Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/PofJdjc_o9itkF5TTE_8I4BCDho.mft
File:                     PofJdjc_o9itkF5TTE_8I4BCDho.mft (raw, json)
Hash identifier:          D2rrot89kkouM3RYIKK7QGM8JBtO4hXcxLf6m7FX7Wg=
Subject key identifier:   15:F1:32:AD:EE:96:06:38:06:D2:01:A3:FE:C2:C0:89:44:FB:42:5C
Authority key identifier: 3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A
Certificate issuer:       /CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
Certificate serial:       0183CA70FB86080770510917B3D38BE01BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/PofJdjc_o9itkF5TTE_8I4BCDho.mft
Manifest number:          0B0C
Signing time:             Wed 12 Oct 2022 04:25:45 +0000
Manifest this update:     Wed 12 Oct 2022 04:25:45 +0000
Manifest next update:     Thu 13 Oct 2022 04:25:45 +0000
Files and hashes:         1: 6UUzSiNldwkcZMhREpH768U3zZ4.roa (hash: rVK47q6XUxXjwN3dEQ3ictPl/BuO8AfGPlWIynFVepU=)
                          2: PofJdjc_o9itkF5TTE_8I4BCDho.crl (hash: rJGhJnmw51lSsRVy5Dqll7yFCegwf4cDBav6SlRvMW8=)
                          3: UpQJYohn1lWhna7NGP9QHnUwhck.roa (hash: 0Zi2crVmbJ1OkInY8A8Gm6BaPZ3OE1QfaAL3Csbjg5k=)
                          4: u98RBw27L0sxQmKCAynQYyvgRY4.roa (hash: JBdkk3K3Qnp62kvqnEIbUXfWBPsngY6bqCK++Yrlquw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ca:70:fb:86:08:07:70:51:09:17:b3:d3:8b:e0:1b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
        Validity
            Not Before: Oct 12 04:25:45 2022 GMT
            Not After : Oct 13 04:25:45 2022 GMT
        Subject: CN=15f132adee96063806d201a3fec2c08944fb425c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:6f:50:32:9b:93:9c:57:b8:35:b9:12:bf:
                    b4:a9:4b:fd:f1:f5:81:7e:e6:2f:21:10:c0:bc:55:
                    bb:1f:27:49:b6:d2:89:a4:7f:d3:d7:b8:5b:12:dc:
                    34:e2:83:10:24:f9:c8:11:8d:69:a2:d0:ca:93:3c:
                    2c:e6:9c:02:83:95:51:ce:07:cc:76:7d:3d:cb:42:
                    d8:d5:d2:26:7d:a7:77:2e:16:a4:87:2c:db:03:46:
                    ad:bd:0f:e9:94:48:be:23:b2:3e:02:95:36:14:f8:
                    0b:b4:3d:6c:b1:aa:21:fb:19:82:10:87:b1:f3:04:
                    f8:12:d5:25:3b:8d:a7:0e:8b:30:24:ca:00:07:3c:
                    4a:05:b9:2d:69:3d:eb:dc:8f:a8:3c:82:e8:07:41:
                    d2:97:49:74:2b:e8:cb:67:12:11:10:a2:0e:44:e8:
                    93:1c:57:b7:40:d1:b7:1f:bd:47:54:49:60:c2:4a:
                    aa:c4:f3:7a:4c:77:13:8d:46:06:f0:21:9b:c0:48:
                    5e:9e:50:b2:ab:8f:7c:10:33:c7:23:2a:c6:b3:23:
                    5c:cd:a3:4d:26:c2:a4:8d:c1:d4:16:18:c2:4e:57:
                    58:25:b5:51:04:d4:42:50:47:83:c5:a4:63:ce:86:
                    c0:e6:b5:ed:27:67:1d:85:db:45:5b:3f:2e:0e:4b:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F1:32:AD:EE:96:06:38:06:D2:01:A3:FE:C2:C0:89:44:FB:42:5C
