Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.mft
File:                     PGU9WS2Ry8c4xpGAGGJ36HgyOK8.mft (raw, json)
Hash identifier:          SQ7bQRMzmgznNfet2YtmU0zy+re+Tstagwsw0ztyD8M=
Subject key identifier:   C3:1B:9F:C8:E6:DF:60:9B:89:74:BF:DA:C1:29:58:5A:57:B0:BE:0D
Authority key identifier: 3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
Certificate issuer:       /CN=3c653d592d91cbc738c69180186277e8783238af
Certificate serial:       01853DF001A28B452E6797B684F8D86440A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.mft
Manifest number:          0BE0
Signing time:             Fri 23 Dec 2022 07:43:37 +0000
Manifest this update:     Fri 23 Dec 2022 07:43:37 +0000
Manifest next update:     Sat 24 Dec 2022 07:43:37 +0000
Files and hashes:         1: LQEQghm0no3lZJHh89DYELFpGPc.roa (hash: o/xXmKudataGhMxYXhmqAdOqJ7zQLfhYrrtVprlb/t8=)
                          2: P6Z_we9aTQ9uluZxAelS1HhoaPI.roa (hash: 1EV+4s1WHjUnXrVgpDGOWUUmKPJuYOiubeUSr8SXDog=)
                          3: PGU9WS2Ry8c4xpGAGGJ36HgyOK8.crl (hash: 8tKQWMsZ3y/DpeFG98t+ZbzNBmY/Xd5nCDpq0R/AOm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3d:f0:01:a2:8b:45:2e:67:97:b6:84:f8:d8:64:40:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c653d592d91cbc738c69180186277e8783238af
        Validity
            Not Before: Dec 23 07:43:37 2022 GMT
            Not After : Dec 24 07:43:37 2022 GMT
        Subject: CN=c31b9fc8e6df609b8974bfdac129585a57b0be0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:df:0a:01:72:85:16:5f:2e:56:2d:b1:69:
                    a3:62:c0:30:12:38:32:3d:bd:9f:df:ea:ed:14:78:
                    f3:3b:3f:0e:1f:b4:1b:09:3a:dd:d4:3b:d7:2c:3f:
                    52:33:08:03:11:ed:e6:cb:0b:9c:b3:8f:77:5a:98:
                    0e:63:b2:77:dc:fb:9b:89:e4:04:09:4f:4d:a6:7e:
                    94:8f:eb:ca:87:a8:34:6a:8e:97:e9:cf:9d:93:cf:
                    b3:7d:81:5e:fc:68:a8:a0:6c:05:eb:8e:03:8a:e9:
                    3a:56:12:84:f9:9a:5c:ce:02:a5:e7:c2:68:cf:22:
                    e9:f0:25:a9:df:71:62:3a:4c:2c:2e:1f:97:37:d4:
                    b5:ab:1e:07:0e:fa:44:7b:7c:b5:b3:75:66:9b:9c:
                    8b:ac:a8:a8:1a:97:36:90:c8:72:36:ac:90:dc:73:
                    41:3a:72:86:01:15:e4:e0:ca:62:69:52:8e:3a:73:
                    f5:54:f7:35:7e:4b:27:5f:41:c6:5a:00:d7:e1:73:
                    a4:21:de:19:30:8e:a6:14:75:be:e9:27:05:81:4d:
                    94:90:a0:9c:45:74:76:98:f2:fd:f8:99:1b:d7:6b:
                    bb:44:2a:6d:ba:f9:80:50:e7:2f:a3:93:1e:d4:81:
                    35:01:d4:6a:3d:1c:37:f0:e6:5a:7e:ea:e8:6a:b6:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:9F:C8:E6:DF:60:9B:89:74:BF:DA:C1:29:58:5A:57:B0:BE:0D
