Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/P9PP0KrCrwkz9_ckVcj4hvRqoaM.mft
File:                     P9PP0KrCrwkz9_ckVcj4hvRqoaM.mft (raw, json)
Hash identifier:          pce5cVVhdGm82OHeYSjxLA/9gwocNgXi0wA/E5BSMN0=
Subject key identifier:   C4:6D:8E:75:AE:6F:94:C8:54:20:43:F9:19:4B:1C:14:BA:30:CC:5D
Authority key identifier: 3F:D3:CF:D0:AA:C2:AF:09:33:F7:F7:24:55:C8:F8:86:F4:6A:A1:A3
Certificate issuer:       /CN=3fd3cfd0aac2af0933f7f72455c8f886f46aa1a3
Certificate serial:       018C6AFDB153E2D71256E4A0519516278F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9PP0KrCrwkz9_ckVcj4hvRqoaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/P9PP0KrCrwkz9_ckVcj4hvRqoaM.mft
Manifest number:          0E97
Signing time:             Fri 15 Dec 2023 01:01:00 +0000
Manifest this update:     Fri 15 Dec 2023 01:01:00 +0000
Manifest next update:     Sat 16 Dec 2023 01:01:00 +0000
Files and hashes:         1: P9PP0KrCrwkz9_ckVcj4hvRqoaM.crl (hash: p+LvC/Z1z5D9Jp4HzFb3spek5eCPtnRhEhsm09m5MIQ=)
                          2: tJ4dO0YTu6twKLZi-KFTS4J-xbE.roa (hash: XfMuY93Au2lw9vYg2Rrss7XYSETGL28RGiG9gwWTa/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6a:fd:b1:53:e2:d7:12:56:e4:a0:51:95:16:27:8f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd3cfd0aac2af0933f7f72455c8f886f46aa1a3
        Validity
            Not Before: Dec 15 01:01:00 2023 GMT
            Not After : Dec 16 01:01:00 2023 GMT
        Subject: CN=c46d8e75ae6f94c8542043f9194b1c14ba30cc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:30:9b:a2:c8:a2:63:65:5a:7a:d3:92:5a:
                    ea:3d:22:26:9b:2e:d5:d7:1c:30:8e:fe:bf:73:24:
                    14:e1:46:7c:7a:4d:71:65:b5:ae:8a:78:cd:d2:48:
                    3a:85:90:bb:e8:f3:3a:e2:4c:4a:08:34:e7:31:a3:
                    7c:52:47:05:65:ca:de:ec:b1:f2:48:af:dc:a1:9a:
                    7b:4b:57:c7:a9:9e:a2:7d:0c:f9:c1:68:bc:61:04:
                    f9:7a:80:11:ba:98:f0:23:d9:0c:51:89:66:69:63:
                    c4:4d:90:8b:87:c7:72:49:6c:b6:f7:cf:af:3e:6e:
                    7d:b1:24:2e:a0:08:f5:c5:c2:ef:73:fc:a4:3c:3d:
                    a1:db:5d:f9:41:43:6f:a6:62:f1:65:84:d6:00:3b:
                    12:a0:34:04:2a:13:6a:30:69:69:98:b9:85:67:ba:
                    77:79:54:6f:93:39:c2:c8:15:6b:dc:53:57:a0:76:
                    62:02:60:e9:f6:75:51:1d:57:6e:fd:6d:a5:45:4d:
                    48:20:b9:3a:15:87:12:5f:e9:68:65:42:e3:da:5f:
                    4e:1a:c0:a7:94:2f:ae:7d:0e:63:3e:1a:bb:e2:e5:
                    51:91:cf:1f:4e:62:d4:01:65:ca:b4:9f:db:e8:c3:
                    4e:bb:3c:75:30:17:7a:22:90:6d:88:24:05:e5:e3:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:8E:75:AE:6F:94:C8:54:20:43:F9:19:4B:1C:14:BA:30:CC:5D
            X509v3 Authority Key Identifier:
