Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/4em1d4ab3KsAXeULMnxIcNR3-hk.mft
File:                     4em1d4ab3KsAXeULMnxIcNR3-hk.mft (raw, json)
Hash identifier:          H0LbnG6xqk1T0eSGfwjibkggh28BB9f/lpsnyzn/xmw=
Subject key identifier:   A3:C4:A3:E3:E3:34:85:C2:33:77:85:24:96:96:6F:4A:48:EB:BF:92
Authority key identifier: E1:E9:B5:77:86:9B:DC:AB:00:5D:E5:0B:32:7C:48:70:D4:77:FA:19
Certificate issuer:       /CN=e1e9b577869bdcab005de50b327c4870d477fa19
Certificate serial:       0184983ABD26AF29C67DF9235EC522208034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4em1d4ab3KsAXeULMnxIcNR3-hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/4em1d4ab3KsAXeULMnxIcNR3-hk.mft
Manifest number:          0B7E
Signing time:             Mon 21 Nov 2022 03:28:16 +0000
Manifest this update:     Mon 21 Nov 2022 03:28:16 +0000
Manifest next update:     Tue 22 Nov 2022 03:28:16 +0000
Files and hashes:         1: 1--pYXdWay-rnWzLb9m7eA7xsRV0.roa (hash: fRa+B4jln7W1k2pjySZRAQJC0pALA3DmfAs328AonB8=)
                          2: 4em1d4ab3KsAXeULMnxIcNR3-hk.crl (hash: 9mSeqE4xDma7AFBukxxNU3suod2nL3mN1eb6xNUXK/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:98:3a:bd:26:af:29:c6:7d:f9:23:5e:c5:22:20:80:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e9b577869bdcab005de50b327c4870d477fa19
        Validity
            Not Before: Nov 21 03:28:16 2022 GMT
            Not After : Nov 22 03:28:16 2022 GMT
        Subject: CN=a3c4a3e3e33485c23377852496966f4a48ebbf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:ff:26:60:18:da:0b:cc:a0:7c:b4:64:61:
                    a2:5d:22:62:96:de:b2:18:06:96:3f:4d:50:0a:cf:
                    b5:a5:1d:a0:66:aa:16:7d:c0:82:7c:e8:44:7d:cd:
                    62:94:e2:c2:d8:64:2a:10:bc:5c:85:f2:03:e3:75:
                    45:7d:59:82:c4:4a:ca:54:52:3f:a3:19:02:8d:fa:
                    98:2c:48:fb:c1:9d:be:57:ea:41:8d:ab:56:12:6f:
                    28:52:c6:df:9a:f8:e9:4e:dd:23:ae:c1:4c:f0:d8:
                    be:22:07:49:40:65:e8:5f:8c:28:6e:9b:eb:6b:51:
                    e4:20:a3:42:27:78:81:fd:3b:d4:de:c4:6f:62:94:
                    ec:af:2c:a2:6f:8c:e9:cc:7a:22:d1:71:8a:52:3d:
                    3d:cc:57:d5:66:42:42:a1:cd:30:d2:23:6f:d2:79:
                    70:c0:3a:bd:3c:ed:bc:c7:6c:ac:7e:23:70:53:65:
                    dc:32:d3:6a:db:31:9c:de:43:35:3d:36:78:8b:25:
                    e4:2c:d4:ea:8a:32:0b:55:80:d3:cd:98:4f:42:33:
                    e7:a2:88:64:89:26:7f:ba:b8:b2:b0:9f:41:f1:f9:
                    6e:75:05:73:b9:5a:5d:61:c6:9e:e3:06:73:65:f6:
                    f8:37:51:c9:8f:ff:87:fc:73:09:d0:d2:b3:65:09:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:A3:E3:E3:34:85:C2:33:77:85:24:96:96:6F:4A:48:EB:BF:92
            X509v3 Authority Key Identifier:
                keyid:E1:E9:B5:77:86:9B:DC:AB:00:5D:E5:0B:32:7C:48:70:D4:77:FA:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4em1d4ab3KsAXeULMnxIcNR3-hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/4em1d4ab3KsAXeULMnxIcNR3-hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/4em1d4ab3KsAXeULMnxIcNR3-hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:b7:9c:e7:27:15:de:69:16:df:a1:c2:67:0b:db:3e:fa:
         be:b9:19:69:ab:27:c4:3d:02:96:0d:93:9e:79:e7:1d:b5:a2:
         d5:18:a4:1e:01:35:ba:17:1d:6b:f8:7f:a9:b0:76:08:40:05:
         e9:80:7f:5d:49:b5:6b:de:b6:83:71:50:14:dd:5d:f0:19:27:
         61:8b:fd:08:31:08:ed:f8:cc:64:67:d9:34:ac:70:2d:6b:ca:
         28:f8:42:96:18:74:3d:07:c8:b3:ac:1f:3e:7a:93:14:b4:1f:
         77:d4:b3:b4:91:8f:5d:b4:cc:4c:68:29:18:4d:ab:c4:b1:63:
         67:e2:c4:da:e0:57:8e:0a:06:52:e9:5c:68:c4:58:af:f3:d4:
         ae:52:9d:a5:84:67:0b:8d:0f:9d:1a:ee:25:23:38:bb:bc:26:
         2f:d1:bc:29:e4:b7:48:54:bc:aa:44:6b:9d:54:c0:f4:70:1a:
         2d:4f:a3:73:a9:73:fe:71:67:b7:ef:ca:68:64:7b:f4:77:97:
         c5:9e:4f:b1:5c:c6:6e:fc:57:47:71:b0:08:72:76:d1:1b:44:
         10:a5:4c:98:bb:85:fb:de:21:3b:f8:fc:74:31:3c:54:87:66:
         99:9a:8b:c5:53:d3:6c:1c:22:9b:a5:8a:1b:c0:c2:38:34:13:
         0e:61:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----