Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/sMj9k8RydaHxSoflrqhgBUmpEYA.mft
File:                     sMj9k8RydaHxSoflrqhgBUmpEYA.mft (raw, json)
Hash identifier:          +EuOaMguXql3TAyGmNEAQEhujo23XEITHMspt6zyags=
Subject key identifier:   EC:19:54:B9:70:AB:99:08:1D:A0:6A:53:F9:6E:D1:DD:6D:49:10:23
Authority key identifier: B0:C8:FD:93:C4:72:75:A1:F1:4A:87:E5:AE:A8:60:05:49:A9:11:80
Certificate issuer:       /CN=b0c8fd93c47275a1f14a87e5aea8600549a91180
Certificate serial:       01856265AE280D54746160384815CDF4784D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMj9k8RydaHxSoflrqhgBUmpEYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/sMj9k8RydaHxSoflrqhgBUmpEYA.mft
Manifest number:          0207
Signing time:             Fri 30 Dec 2022 09:38:28 +0000
Manifest this update:     Fri 30 Dec 2022 09:38:28 +0000
Manifest next update:     Sat 31 Dec 2022 09:38:28 +0000
Files and hashes:         1: MTfeIE98o3cBcLx23Ra6MXpsNtg.roa (hash: 3RYX4T4rtJocm1+yfR4y3mt6etnAZ434FyS+tN7KIbY=)
                          2: WiOhbvQon60oYuY3mdkloR-5DPM.roa (hash: 4I4Z7FtAZ76yjRozHdlIxZCtXOo7HwO0zlPKQ6mi/9c=)
                          3: sMj9k8RydaHxSoflrqhgBUmpEYA.crl (hash: Ed3bZqbOg60szXd15tJp7UrCHVOGIDrXeFGqd6AdX+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:65:ae:28:0d:54:74:61:60:38:48:15:cd:f4:78:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c8fd93c47275a1f14a87e5aea8600549a91180
        Validity
            Not Before: Dec 30 09:38:28 2022 GMT
            Not After : Dec 31 09:38:28 2022 GMT
        Subject: CN=ec1954b970ab99081da06a53f96ed1dd6d491023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:69:2f:c6:87:fe:3c:80:47:46:6b:7f:47:
                    d9:2f:e1:f2:4a:3d:82:14:2a:b1:11:07:12:e4:01:
                    7e:fd:3f:10:2e:a9:33:71:d2:62:29:10:a0:ba:8b:
                    da:84:6f:c0:5f:fe:be:b6:06:e4:77:77:e5:fa:f4:
                    58:b2:8d:d4:95:fc:6d:3e:e3:cf:66:89:25:e8:54:
                    a4:2a:21:f4:c3:8f:03:35:63:e2:f7:8f:bf:73:e0:
                    a4:1e:a0:1d:81:62:85:e7:08:09:17:f7:c2:c8:7b:
                    d7:98:0f:2f:67:f4:8d:a2:73:fe:98:9a:71:f9:cd:
                    01:b6:0b:f6:31:56:de:91:06:3e:65:ef:77:5e:ba:
                    0d:52:40:01:27:fb:b5:06:ef:c9:cb:39:cc:18:74:
                    43:6b:a4:90:a2:69:c0:9e:54:19:8c:fa:00:25:e7:
                    80:c3:24:37:6e:16:63:e3:92:4a:c5:72:31:12:78:
                    dc:47:55:03:48:56:cc:16:d7:cb:e8:1b:41:07:71:
                    ca:1c:32:a6:81:b8:7d:db:a5:c7:61:46:9b:7d:dc:
                    5f:05:0c:5d:be:cd:1c:e7:c8:56:0b:3f:d1:f2:73:
                    1f:6c:a2:82:df:69:36:11:a5:84:4e:20:5e:8a:94:
                    10:54:eb:39:7b:20:b4:3a:e5:e2:bf:21:96:c5:5c:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:19:54:B9:70:AB:99:08:1D:A0:6A:53:F9:6E:D1:DD:6D:49:10:23
            X509v3 Authority Key Identifier:
                keyid:B0:C8:FD:93:C4:72:75:A1:F1:4A:87:E5:AE:A8:60:05:49:A9:11:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMj9k8RydaHxSoflrqhgBUmpEYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/sMj9k8RydaHxSoflrqhgBUmpEYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9fb6d4-e82e-4837-ae4e-ccd359fc2f42/1/sMj9k8RydaHxSoflrqhgBUmpEYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:93:ae:28:f8:12:b4:ee:b2:12:42:a1:de:54:7a:1b:3b:8f:
         d2:26:3b:9c:14:c4:f8:6e:6a:8d:2a:ae:42:cb:ee:b5:f3:c0:
         2b:67:78:70:3a:92:9a:aa:32:ce:a8:a9:5a:6c:8b:87:4f:fd:
         eb:d5:a2:bf:76:cc:14:26:36:53:cd:c9:20:ce:c1:d3:21:dd:
         b1:c7:c6:46:78:4d:d7:89:77:fe:17:4a:ad:0c:40:8e:19:58:
         30:11:ff:25:d9:55:4f:d7:37:bc:fe:f4:ac:cf:da:7c:9c:ca:
         36:65:da:03:59:4b:91:d9:3d:53:75:cb:c5:f8:32:ac:45:45:
         20:12:4f:80:36:44:3c:ea:e4:85:f0:83:ab:30:00:5a:5a:1e:
         3c:a4:ce:bc:5f:0a:38:6e:a5:7d:17:2d:be:8f:20:bc:06:fd:
         f0:93:94:b3:6e:f4:72:15:36:ce:4a:d3:93:4a:42:ee:ab:b6:
         43:67:14:6e:fb:d1:0b:e8:6b:93:0e:66:be:3e:bd:13:c0:1f:
         77:82:31:cb:27:48:6c:03:9f:a7:be:8a:eb:ea:a4:ab:22:fb:
         be:e9:95:e0:5a:d0:75:c0:8a:5e:4f:7a:8d:de:80:74:91:04:
         c2:38:4c:53:30:fc:aa:21:92:e8:b6:1a:e7:20:69:51:28:8e:
         f4:9e:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----