Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.mft
File:                     Nm3iLxUtLxMzqUDh4LvWtNi-rEg.mft (raw, json)
Hash identifier:          xw0Yxd0hxd/bIjV2o3/vdsW5VcuSTU3mLg510GXSZe8=
Subject key identifier:   95:19:67:69:B6:81:3F:DD:57:58:45:9C:F2:60:2B:E7:65:CC:5C:CF
Authority key identifier: 36:6D:E2:2F:15:2D:2F:13:33:A9:40:E1:E0:BB:D6:B4:D8:BE:AC:48
Certificate issuer:       /CN=366de22f152d2f1333a940e1e0bbd6b4d8beac48
Certificate serial:       0185152750D7DF0DDA8001B133B1A893A667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.mft
Manifest number:          0943
Signing time:             Thu 15 Dec 2022 09:39:36 +0000
Manifest this update:     Thu 15 Dec 2022 09:39:36 +0000
Manifest next update:     Fri 16 Dec 2022 09:39:36 +0000
Files and hashes:         1: CrTfBtxnf8gBCTEcTl4PSymCBEE.roa (hash: cakF9FVGoF4LWOmnqKjfA2DPXa2uxQ9pc3ubY8M55bg=)
                          2: Nm3iLxUtLxMzqUDh4LvWtNi-rEg.crl (hash: v+CTF03nSojpk3l1C0s4b5I5vtBcpcl0WAxjmT/aNiE=)
                          3: Oqg-Z2n_8ya5-kBPiFXU1Kg5src.roa (hash: t6VU3EoAQtbclRnVAgO4soXqhWktDwkuGoQNTLB/5dI=)
                          4: ktwhIZi6CBjdnP1bi0MpDzvpUAk.roa (hash: SRuZElyZ4KwbHamKkY7V+ilMiDG0RnWygJkmHjGyNys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:15:27:50:d7:df:0d:da:80:01:b1:33:b1:a8:93:a6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366de22f152d2f1333a940e1e0bbd6b4d8beac48
        Validity
            Not Before: Dec 15 09:39:36 2022 GMT
            Not After : Dec 16 09:39:36 2022 GMT
        Subject: CN=95196769b6813fdd5758459cf2602be765cc5ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:52:13:bb:3f:63:50:f9:7d:bf:eb:06:3a:
                    16:3e:f4:7a:84:a8:20:bf:07:0a:c1:90:e1:c5:67:
                    00:bc:8f:9c:11:81:d5:c4:32:24:91:05:63:bf:e1:
                    30:aa:f1:76:20:41:49:96:ce:a0:64:20:0a:b3:a6:
                    5b:b8:08:0a:bb:f4:b1:19:62:86:53:ab:a1:6f:b5:
                    c8:b8:b2:f5:c3:00:5a:86:09:62:e5:ee:4d:fb:27:
                    cf:2b:55:ae:7e:43:fd:e3:ab:74:8b:cc:e1:cb:e0:
                    4c:a8:f7:96:7b:2c:2c:a3:5b:ce:e1:14:30:9d:ce:
                    87:d6:00:eb:62:64:2f:9e:92:43:77:7b:a9:1c:c3:
                    39:ba:44:c8:a2:45:f2:04:e0:80:4e:84:bc:38:e7:
                    62:d7:3a:8a:b4:16:08:b3:f3:e6:9f:a6:4e:f7:b3:
                    07:16:60:39:eb:b3:d3:cf:f5:b1:03:d5:99:40:ef:
                    25:b5:bc:a8:5c:4d:f0:a6:14:2f:21:ff:f2:59:6d:
                    a6:0e:a4:25:da:e2:0a:ae:bf:2f:f1:5d:c7:4a:24:
                    88:6e:5a:ee:91:53:b2:92:04:82:63:9e:03:a3:4e:
                    f4:3f:71:27:1f:53:e3:10:a4:b5:82:72:68:f6:5a:
                    e1:ae:8b:d3:b8:9e:bd:00:c5:03:eb:9d:a6:0b:88:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:19:67:69:B6:81:3F:DD:57:58:45:9C:F2:60:2B:E7:65:CC:5C:CF
            X509v3 Authority Key Identifier:
                keyid:36:6D:E2:2F:15:2D:2F:13:33:A9:40:E1:E0:BB:D6:B4:D8:BE:AC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:4a:f6:90:bc:c2:65:27:c2:0e:73:9e:d9:77:38:7d:29:
         06:24:c8:bd:05:f1:b8:a2:bf:0b:54:fd:18:ec:2a:3a:92:71:
         e2:d5:d2:d2:8d:2e:38:72:e9:5f:24:b7:11:3f:ae:8b:01:c6:
         53:d4:4b:14:46:43:d1:bb:46:9a:da:aa:83:2a:4f:5e:48:2a:
         b5:5d:24:d4:44:d5:f1:c3:ed:c9:55:e4:ae:3e:a5:e6:27:89:
         33:a6:5b:cd:c9:5e:67:66:0a:d9:23:98:f2:a6:89:f0:c7:c6:
         22:8b:7a:da:17:21:c7:5b:fc:2a:4e:0d:9b:e7:20:17:e3:c2:
         fc:7e:0c:32:53:c8:cb:19:ea:2a:cd:c3:3e:85:99:8a:04:cf:
         1d:b4:f2:eb:01:3a:d4:3e:1d:b5:58:83:07:5d:84:78:ac:10:
         b6:82:be:d8:fd:7e:14:e2:f0:28:bb:1c:c0:78:f4:c7:73:f3:
         4d:8a:fc:b3:71:30:d0:55:ac:79:97:85:6f:3a:3d:5a:3e:b7:
         f6:d5:96:c6:af:a8:dc:e7:91:30:69:f3:dc:89:04:ec:7f:48:
         ce:7a:d7:16:5e:29:f8:11:3f:b1:de:7f:74:43:bd:ea:f0:cc:
         8d:1d:9e:ab:92:34:7e:25:e7:31:77:26:3a:5f:83:3e:a4:c7:
         d5:45:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----