Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.mft
File:                     Ql4TLDfwURfauUrxhppxScZAjYA.mft (raw, json)
Hash identifier:          Vq9cPPNj+aV08u2Xd9QsN0VZM4MRXkLF0GMQTT7N1Q4=
Subject key identifier:   A0:D8:C1:A4:EC:7F:E9:16:F7:5F:C7:77:A7:25:60:B3:95:8C:29:B1
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Certificate issuer:       /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial:       0184E0ABE1B10464D024BE687BEB3D5E2891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.mft
Manifest number:          0592
Signing time:             Mon 05 Dec 2022 05:04:31 +0000
Manifest this update:     Mon 05 Dec 2022 05:04:31 +0000
Manifest next update:     Tue 06 Dec 2022 05:04:31 +0000
Files and hashes:         1: 5tRmajIrc_ph-iW-vIrslws3oRk.roa (hash: 3Zua9ks/qVQaEOo0IhmSzzv0h3vWIPcm3mAHhfAB4Qc=)
                          2: Ql4TLDfwURfauUrxhppxScZAjYA.crl (hash: QTo/ye1WKTm0tmncodcYQHAIPztF7QG5d9XrqaMcNtA=)
                          3: Wtc_ugK3UF06ukQf_IXvrV17z-U.roa (hash: Uu4dmNxIjji1+tg2ZellX3WpPScAqLxDNWv/L7C62LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e0:ab:e1:b1:04:64:d0:24:be:68:7b:eb:3d:5e:28:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
        Validity
            Not Before: Dec  5 05:04:31 2022 GMT
            Not After : Dec  6 05:04:31 2022 GMT
        Subject: CN=a0d8c1a4ec7fe916f75fc777a72560b3958c29b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:e5:e6:76:00:4c:60:b5:e3:41:91:dd:4a:
                    99:8c:2a:3a:34:4a:7c:dc:90:e3:a1:c1:f0:6a:ab:
                    6d:79:40:00:f1:5f:e6:96:46:f5:76:e3:b1:9f:2c:
                    67:8f:05:aa:26:08:92:7e:92:3c:d4:64:81:fd:28:
                    53:ba:be:60:ba:3c:44:c0:98:59:b0:9b:38:2f:21:
                    f5:f9:dd:fc:64:dc:da:0f:e5:cc:1d:36:1d:0f:29:
                    cb:a8:a0:be:62:73:27:fa:56:0a:ba:ed:01:d4:b5:
                    de:75:0e:fd:6e:2d:ca:cd:4d:d6:5f:c6:b3:ef:a5:
                    24:1f:43:e6:4e:55:10:a4:b2:d0:75:cf:d6:b0:a4:
                    27:58:c1:ec:da:e9:2a:08:0e:f4:d8:e8:cf:ae:5b:
                    55:bc:44:71:c1:66:f3:97:6a:e7:29:46:5a:c5:0f:
                    52:82:f6:6a:2e:a9:47:12:6c:29:24:09:7e:10:5d:
                    09:70:af:7d:bb:39:cf:50:a2:25:b4:36:57:5b:01:
                    46:86:76:6b:a2:f3:4e:c2:bc:f6:a8:12:d7:3e:db:
                    04:d1:11:a9:b2:b2:d9:8d:b8:f0:cc:69:0c:5e:03:
                    88:ef:41:f9:8d:fa:95:30:75:0b:5a:8c:06:5f:f4:
                    ec:df:ce:b7:ed:e3:5f:80:8a:ff:d5:7b:a4:e2:73:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D8:C1:A4:EC:7F:E9:16:F7:5F:C7:77:A7:25:60:B3:95:8C:29:B1
            X509v3 Authority Key Identifier:
                keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d1:bd:f4:b2:75:cd:51:0f:b5:e3:af:7e:fe:30:af:8c:19:
         63:ab:3f:c0:6f:b9:66:86:1b:16:f8:46:67:4e:0f:4e:a4:23:
         60:dc:ca:6e:74:8e:c8:75:99:c6:c2:86:c5:6c:ee:56:57:b7:
         fa:f9:f4:5c:1d:39:ec:02:c0:c1:15:d7:6b:91:90:2a:61:60:
         04:4f:0e:e2:98:7f:cf:60:98:ea:b3:30:4b:4a:0b:1a:25:13:
         55:64:01:8e:d3:f2:e8:f5:8d:95:3a:d2:3a:4c:95:db:c5:49:
         6b:a1:40:0b:d6:53:9b:b6:fc:ba:3a:0c:45:c0:2d:5b:f8:44:
         20:82:2e:fd:b8:73:c0:3e:23:5d:d6:b3:57:49:20:cf:3f:33:
         6f:f5:41:52:ad:48:6d:51:e5:3b:9b:32:1e:1a:4d:24:87:35:
         ac:af:3c:35:d5:60:89:c7:fd:c1:34:36:d9:e2:7f:a5:9d:4a:
         b4:40:2a:fe:b3:39:ca:a4:cb:76:0e:ff:87:a8:ff:71:7c:86:
         20:0c:dc:56:7c:60:3e:86:de:7b:9f:78:76:8a:5e:cf:0c:45:
         62:82:b1:59:dc:64:30:04:84:b4:b6:3c:2e:e4:13:35:5a:d6:
         a1:6d:31:8b:bd:67:11:62:a7:73:c0:5c:f9:cd:41:c5:54:39:
         50:16:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----