Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.mft
File:                     pnhQ5XHz8qyiwewdflAtm9GExFw.mft (raw, json)
Hash identifier:          ek6fp/+N97G/xbIWB60J42bs2CjLY/RZw0E1IgwbLcg=
Subject key identifier:   97:44:D0:74:33:9D:62:21:EA:0F:1B:5F:B5:8B:E3:C0:C8:41:2A:83
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Certificate issuer:       /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial:       018528EE44DA75B250F6FB2F041233C20C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.mft
Manifest number:          0C00
Signing time:             Mon 19 Dec 2022 05:49:41 +0000
Manifest this update:     Mon 19 Dec 2022 05:49:41 +0000
Manifest next update:     Tue 20 Dec 2022 05:49:41 +0000
Files and hashes:         1: 3L5IULMwSNC5rIff4hC2bF_S7oo.roa (hash: R08RTXX8srOjXGQCoRkBvfZM5LfPw9fjUiB8iKgSV8c=)
                          2: 4XqQElssw2dceep2dPp_zgfQ60c.roa (hash: qGCbVc6mcPu7Hf9K6EiENbLSKhDTOkbboXyRi8Q+cbk=)
                          3: AWooE-8tpYBrRg-66CphmovFINo.roa (hash: 72Rj3SYjXjc4JS1HtABuwXgw0shpLM2Cj2/tgCVKGBk=)
                          4: R2C1UTQMBKzRFM-rw85RnqQb-e8.roa (hash: 0Vz8oIy+Cs5dCadbZ/93DKjxfxuEAyAVdrusqUhd51M=)
                          5: art96tlFKQsOZrn-_4whzv-HMTs.roa (hash: llpGns7rU7UVP5P8eTScrw98GGqfnk9iaAaUs18oIHo=)
                          6: hONqM_OAmwu_sR8DIjc5jGE3SiE.roa (hash: +Eou65cM6sG7qhtVRP5wa6O7TWYJ8dXCrrWuIC9tjas=)
                          7: ka61TQyk-I6A0KAgtagg9qh6Zrs.roa (hash: ERu2i1LKsX5h1+plwrYTHZRW3xGkx0kBjB7lUZzKbxc=)
                          8: kpzgZcvUC8x0heSre9qeulxM9Kk.roa (hash: Qb4y3srdtZHEFtNLA81f6qutaigaE79cIXA9oS0ZhhA=)
                          9: pnhQ5XHz8qyiwewdflAtm9GExFw.crl (hash: /T7MNl79MWXC7/qxbkIrTVCQLKkcrx3U9uw1yVZ6MDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:28:ee:44:da:75:b2:50:f6:fb:2f:04:12:33:c2:0c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: Dec 19 05:49:41 2022 GMT
            Not After : Dec 20 05:49:41 2022 GMT
        Subject: CN=9744d074339d6221ea0f1b5fb58be3c0c8412a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:cf:e5:08:e2:1b:f2:57:08:3e:32:1e:5c:
                    da:e1:87:cf:78:a3:73:3f:ee:74:a4:ea:25:81:5d:
                    6c:0a:41:e0:9e:44:92:e4:f1:da:e1:41:07:1a:44:
                    bf:64:f1:31:c4:f1:61:27:18:75:3f:61:d4:fd:03:
                    e3:6f:88:eb:d7:62:04:06:c9:8a:2a:25:e3:60:0b:
                    85:a7:57:aa:82:6d:a0:14:fd:9e:da:41:1f:85:f5:
                    e5:be:10:d1:9f:da:f9:3e:34:87:63:ba:12:87:74:
                    ef:72:cb:b1:7e:d7:b9:3f:f8:08:3f:a6:88:46:6e:
                    2d:bb:d6:12:b5:23:d4:f0:15:e4:24:e4:8d:16:96:
                    88:16:c2:7c:86:44:c3:02:36:43:4b:55:26:d5:42:
                    d6:ba:82:70:e3:62:d6:17:6d:7f:11:9f:18:d6:b0:
                    cf:ea:3b:f5:7f:6c:e1:5a:ed:8a:5e:89:a0:a3:41:
                    26:7a:66:f7:03:9e:89:d2:f7:be:2d:f2:7b:f4:e4:
