:35:01:ad:cf:43:53:ed:84:
         ce:e5:10:23:08:e8:80:42:62:64:be:6c:2d:1e:d4:aa:b2:38:
         ab:be:a9:b5:bc:7a:40:78:95:99:28:c0:9b:97:aa:cf:c6:6a:
         3f:2e:59:12:c5:0a:28:fc:3d:88:de:e2:7c:c6:fa:8b:d5:42:
         cc:53:ad:7f:2e:db:7d:64:b3:8e:f4:49:0b:45:58:48:5d:12:
         27:97:70:e5:e5:d0:c0:8d:ef:e4:e8:af:a3:f0:62:83:3b:17:
         2e:ac:22:27:71:28:6d:ec:e9:1d:96:aa:c6:81:d7:b1:4e:ac:
         a6:51:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----