            X509v3 Authority Key Identifier:
                keyid:3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:d6:3a:32:13:91:09:47:91:8c:de:8a:e7:a2:cd:90:b7:
         3b:b2:f1:0a:33:0f:14:49:fb:f4:89:7b:f6:9a:04:91:71:3a:
         a8:a9:66:ef:13:96:de:80:79:d3:c0:cc:42:5a:8c:6c:f5:7d:
         11:a9:ae:ab:17:02:f3:ed:9d:0c:78:58:03:d4:1a:c7:05:0b:
         18:b3:7c:5c:e1:ac:27:8b:2a:3a:e1:8d:c7:e1:4f:9d:67:39:
         c6:d7:09:3d:87:59:16:ac:f7:20:17:5a:e8:cc:02:67:94:74:
         17:a5:2a:00:16:e1:81:8d:5b:7f:db:e6:2f:5e:78:2a:5b:b5:
         c7:25:e1:e2:a0:8e:f6:1e:ff:93:ce:e0:f0:39:d1:82:5e:b2:
         3e:24:71:b3:12:b5:90:5d:13:f4:f9:62:b3:33:8d:f1:6a:fd:
         7c:d4:2e:f7:12:9b:bb:d0:a3:89:35:a2:69:dc:bd:2b:ff:41:
         22:5c:40:b3:dc:73:a4:32:3c:1a:79:76:43:d3:5c:74:7c:e7:
         08:d1:78:a7:bf:89:bd:ff:8b:31:30:28:fa:1c:d4:a5:21:60:
         71:37:df:87:f8:73:28:13:9d:3e:4a:b2:f0:1e:0d:0d:c0:77:
         31:55:f6:c5:5e:9c:79:15:de:5d:a9:35:40:e4:fc:58:c2:cb:
         f1:34:8c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYU98AGii0UuZ5e2hPjYZEClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNjUzZDU5MmQ5MWNiYzczOGM2OTE4MDE4NjI3N2U4Nzgz
MjM4YWYwHhcNMjIxMjIzMDc0MzM3WhcNMjIxMjI0MDc0MzM3WjAzMTEwLwYDVQQD
EyhjMzFiOWZjOGU2ZGY2MDliODk3NGJmZGFjMTI5NTg1YTU3YjBiZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9bfCgFyhRZfLlYtsWmjYsAwEjgy
Pb2f3+rtFHjzOz8OH7QbCTrd1DvXLD9SMwgDEe3mywucs493WpgOY7J33PubieQE
CU9Npn6Uj+vKh6g0ao6X6c+dk8+zfYFe/GiooGwF644Diuk6VhKE+ZpczgKl58Jo
zyLp8CWp33FiOkwsLh+XN9S1qx4HDvpEe3y1s3Vmm5yLrKioGpc2kMhyNqyQ3HNB
OnKGARXk4MpiaVKOOnP1VPc1fksnX0HGWgDX4XOkId4ZMI6mFHW+6ScFgU2UkKCc
RXR2mPL9+Jkb12u7RCptuvmAUOcvo5Me1IE1AdRqPRw38OZafuroarZi3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMbn8jm32CbiXS/2sEpWFpXsL4NMB8GA1UdIwQY
MBaAFDxlPVktkcvHOMaRgBhid+h4MjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEdVOVdTMlJ5OGM0eHBHQUdHSjM2SGd5T0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMjg4M2UtMzcwNy00ZjZmLTk0ZGMt
OWM0NmY5OGRhMThjLzEvUEdVOVdTMlJ5OGM0eHBHQUdHSjM2SGd5T0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wMjg4M2UtMzcwNy00ZjZmLTk0ZGMtOWM0NmY5OGRhMThj
LzEvUEdVOVdTMlJ5OGM0eHBHQUdHSjM2SGd5T0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRrWOjIT
kQlHkYzeiueizZC3O7LxCjMPFEn79Il79poEkXE6qKlm7xOW3oB508DMQlqMbPV9
EamuqxcC8+2dDHhYA9QaxwULGLN8XOGsJ4sqOuGNx+FPnWc5xtcJPYdZFqz3IBda
6MwCZ5R0F6UqABbhgY1bf9vmL154Klu1xyXh4qCO9h7/k87g8DnRgl6yPiRxsxK1
kF0T9PliszON8Wr9fNQu9xKbu9CjiTWiady9K/9BIlxAs9xzpDI8Gnl2Q9NcdHzn
CNF4p7+Jvf+LMTAo+hzUpSFgcTffh/hzKBOdPkqy8B4NDcB3MVX2xV6ceRXeXak1
QOT8WMLL8TSMJA==
-----END CERTIFICATE-----