Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.mft
File:                     I4s2N8QqgRcjuVdr_3tv8zM-9s8.mft (raw, json)
Hash identifier:          I7ruu9TO+K9cL0Z/npyMHEavu/2wmnlTqwG4rk8rOmg=
Subject key identifier:   07:61:B5:56:BC:BA:A3:7C:A1:59:2D:FE:99:14:D0:B8:55:37:C8:D6
Authority key identifier: 23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF
Certificate issuer:       /CN=238b3637c42a811723b9576bff7b6ff3333ef6cf
Certificate serial:       01851479986E2D5D1D47C2F18B04BA2113A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.mft
Manifest number:          089D
Signing time:             Thu 15 Dec 2022 06:29:51 +0000
Manifest this update:     Thu 15 Dec 2022 06:29:51 +0000
Manifest next update:     Fri 16 Dec 2022 06:29:51 +0000
Files and hashes:         1: 6hRwlSnCTaod4opQ0CTgo1xFIkE.roa (hash: 22yhqmJtXBk11UHgCf9fA9qMO4StkqudrM9RGxrcDAY=)
                          2: I4s2N8QqgRcjuVdr_3tv8zM-9s8.crl (hash: tiaJ0kD2T0MnMIxjMMjIIaoDHai8WQQYAv+s5W3kj+E=)
                          3: hV45ZFDxfcofp2gm01-cQ9XxagE.roa (hash: whbnwbWWXBeR0E9SgbzjzawWgyI2GnuXjqfAm03Nir4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:14:79:98:6e:2d:5d:1d:47:c2:f1:8b:04:ba:21:13:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=238b3637c42a811723b9576bff7b6ff3333ef6cf
        Validity
            Not Before: Dec 15 06:29:51 2022 GMT
            Not After : Dec 16 06:29:51 2022 GMT
        Subject: CN=0761b556bcbaa37ca1592dfe9914d0b85537c8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:b0:80:e0:97:a2:e2:e4:0d:17:b1:16:70:
                    35:ec:38:2e:d1:32:36:ea:0d:81:72:7a:de:97:28:
                    59:0e:43:75:22:69:2e:f2:c2:2d:98:21:5d:9c:68:
                    f6:df:5f:bb:76:97:65:3f:91:e2:03:51:e2:f3:bc:
                    10:72:ee:db:82:78:1a:1e:49:0b:22:f1:44:24:42:
                    c1:a8:68:a2:eb:94:85:e6:c2:00:41:8f:2c:4c:7d:
                    40:42:99:3d:97:70:a5:8b:5a:2b:ff:7e:27:65:c8:
                    2c:00:6a:52:d3:76:f8:f4:ed:c1:a2:ae:d5:b7:53:
                    fb:33:25:24:be:67:d6:a0:d3:83:75:7f:06:31:51:
                    d0:d0:42:18:77:07:ee:f4:83:f4:73:0e:2e:84:8c:
                    c4:f6:e8:af:04:7f:04:fb:f7:c4:19:b3:99:43:ce:
                    ff:e3:5d:c8:f5:40:a4:26:4e:17:0b:4a:f1:37:31:
                    e9:f4:c8:5e:58:48:d0:6d:c9:44:c4:db:67:9a:1c:
                    c7:61:d1:33:98:7e:79:4e:4d:55:25:46:29:59:21:
                    17:7b:1d:c0:e5:91:a7:f8:1f:fa:0e:cf:8b:b6:2d:
                    1e:12:dd:c5:20:ab:bc:e2:32:c0:67:47:cc:4e:98:
                    a6:3b:20:12:40:7c:97:d0:75:ac:ce:b4:04:14:71:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:B5:56:BC:BA:A3:7C:A1:59:2D:FE:99:14:D0:B8:55:37:C8:D6
            X509v3 Authority Key Identifier:
                keyid:23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:82:93:dc:9b:83:c1:76:77:9f:e3:40:e9:52:37:9f:14:
         9f:dc:a7:3e:99:f9:e4:e9:d8:39:46:fb:02:c8:3d:a9:e9:04:
         cc:1d:cf:12:b2:a4:27:65:b2:8a:78:08:1f:41:54:d5:3d:ab:
         12:cb:af:5d:67:68:ff:81:bb:be:25:79:b9:28:95:71:9d:b3:
         58:d6:f9:40:ab:86:eb:c8:05:33:1d:43:6f:a7:a0:14:ae:76:
         44:ff:ff:4f:ce:95:23:be:2e:4d:fb:ac:e4:55:9a:76:49:ed:
         55:a2:f0:5a:00:d2:19:28:2e:c5:c8:67:69:29:5e:c5:51:34:
         51:4e:19:b8:b1:cc:65:6b:89:12:35:a9:7d:2e:07:9e:84:ac:
         b1:02:89:d3:eb:42:0d:57:ab:d0:81:e7:cf:c0:e6:27:df:e7:
         c1:c6:3e:ab:f5:40:14:1a:87:17:09:14:40:e5:92:10:7b:6a:
         ec:8a:a7:6c:00:c4:5f:2e:2f:10:f4:87:41:b9:31:e9:77:c9:
         43:0b:6f:81:5a:1e:f7:c2:ff:4b:2a:1f:3b:7d:3f:71:0c:60:
         ca:84:98:8b:f6:45:56:f6:05:6f:f9:04:fe:3f:a5:69:0d:03:
         dc:ac:08:26:f5:b3:af:d8:91:60:63:e0:5f:0e:c4:78:07:9c:
         61:6d:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----