Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/2p2EmQfeG2vx9RYpblrYpEo4ojI.mft
File:                     2p2EmQfeG2vx9RYpblrYpEo4ojI.mft (raw, json)
Hash identifier:          c7FywZ6pYU5ceXeFg/c/q9I1uOM5HAYzzDqKjxL9Q1s=
Subject key identifier:   1F:31:0D:8D:8F:81:5F:3F:18:63:DA:99:19:87:A4:A2:6F:BC:28:39
Authority key identifier: DA:9D:84:99:07:DE:1B:6B:F1:F5:16:29:6E:5A:D8:A4:4A:38:A2:32
Certificate issuer:       /CN=da9d849907de1b6bf1f516296e5ad8a44a38a232
Certificate serial:       0184EBFC3E851C828D0B95E915F1A924CB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2p2EmQfeG2vx9RYpblrYpEo4ojI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/2p2EmQfeG2vx9RYpblrYpEo4ojI.mft
Manifest number:          0BAF
Signing time:             Wed 07 Dec 2022 09:48:07 +0000
Manifest this update:     Wed 07 Dec 2022 09:48:07 +0000
Manifest next update:     Thu 08 Dec 2022 09:48:07 +0000
Files and hashes:         1: 1-r6cUdXYSXR5pGeb3e3Mc9PLutI.roa (hash: FIrPvkgGEWUnG/Km0Cbgh/9x8YDhhbDsAoWcRJB4pkI=)
                          2: 2p2EmQfeG2vx9RYpblrYpEo4ojI.crl (hash: HKGTGDseKyu94IFlKPVRfNGLWC87zIvFYsF+FHvEmUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:eb:fc:3e:85:1c:82:8d:0b:95:e9:15:f1:a9:24:cb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da9d849907de1b6bf1f516296e5ad8a44a38a232
        Validity
            Not Before: Dec  7 09:48:07 2022 GMT
            Not After : Dec  8 09:48:07 2022 GMT
        Subject: CN=1f310d8d8f815f3f1863da991987a4a26fbc2839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:1d:14:35:7d:6a:d0:10:cb:54:90:32:4c:
                    f4:0c:46:ec:e6:30:c4:03:ef:ac:8c:b1:00:91:34:
                    c0:92:ac:b8:7e:5c:a1:eb:0f:52:2a:11:9c:49:42:
                    ea:53:d7:74:de:21:a3:bf:11:35:58:49:f8:36:84:
                    40:5e:25:66:7b:89:6c:fe:35:7b:1b:42:f6:be:c5:
                    c2:b6:84:01:0d:19:70:5e:fa:ba:c0:fa:7e:cb:95:
                    40:73:87:c6:64:ca:15:a7:e1:d9:14:cc:2c:cd:cb:
                    f1:0e:66:99:1d:43:85:96:ae:56:7d:c4:84:f4:0d:
                    1d:a2:17:11:63:b1:33:28:f0:22:0b:93:ab:59:d8:
                    76:32:e3:b8:f0:18:1c:b4:ee:83:46:1c:48:ac:58:
                    26:51:a2:73:b8:e3:cd:46:5d:27:5d:d2:66:55:5f:
                    52:1d:bd:a0:04:c4:fe:8f:96:b4:ba:cd:01:ab:fa:
                    69:96:fb:80:a8:e6:ae:fd:9a:c7:10:d9:be:b6:be:
                    5f:3a:94:d7:8f:cb:6d:31:29:70:4a:c9:f7:26:5f:
                    43:66:be:24:07:3f:cc:d3:ba:76:2b:29:25:50:bd:
                    89:2a:94:4d:5f:79:49:ba:09:63:9e:7e:2c:54:da:
                    15:74:ac:37:01:92:de:61:53:3f:70:5e:28:05:18:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:31:0D:8D:8F:81:5F:3F:18:63:DA:99:19:87:A4:A2:6F:BC:28:39
            X509v3 Authority Key Identifier:
                keyid:DA:9D:84:99:07:DE:1B:6B:F1:F5:16:29:6E:5A:D8:A4:4A:38:A2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2p2EmQfeG2vx9RYpblrYpEo4ojI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/2p2EmQfeG2vx9RYpblrYpEo4ojI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/2p2EmQfeG2vx9RYpblrYpEo4ojI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:14:6d:73:2a:8c:ce:22:93:e7:8b:06:7d:dd:fa:95:9b:7f:
         af:15:88:6e:f1:e3:98:30:01:60:9c:24:cb:80:e2:df:c4:57:
         4b:bf:0b:fe:d6:b1:64:48:02:a2:f3:e4:6d:fd:92:77:2b:be:
         b3:4b:cc:f9:b7:22:64:1a:cc:fc:da:87:f3:cd:90:69:9e:e1:
         89:d9:c8:5e:7a:dd:1a:3e:a4:c7:56:b1:3a:d7:8b:71:da:3b:
         14:20:16:4a:15:70:b2:12:32:ba:ab:fe:cb:ac:3a:9b:8a:4a:
         37:85:f0:8c:b9:a8:4e:d0:5d:c7:7a:7d:d3:a3:25:b8:2c:ae:
         af:a8:6f:3d:71:ba:60:c3:fc:d6:6a:e2:b1:30:da:a1:e5:5a:
         84:f8:a1:d9:22:77:3b:43:fb:e2:9b:cc:ae:5d:fb:dd:b3:5e:
         14:ed:69:7a:a5:42:69:dd:25:96:a1:28:7c:ab:1d:d1:32:0b:
         61:fe:36:14:7c:9a:1f:45:7c:96:b0:73:ed:90:f8:b7:cf:b4:
         b6:88:58:ef:e6:11:2e:f1:bc:d1:1e:64:c7:14:9d:90:13:bc:
         14:77:49:8f:12:42:de:f1:5a:a9:25:c3:b5:9a:ec:8e:ab:10:
         90:05:40:4c:64:29:c2:4a:25:61:1a:34:f0:ec:f4:cc:15:d6:
         68:45:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----