Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.mft
File:                     klqcpbSc7zjqYnybINRwp_WZ9gg.mft (raw, json)
Hash identifier:          OBm8Lyuxl9HRv6PgS56zSS+zup8wcMw6zKEjouEpFr8=
Subject key identifier:   A3:8B:26:14:A5:D3:CE:E6:F5:82:0C:5A:C7:8F:C3:76:D8:C7:25:14
Authority key identifier: 92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08
Certificate issuer:       /CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
Certificate serial:       018AEDB0EE9B049055DD531CCF31904B3112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.mft
Manifest number:          0881
Signing time:             Mon 02 Oct 2023 00:01:50 +0000
Manifest this update:     Mon 02 Oct 2023 00:01:50 +0000
Manifest next update:     Tue 03 Oct 2023 00:01:50 +0000
Files and hashes:         1: KedkKyoY8CHmT8oN6a1SBDpuKEU.roa (hash: 1va/KzLzZDcHDq1KPVfSIlSYK/LAS77lnBRYU3RGwQQ=)
                          2: klqcpbSc7zjqYnybINRwp_WZ9gg.crl (hash: 3lgaHE81uQYace+R/5qq8Qsqd/I0L/0Y4mX0WQ7csiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ed:b0:ee:9b:04:90:55:dd:53:1c:cf:31:90:4b:31:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925a9ca5b49cef38ea627c9b20d470a7f599f608
        Validity
            Not Before: Oct  2 00:01:50 2023 GMT
            Not After : Oct  3 00:01:50 2023 GMT
        Subject: CN=a38b2614a5d3cee6f5820c5ac78fc376d8c72514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:66:5c:9e:01:02:e0:9a:5e:5f:b1:1c:e9:
                    bc:e1:bd:a4:be:ca:9f:1b:b7:0c:bd:21:8f:4b:ee:
                    08:b6:ef:ea:af:cf:4c:a8:9f:ef:4b:21:7b:7e:60:
                    02:61:fb:3f:41:a1:1e:a8:64:ff:f5:7d:d7:18:ef:
                    48:ed:55:32:1e:e1:33:b7:c9:d2:33:66:49:f0:d6:
                    3d:82:2b:68:48:30:0d:fd:4b:7a:68:6b:96:9d:65:
                    77:e4:7f:7c:84:98:67:b0:a3:8a:4a:fd:f5:e7:7b:
                    11:cb:7d:32:69:47:e9:aa:1d:94:9d:43:7b:3e:09:
                    fb:33:d1:ef:3b:c1:e9:5c:84:4b:21:7c:42:a9:2c:
                    7d:8f:b7:ba:3a:c4:e5:aa:19:74:c2:90:fd:be:1c:
                    0e:bb:d7:2c:ce:8c:8f:ef:61:96:61:d4:8e:2f:1e:
                    81:96:3f:f2:18:d5:b3:05:aa:9d:ed:a0:9e:c1:38:
                    df:22:15:94:c7:57:59:a0:f5:90:03:94:b3:8d:39:
                    cb:3c:70:39:c1:44:83:b8:0c:bf:02:b8:23:81:38:
                    b0:5b:47:73:b1:91:45:f5:dd:c3:3b:d4:f0:9c:dc:
                    0a:ed:e0:de:ae:ab:50:ed:be:ff:c0:46:60:d6:d5:
                    ea:71:97:a1:b2:47:0d:01:a6:cd:50:92:69:b4:a8:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:26:14:A5:D3:CE:E6:F5:82:0C:5A:C7:8F:C3:76:D8:C7:25:14
            X509v3 Authority Key Identifier:
                keyid:92:5A:9C:A5:B4:9C:EF:38:EA:62:7C:9B:20:D4:70:A7:F5:99:F6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klqcpbSc7zjqYnybINRwp_WZ9gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2dec37-7d64-4e5c-ab87-a2f59cb52686/1/klqcpbSc7zjqYnybINRwp_WZ9gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:68:4f:86:2d:f2:cb:fa:80:99:83:18:a6:4d:e1:5c:6a:4e:
         b6:de:38:f3:80:04:d9:4d:d4:8d:28:96:aa:12:a8:f1:37:a2:
         63:fb:fc:a8:66:26:fe:27:d7:23:24:92:06:ca:97:7f:1c:6a:
         4a:f6:40:e1:95:79:6f:3b:d6:a7:08:9d:65:72:63:b2:75:84:
         85:a5:d6:f1:53:51:99:90:69:80:4d:22:06:17:39:40:56:a8:
         f5:f4:a3:96:91:a6:a0:5f:22:80:9c:2e:ba:70:9d:e1:86:ff:
         f0:f7:a7:a5:db:d9:1f:16:2c:e9:dd:4e:fc:15:44:ef:34:85:
         ae:1c:08:65:0e:1f:5e:0a:9a:73:d4:ab:a4:26:f9:b8:6a:59:
         9c:6b:de:fa:dc:ed:af:52:df:3e:78:87:de:82:4e:fd:1c:01:
         48:09:3d:35:08:18:f7:7d:2c:30:19:67:81:d1:03:56:8f:cd:
         a8:73:ab:44:cd:bd:b7:c9:10:bc:58:09:49:57:a9:0e:b5:39:
         be:b3:0a:99:6f:22:a3:d4:58:8f:ed:51:28:99:a7:b5:b5:ac:
         de:c4:a9:43:fb:60:e0:04:a5:3f:86:55:86:39:68:1f:d0:0d:
         e9:8a:cd:26:8b:4d:f9:be:29:e3:76:07:26:db:cd:60:1c:f3:
         b9:06:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----