Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/kt7LUF4qTiEJLkC6O6Lothzd2uQ.mft
File:                     kt7LUF4qTiEJLkC6O6Lothzd2uQ.mft (raw, json)
Hash identifier:          +mFcSk+mwX0uUw00jzQdNBebfuI9moY8hB2BMzLZruw=
Subject key identifier:   9B:0E:97:3F:32:D9:C4:E2:ED:70:6E:35:EC:68:79:A3:1F:4A:C2:A9
Authority key identifier: 92:DE:CB:50:5E:2A:4E:21:09:2E:40:BA:3B:A2:E8:B6:1C:DD:DA:E4
Certificate issuer:       /CN=92decb505e2a4e21092e40ba3ba2e8b61cdddae4
Certificate serial:       01837928449DDEAFC7301B1E47442C573627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt7LUF4qTiEJLkC6O6Lothzd2uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/kt7LUF4qTiEJLkC6O6Lothzd2uQ.mft
Manifest number:          0ADD
Signing time:             Mon 26 Sep 2022 09:37:05 +0000
Manifest this update:     Mon 26 Sep 2022 09:37:05 +0000
Manifest next update:     Tue 27 Sep 2022 09:37:05 +0000
Files and hashes:         1: HsZ1mnYsVKMRnJH-NMGck1F0O0k.roa (hash: oWlXchZ0I+8SwYQZyb5S7kev14hhgjYIgtTFM+c7H88=)
                          2: kt7LUF4qTiEJLkC6O6Lothzd2uQ.crl (hash: dmppPcXNGxHP5OoctpkfEBM0sJpAqcL/sYjCvDqYAe0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:79:28:44:9d:de:af:c7:30:1b:1e:47:44:2c:57:36:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92decb505e2a4e21092e40ba3ba2e8b61cdddae4
        Validity
            Not Before: Sep 26 09:37:05 2022 GMT
            Not After : Sep 27 09:37:05 2022 GMT
        Subject: CN=9b0e973f32d9c4e2ed706e35ec6879a31f4ac2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:5b:bf:9d:d3:28:01:60:96:22:49:4d:43:
                    1e:dc:44:15:42:f2:fc:25:7e:4c:c1:68:16:cf:3b:
                    dd:9b:bd:79:9d:4a:9f:93:9d:23:b9:67:a8:47:70:
                    45:fb:0f:98:25:b7:4d:8b:a4:81:d1:73:2b:28:56:
                    68:31:1c:4c:47:c3:e1:64:e2:f3:e5:d0:2a:e7:37:
                    f4:55:20:87:7d:96:85:fc:52:04:7d:1a:ef:d6:09:
                    70:a4:5b:55:5e:58:d4:6e:ee:cc:99:e0:3b:ef:f2:
                    60:cf:8d:f3:76:55:ff:2d:f3:f6:59:d2:e6:d1:20:
                    84:bb:10:2c:0e:2d:20:e4:ab:dc:26:9e:5e:0a:ac:
                    02:b0:07:8c:1c:fc:da:bf:14:f1:44:c4:61:52:0c:
                    3a:4f:89:b7:cc:62:26:10:ac:0e:47:93:01:eb:a9:
                    cf:fe:c0:40:b2:5c:3b:56:a1:fa:5b:ea:7e:05:9e:
                    55:12:2a:59:e6:3a:f4:35:26:a6:4f:a1:cd:c8:7b:
                    b0:c5:0f:e3:34:bc:1a:8a:99:d7:92:1e:7b:04:21:
                    47:6e:33:ef:98:89:0a:47:f3:0c:62:d4:1c:9f:ef:
                    3b:ca:b1:43:19:bb:81:6f:d8:3b:d4:f3:58:48:28:
                    bb:2a:e3:7b:f4:85:9c:16:06:0e:16:68:19:d2:68:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0E:97:3F:32:D9:C4:E2:ED:70:6E:35:EC:68:79:A3:1F:4A:C2:A9
            X509v3 Authority Key Identifier:
                keyid:92:DE:CB:50:5E:2A:4E:21:09:2E:40:BA:3B:A2:E8:B6:1C:DD:DA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt7LUF4qTiEJLkC6O6Lothzd2uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/kt7LUF4qTiEJLkC6O6Lothzd2uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/kt7LUF4qTiEJLkC6O6Lothzd2uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:ce:72:78:5b:44:c0:04:6b:b5:0a:7c:de:99:07:af:ce:
         6c:8c:cc:7b:73:2f:ce:cb:0e:7c:1c:a0:85:0a:87:d1:92:1a:
         75:ae:ca:f0:a0:a1:19:8d:bd:f3:50:37:26:2e:0a:ac:bd:6f:
         bb:de:75:bf:fc:26:98:e7:68:2a:1c:01:f3:aa:f2:24:37:74:
         57:c0:a9:a4:09:1b:3b:5b:07:94:c4:9b:ce:da:69:df:6c:0f:
         0b:59:60:87:59:36:04:f0:ad:48:7d:97:a7:2c:f1:c0:a4:5b:
         57:29:e7:0b:2e:45:39:96:88:c4:cb:e4:27:b4:f6:77:ca:aa:
         1a:d6:49:d3:a5:4d:f0:be:66:1b:b3:f5:95:4d:ce:59:04:fd:
         a2:cd:ef:0d:2d:3e:fd:f0:8b:2e:93:dd:68:1a:eb:cb:04:42:
         98:36:2c:95:e7:56:f3:48:7d:43:68:4b:f8:b9:9a:29:f7:55:
         2c:b6:33:ed:5a:ff:04:cd:40:75:cf:59:39:87:d4:6a:7a:94:
         6b:98:61:df:e3:64:f9:1d:c2:fd:44:16:0a:4e:fe:50:48:55:
         45:7f:00:e8:29:8f:29:86:a4:a9:54:00:5a:6b:d1:ac:1d:28:
         e4:77:b3:51:f4:14:a9:30:2c:4e:55:13:84:f4:d0:3d:d9:4b:
         33:1a:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----