                keyid:3F:D3:CF:D0:AA:C2:AF:09:33:F7:F7:24:55:C8:F8:86:F4:6A:A1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9PP0KrCrwkz9_ckVcj4hvRqoaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/P9PP0KrCrwkz9_ckVcj4hvRqoaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/P9PP0KrCrwkz9_ckVcj4hvRqoaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:11:2d:a1:5c:eb:83:d1:ed:c2:8e:bc:56:bb:de:c2:fd:b1:
         d7:51:e3:23:ac:10:87:04:6d:fe:62:3e:35:72:a2:f4:cf:58:
         5f:c7:c4:18:83:80:c8:ee:d4:56:95:96:a2:d7:d9:8c:a5:e4:
         28:f8:d3:a3:4e:3f:60:4b:53:1b:c9:cb:a1:ef:2a:6a:e1:29:
         ac:2b:43:21:dd:b9:bc:d4:11:0c:6f:b0:de:7f:70:07:b3:c4:
         fc:ae:56:03:b2:a7:7a:e1:23:a7:a1:64:50:91:68:2d:8f:ae:
         86:54:47:a3:d5:36:a9:67:65:37:43:a4:9e:25:2a:96:d0:05:
         b1:ff:93:16:59:8f:8d:6e:65:b6:6b:c1:f5:ab:68:3a:89:51:
         9d:ce:75:5e:49:92:1b:bf:c6:55:56:30:6e:15:e0:39:af:28:
         0e:7c:55:fc:ea:39:25:59:1e:7e:f2:fa:d3:f4:34:68:48:f7:
         84:93:eb:ae:cf:26:6c:1d:00:a7:a8:63:15:cc:17:67:4e:f0:
         44:37:4c:4b:d1:5d:5b:de:96:6f:1d:a2:fa:af:cc:22:e5:4e:
         04:0f:ba:8b:84:90:01:7d:f6:19:03:33:82:2b:c5:b4:ab:fb:
         e0:b9:42:5b:6b:71:06:d6:12:4f:c8:91:85:ae:b9:09:ab:94:
         6d:e1:12:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxq/bFT4tcSVuSgUZUWJ49EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDNjZmQwYWFjMmFmMDkzM2Y3ZjcyNDU1YzhmODg2ZjQ2
YWExYTMwHhcNMjMxMjE1MDEwMTAwWhcNMjMxMjE2MDEwMTAwWjAzMTEwLwYDVQQD
EyhjNDZkOGU3NWFlNmY5NGM4NTQyMDQzZjkxOTRiMWMxNGJhMzBjYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Ewm6LIomNlWnrTklrqPSImmy7V
1xwwjv6/cyQU4UZ8ek1xZbWuinjN0kg6hZC76PM64kxKCDTnMaN8UkcFZcre7LHy
SK/coZp7S1fHqZ6ifQz5wWi8YQT5eoARupjwI9kMUYlmaWPETZCLh8dySWy298+v
Pm59sSQuoAj1xcLvc/ykPD2h2135QUNvpmLxZYTWADsSoDQEKhNqMGlpmLmFZ7p3
eVRvkznCyBVr3FNXoHZiAmDp9nVRHVdu/W2lRU1IILk6FYcSX+loZULj2l9OGsCn
lC+ufQ5jPhq74uVRkc8fTmLUAWXKtJ/b6MNOuzx1MBd6IpBtiCQF5ePnDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRtjnWub5TIVCBD+RlLHBS6MMxdMB8GA1UdIwQY
MBaAFD/Tz9Cqwq8JM/f3JFXI+Ib0aqGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlQUDBLckNyd2t6OV9ja1ZjajRodlJxb2FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83N2Y2NzAtZjRmOC00YjA0LTkzMWYt
NWZkMzJlN2I0MzVmLzEvUDlQUDBLckNyd2t6OV9ja1ZjajRodlJxb2FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83N2Y2NzAtZjRmOC00YjA0LTkzMWYtNWZkMzJlN2I0MzVm
LzEvUDlQUDBLckNyd2t6OV9ja1ZjajRodlJxb2FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIREtoVzr
g9Htwo68Vrvewv2x11HjI6wQhwRt/mI+NXKi9M9YX8fEGIOAyO7UVpWWotfZjKXk
KPjTo04/YEtTG8nLoe8qauEprCtDId25vNQRDG+w3n9wB7PE/K5WA7KneuEjp6Fk
UJFoLY+uhlRHo9U2qWdlN0OkniUqltAFsf+TFlmPjW5ltmvB9atoOolRnc51XkmS
G7/GVVYwbhXgOa8oDnxV/Oo5JVkefvL60/Q0aEj3hJPrrs8mbB0Ap6hjFcwXZ07w
RDdMS9FdW96Wbx2i+q/MIuVOBA+6i4SQAX32GQMzgivFtKv74LlCW2txBtYST8iR
ha65CauUbeES9Q==
-----END CERTIFICATE-----