            X509v3 Authority Key Identifier:
                keyid:3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/PofJdjc_o9itkF5TTE_8I4BCDho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/PofJdjc_o9itkF5TTE_8I4BCDho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:81:40:6b:de:5a:03:a8:99:0b:10:2e:45:06:48:39:8d:ac:
         c3:59:0f:b7:c2:d7:94:95:3e:6e:78:f4:a4:20:35:aa:3e:aa:
         8c:55:1f:65:d9:af:b9:b2:06:1a:c9:cb:8e:63:c5:74:a8:1c:
         03:8d:a8:a4:a6:5b:04:62:e0:00:cb:af:9f:e1:2d:0e:63:6f:
         de:ab:a1:77:37:fe:50:26:c5:e7:f3:b5:96:c6:4d:b8:3e:2d:
         79:e4:8b:e4:fa:b6:43:72:89:37:5a:be:79:6c:21:c3:cb:c7:
         4b:94:4f:6b:ee:f2:ac:4c:5e:d5:79:74:50:53:c7:1a:4e:8f:
         ea:3b:89:31:07:60:7c:30:e4:38:d9:2f:1d:dc:ab:dd:33:d1:
         eb:d1:33:cd:26:28:d9:a1:d6:1b:40:60:94:6d:49:c3:1c:1f:
         a3:a8:81:54:b7:02:69:7e:a4:36:7c:e1:c9:03:82:4a:e5:88:
         b0:bc:e3:d5:f8:c5:54:2f:fe:0d:89:5d:2d:2b:87:68:23:dc:
         a7:12:c7:58:5f:df:cb:84:d9:99:6b:e8:de:bf:a9:e1:65:a0:
         c6:a5:39:76:f5:ce:c0:92:48:ce:ef:3f:f3:40:f2:1d:2e:da:
         b1:07:95:6d:af:ea:2b:a8:12:03:ca:5f:ed:a3:9b:f6:92:a2:
         a8:79:8c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYPKcPuGCAdwUQkXs9OL4BvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlODdjOTc2MzczZmEzZDhhZDkwNWU1MzRjNGZmYzIzODA0
MjBlMWEwHhcNMjIxMDEyMDQyNTQ1WhcNMjIxMDEzMDQyNTQ1WjAzMTEwLwYDVQQD
EygxNWYxMzJhZGVlOTYwNjM4MDZkMjAxYTNmZWMyYzA4OTQ0ZmI0MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXxvUDKbk5xXuDW5Er+0qUv98fWB
fuYvIRDAvFW7HydJttKJpH/T17hbEtw04oMQJPnIEY1potDKkzws5pwCg5VRzgfM
dn09y0LY1dImfad3LhakhyzbA0atvQ/plEi+I7I+ApU2FPgLtD1ssaoh+xmCEIex
8wT4EtUlO42nDoswJMoABzxKBbktaT3r3I+oPILoB0HSl0l0K+jLZxIREKIOROiT
HFe3QNG3H71HVElgwkqqxPN6THcTjUYG8CGbwEhenlCyq498EDPHIyrGsyNczaNN
JsKkjcHUFhjCTldYJbVRBNRCUEeDxaRjzobA5rXtJ2cdhdtFWz8uDkukKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXxMq3ulgY4BtIBo/7CwIlE+0JcMB8GA1UdIwQY
MBaAFD6HyXY3P6PYrZBeU0xP/COAQg4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG9mSmRqY19vOWl0a0Y1VFRFXzhJNEJDRGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81MDlkMjctYTkxZS00NWJmLWJlYTIt
MjU2ZDI1MGVhYzc2LzEvUG9mSmRqY19vOWl0a0Y1VFRFXzhJNEJDRGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81MDlkMjctYTkxZS00NWJmLWJlYTItMjU2ZDI1MGVhYzc2
LzEvUG9mSmRqY19vOWl0a0Y1VFRFXzhJNEJDRGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIFAa95a
A6iZCxAuRQZIOY2sw1kPt8LXlJU+bnj0pCA1qj6qjFUfZdmvubIGGsnLjmPFdKgc
A42opKZbBGLgAMuvn+EtDmNv3quhdzf+UCbF5/O1lsZNuD4teeSL5Pq2Q3KJN1q+
eWwhw8vHS5RPa+7yrExe1Xl0UFPHGk6P6juJMQdgfDDkONkvHdyr3TPR69EzzSYo
2aHWG0BglG1Jwxwfo6iBVLcCaX6kNnzhyQOCSuWIsLzj1fjFVC/+DYldLSuHaCPc
pxLHWF/fy4TZmWvo3r+p4WWgxqU5dvXOwJJIzu8/80DyHS7asQeVba/qK6gSA8pf
7aOb9pKiqHmMMA==
-----END CERTIFICATE-----