Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/ihGzR-LbYICxJoRxbO43vsKrpO0.mft
File:                     ihGzR-LbYICxJoRxbO43vsKrpO0.mft (raw, json)
Hash identifier:          k8lIjBDAO/x5OH8/HmBhL4zmQkGFJ5BtQk/sejJm3Uc=
Subject key identifier:   F4:09:77:93:ED:FD:CF:0C:76:DE:EB:E8:E8:D3:04:20:DC:3D:DF:B6
Authority key identifier: 8A:11:B3:47:E2:DB:60:80:B1:26:84:71:6C:EE:37:BE:C2:AB:A4:ED
Certificate issuer:       /CN=8a11b347e2db6080b12684716cee37bec2aba4ed
Certificate serial:       01840D1BD6FB6F6BA77735A919808FFDD454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihGzR-LbYICxJoRxbO43vsKrpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/ihGzR-LbYICxJoRxbO43vsKrpO0.mft
Manifest number:          0649
Signing time:             Tue 25 Oct 2022 03:07:18 +0000
Manifest this update:     Tue 25 Oct 2022 03:07:18 +0000
Manifest next update:     Wed 26 Oct 2022 03:07:18 +0000
Files and hashes:         1: ihGzR-LbYICxJoRxbO43vsKrpO0.crl (hash: qbq48GWdf3oyMCpKv93upLPfFb5BGu3GzyTDDoWAwSQ=)
                          2: okObuk4QLeg6YOlLauNKjA0PGO8.roa (hash: juJLs8/Tnzmtu5Rhla5pvP7k1+VkX2NuIZzymbkHJuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:1b:d6:fb:6f:6b:a7:77:35:a9:19:80:8f:fd:d4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a11b347e2db6080b12684716cee37bec2aba4ed
        Validity
            Not Before: Oct 25 03:07:18 2022 GMT
            Not After : Oct 26 03:07:18 2022 GMT
        Subject: CN=f4097793edfdcf0c76deebe8e8d30420dc3ddfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:31:c7:06:49:f8:df:de:11:c5:1a:0c:fb:1d:
                    77:54:aa:68:80:b5:47:84:d6:a3:be:ee:d9:ba:1e:
                    25:bd:13:2c:f9:95:76:a6:9a:02:be:40:c1:9a:0b:
                    04:2d:59:e5:b6:fc:2f:90:0b:8d:68:8e:ee:6f:89:
                    64:52:94:48:2a:04:ca:f7:1c:af:ef:e1:56:7a:da:
                    23:c2:27:96:e7:bf:51:84:74:d7:b1:c2:21:09:2f:
                    0c:f5:f1:61:1d:c6:0c:22:fb:de:79:9f:f8:16:87:
                    2b:52:c4:f2:e2:9b:32:36:1f:f0:5d:a5:53:97:4e:
                    ff:ea:3e:25:da:f9:fb:a6:33:cd:fe:de:c9:16:51:
                    55:b0:1f:2f:dc:cf:63:ec:87:80:97:02:b3:14:0d:
                    97:2d:c5:df:2d:62:4b:5c:6a:77:5d:e5:03:fb:92:
                    ea:41:52:2a:6e:90:60:1e:6b:03:5e:30:4d:d4:7e:
                    3e:d1:a2:ef:49:f5:b5:95:8d:d3:7a:23:87:a5:7d:
                    e6:14:ca:6d:32:71:bc:91:21:bc:54:4c:49:89:8b:
                    67:01:18:2b:77:ce:e0:16:8c:31:51:52:29:90:2c:
                    16:42:63:6a:97:b8:38:10:16:8c:13:43:49:a1:1f:
                    5c:cd:b3:59:03:5c:49:94:d4:d2:25:9f:40:10:e6:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:09:77:93:ED:FD:CF:0C:76:DE:EB:E8:E8:D3:04:20:DC:3D:DF:B6
            X509v3 Authority Key Identifier:
                keyid:8A:11:B3:47:E2:DB:60:80:B1:26:84:71:6C:EE:37:BE:C2:AB:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihGzR-LbYICxJoRxbO43vsKrpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/ihGzR-LbYICxJoRxbO43vsKrpO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/ihGzR-LbYICxJoRxbO43vsKrpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a1:fe:eb:60:78:ee:54:5d:57:43:4f:90:3d:86:62:fa:0b:
         94:37:ef:3b:3e:bd:eb:02:9d:06:34:37:26:13:a7:69:c6:55:
         94:16:13:fb:50:95:9d:61:f7:6b:ba:81:46:de:bf:c5:ba:ad:
         ca:2e:86:1b:19:8a:be:6a:4a:32:3f:34:93:4d:cc:a1:a7:12:
         18:82:d8:be:a9:24:fd:f7:12:fe:93:d3:57:73:ce:88:fd:6e:
         5d:e3:9e:d2:e4:38:21:d1:0b:99:99:09:24:c5:b8:16:f1:ca:
         ca:e0:7c:1e:7c:a1:4f:4e:80:e6:e7:f3:58:70:98:9c:c4:4a:
         61:82:d2:ed:0a:07:f9:dc:fb:34:8b:08:66:c7:b5:fe:cb:5d:
         a4:44:f9:18:93:8d:cb:1c:59:2d:8b:43:a4:ff:f7:ea:10:3d:
         d5:67:58:74:35:ab:79:26:86:1e:46:9a:37:94:86:a9:22:4e:
         96:42:8f:81:db:80:85:00:5b:64:bc:5f:b5:f1:a7:8a:e5:41:
         f6:2f:21:9e:c5:56:0d:07:f4:cc:0a:c9:5f:a5:ac:0d:e2:a1:
         69:11:96:e9:dc:d5:05:d7:9b:2b:8b:19:97:a9:9f:cb:fe:61:
         88:b2:f3:a8:7f:fe:d0:1c:f1:61:11:b4:b3:2d:5e:15:a1:0d:
         d0:a0:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----