                    4a:80:72:a2:7a:70:b3:31:e3:fc:14:0a:4c:fd:cd:
                    70:f2:f8:0d:27:b0:0b:9a:60:9f:f9:2e:69:f8:d1:
                    bf:9a:f4:39:e1:1c:b1:c1:84:4d:2d:5d:15:0a:36:
                    73:fc:be:4a:a4:78:63:20:02:3b:ea:d5:f8:33:f6:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:D0:74:33:9D:62:21:EA:0F:1B:5F:B5:8B:E3:C0:C8:41:2A:83
            X509v3 Authority Key Identifier:
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:13:af:a5:b8:17:cb:39:ce:19:c8:5e:37:fb:de:9c:d1:f7:
         70:7d:45:28:ba:a7:e2:8b:ad:9c:ff:29:07:03:f1:3a:48:ac:
         b5:83:e1:f6:3a:c1:d0:72:ed:b7:a5:09:63:06:bf:7d:40:28:
         46:aa:cb:ef:2a:88:7c:fe:9c:cb:15:4b:f5:ff:2f:24:43:82:
         99:ea:d7:ff:ff:3e:96:af:e1:b0:0e:a6:70:ca:8e:16:41:f8:
         d7:04:f3:5f:e4:37:a2:e9:aa:65:14:83:eb:e4:c3:3b:ea:03:
         d5:c1:49:25:71:21:94:8c:31:d2:2d:6d:4b:99:2d:1e:2c:4c:
         4c:71:c7:1c:2e:75:66:3c:67:07:20:8f:ce:6e:c6:49:13:52:
         11:b5:be:55:8b:48:bc:e0:98:07:2c:f4:e5:7e:dc:11:18:b4:
         9f:0b:e6:a3:40:88:b6:f9:45:7f:10:ae:99:b6:b2:30:fd:27:
         b4:e3:dc:56:bc:a9:c2:96:4a:d3:92:d5:11:83:3e:22:89:76:
         72:63:90:ea:dd:5c:b4:eb:e3:37:84:2b:90:b3:ba:c2:84:fd:
         4e:b8:b5:12:0d:bf:8b:88:57:0a:ea:0b:7b:dd:d6:93:6d:cb:
         bb:38:11:ae:18:b4:2a:a8:f5:50:f4:e2:d6:07:41:5b:59:f7:
         0b:7d:ba:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUo7kTadbJQ9vsvBBIzwgw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Nzg1MGU1NzFmM2YyYWNhMmMxZWMxZDdlNTAyZDliZDE4
NGM0NWMwHhcNMjIxMjE5MDU0OTQxWhcNMjIxMjIwMDU0OTQxWjAzMTEwLwYDVQQD
Eyg5NzQ0ZDA3NDMzOWQ2MjIxZWEwZjFiNWZiNThiZTNjMGM4NDEyYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+HP5QjiG/JXCD4yHlza4YfPeKNz
P+50pOolgV1sCkHgnkSS5PHa4UEHGkS/ZPExxPFhJxh1P2HU/QPjb4jr12IEBsmK
KiXjYAuFp1eqgm2gFP2e2kEfhfXlvhDRn9r5PjSHY7oSh3Tvcsuxfte5P/gIP6aI
Rm4tu9YStSPU8BXkJOSNFpaIFsJ8hkTDAjZDS1Um1ULWuoJw42LWF21/EZ8Y1rDP
6jv1f2zhWu2KXomgo0Ememb3A56J0ve+LfJ79ORKgHKienCzMeP8FApM/c1w8vgN
J7ALmmCf+S5p+NG/mvQ54RyxwYRNLV0VCjZz/L5KpHhjIAI76tX4M/YkrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdE0HQznWIh6g8bX7WL48DIQSqDMB8GA1UdIwQY
MBaAFKZ4UOVx8/KsosHsHX5QLZvRhMRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5oUTVYSHo4cXlpd2V3ZGZsQXRtOUdFeEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zMzA5YjUtZjkzZi00YzYyLThkY2Ut
YjBjMTUxZTUxNmNmLzEvcG5oUTVYSHo4cXlpd2V3ZGZsQXRtOUdFeEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zMzA5YjUtZjkzZi00YzYyLThkY2UtYjBjMTUxZTUxNmNm
LzEvcG5oUTVYSHo4cXlpd2V3ZGZsQXRtOUdFeEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxOvpbgX
yznOGcheN/venNH3cH1FKLqn4outnP8pBwPxOkistYPh9jrB0HLtt6UJYwa/fUAo
RqrL7yqIfP6cyxVL9f8vJEOCmerX//8+lq/hsA6mcMqOFkH41wTzX+Q3oumqZRSD
6+TDO+oD1cFJJXEhlIwx0i1tS5ktHixMTHHHHC51ZjxnByCPzm7GSRNSEbW+VYtI
vOCYByz05X7cERi0nwvmo0CItvlFfxCumbayMP0ntOPcVrypwpZK05LVEYM+Iol2
cmOQ6t1ctOvjN4QrkLO6woT9Tri1Eg2/i4hXCuoLe93Wk23LuzgRrhi0Kqj1UPTi
1gdBW1n3C326GA==
-----END CERTIFICATE-----