Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.mft
File:                     0U2zPOytHuEGjN-xHmFnOyFAw34.mft (raw, json)
Hash identifier:          vm5CdhaIf3T1w7L6kQrqBbWowd1FOq+Ic+6A463Z6zM=
Subject key identifier:   CF:8B:D6:64:4A:3A:46:DC:39:5E:C2:CE:AE:77:9B:9B:B5:4D:3A:46
Authority key identifier: D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E
Certificate issuer:       /CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
Certificate serial:       01845BD23DD31A97CBA0E0313E34A412D0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.mft
Manifest number:          0AE3
Signing time:             Wed 09 Nov 2022 09:56:55 +0000
Manifest this update:     Wed 09 Nov 2022 09:56:55 +0000
Manifest next update:     Thu 10 Nov 2022 09:56:55 +0000
Files and hashes:         1: 0U2zPOytHuEGjN-xHmFnOyFAw34.crl (hash: gDuygsvoTA+YiUOe4WRxrgubO3KepXKkgyHYTsWrXiI=)
                          2: NTHKIVmfMMuw14dckM7HDv7ZOu4.roa (hash: TlHRYEbn/THRpLUNg8pCBzgv3kObNob5atoKjEPEjBg=)
                          3: l_m6OUxyZBFOPaqTXVAUtkvAnM8.roa (hash: UxAeiUuOaXaiGbV+2P2mcxbx8P/GsRdSCQZ3xsYDP4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5b:d2:3d:d3:1a:97:cb:a0:e0:31:3e:34:a4:12:d0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
        Validity
            Not Before: Nov  9 09:56:55 2022 GMT
            Not After : Nov 10 09:56:55 2022 GMT
        Subject: CN=cf8bd6644a3a46dc395ec2ceae779b9bb54d3a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:96:8b:a3:c0:32:1c:00:22:5c:b5:f8:d9:
                    be:3b:1e:05:cd:92:a6:8e:0e:ec:3a:07:c1:38:9a:
                    51:4e:55:ed:05:16:eb:0f:bc:18:77:12:41:ff:87:
                    b9:ff:fa:c0:78:7b:70:7c:e7:77:cc:43:97:a9:71:
                    f3:f8:7d:31:83:98:57:d0:6d:8c:cc:ad:2c:c2:67:
                    ee:0d:57:07:d1:e8:72:76:9a:42:9a:b8:76:c4:5a:
                    86:3e:a3:91:83:e3:15:76:12:dd:e8:6e:e3:18:1c:
                    a2:44:8e:30:fa:5b:5c:05:e4:87:bc:e2:77:ff:5f:
                    71:2f:af:a3:11:e3:74:fe:ba:ea:3a:cb:33:2c:fb:
                    64:2a:dc:66:a0:a1:4b:8f:12:61:e8:e6:8b:1f:68:
                    de:d6:0b:b3:0c:00:b1:d9:2a:9e:33:67:cd:90:8b:
                    80:95:db:a5:00:0a:74:ec:88:01:5d:bf:e0:b7:c9:
                    37:fd:62:39:95:76:80:07:1b:94:67:1f:88:e2:82:
                    ae:77:76:71:d6:b3:35:87:bb:3a:81:13:18:f4:45:
                    f1:5a:46:2d:db:69:c9:57:01:6b:23:40:36:a2:e9:
                    96:bb:32:78:2a:a1:56:66:7f:c2:92:27:df:1b:97:
                    57:98:43:90:3f:6b:6a:90:2e:05:4f:34:dd:1a:49:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8B:D6:64:4A:3A:46:DC:39:5E:C2:CE:AE:77:9B:9B:B5:4D:3A:46
            X509v3 Authority Key Identifier:
                keyid:D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:ea:52:2e:b1:a8:90:89:3c:de:09:02:b5:8f:6b:b2:9d:
         02:fd:e0:20:d7:b5:92:6f:77:d2:ca:25:8c:b2:ed:96:07:94:
         fa:34:2a:44:c3:8d:68:fd:2e:56:33:46:1f:0c:e8:ba:d6:cd:
         dc:57:75:f4:02:53:fb:a5:eb:fb:95:ec:bf:a2:6d:75:cd:53:
         78:7f:f3:a9:f5:b1:e6:c0:b3:d5:6b:aa:f1:4d:fc:99:73:e6:
         8e:9f:13:e9:f1:e8:c6:98:04:28:da:7b:e7:74:b9:f8:4b:7e:
         11:98:6f:f0:2b:bd:a8:71:f4:d1:c6:5c:4b:26:50:9e:83:3e:
         ba:b6:1a:9a:cc:9d:97:00:65:ac:7b:42:e1:f4:48:d5:a0:f7:
         42:76:06:14:62:41:4d:11:0d:10:0e:fc:5f:8e:c0:53:e2:44:
         a7:a1:34:d9:ea:35:61:63:5b:4e:60:5c:b4:a8:dc:1a:28:e9:
         d6:f3:6f:5c:ca:44:fd:2d:be:6f:36:cb:7f:53:28:f5:23:f8:
         ea:0f:7b:51:87:76:59:c7:f6:91:4b:2a:81:5a:51:27:2e:e7:
         1e:bb:d3:0a:07:c1:9c:7a:6c:41:1d:05:7e:15:41:b5:18:9c:
         3e:2b:02:f7:ff:ef:b8:e8:d6:03:86:0e:3a:76:f8:ac:92:a2:
         6c:65:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----