Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.mft
File:                     pmOr1HnL_3YIIwS_YNA63DGH2TY.mft (raw, json)
Hash identifier:          DM5ZfafHxUrh0RoXzQQ1AjhgihMAPt+5Jh2DkdPY3Qc=
Subject key identifier:   BB:B7:66:CB:4E:CD:48:84:4D:E5:65:68:60:BB:6F:4A:5E:12:81:EB
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Certificate issuer:       /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial:       018CECCF7E0879BC17798EBD214CEFDAF01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.mft
Manifest number:          101F
Signing time:             Tue 09 Jan 2024 06:01:10 +0000
Manifest this update:     Tue 09 Jan 2024 06:01:10 +0000
Manifest next update:     Wed 10 Jan 2024 06:01:10 +0000
Files and hashes:         1: 1kSH8rZ6IUi88ZhN6UtmOZv558I.roa (hash: 7q66mFu5Mvpzw5a0b2pAl5/lb4tAljHIZxRT+FyBaUU=)
                          2: 9gLBYRo_u9PnKGN3hM9HVt5CkqA.roa (hash: +dZbLL5iaUVs1WPEzVJL8ttYIFRxEFvDi++HIx2xTCg=)
                          3: ET3ybFc-NmWVXVPjoJvzAUIP6kg.roa (hash: JGU4N3AZI76sPPBKJA46boeSJsTBbrUUI8xTw6tP8Ys=)
                          4: PyS73X3OS-7gl5Rc901h5-EYsek.roa (hash: 7hSHCrg/Um2AIVvSb4pIVMAJ31VAb1KDdAe7NKjbzsY=)
                          5: _Jw8Sbh9RaVaWsOz48ZRQ8sz6_0.roa (hash: g7HJ8RH8z7l+dBFZwSZdGQ6PV3KNP+1s1Ade5CGaJbs=)
                          6: f81l534op575IqhcgSW63muOefA.roa (hash: apN8nqDqS3zRIxbkLE/nuAGQWa8JX3rr748nJl22UOA=)
                          7: huIuWzc-HnbKSX4rQTIbIZbDApc.roa (hash: TkTTZjtfFlPNCb/+x/V5tC0q6hhpGo/Xo9TcmVQPTRI=)
                          8: pmOr1HnL_3YIIwS_YNA63DGH2TY.crl (hash: C7EmOx/r33wzrTC2WpLCrw4nVnoN8xQhaNcJUG26Pes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ec:cf:7e:08:79:bc:17:79:8e:bd:21:4c:ef:da:f0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
        Validity
            Not Before: Jan  9 06:01:10 2024 GMT
            Not After : Jan 10 06:01:10 2024 GMT
        Subject: CN=bbb766cb4ecd48844de5656860bb6f4a5e1281eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:bb:4f:c6:da:d6:ff:fe:0e:2a:ff:61:d1:
                    0e:27:63:3b:b7:05:95:08:35:e6:4a:24:92:f9:ce:
                    17:af:47:e5:7d:10:8e:89:9b:4b:02:9d:d5:c4:b1:
                    ca:44:f5:5f:b9:09:d1:4c:2a:4c:56:b0:4e:73:f3:
                    de:1c:0e:d2:be:bc:8f:0b:96:55:04:bf:98:28:67:
                    35:43:e1:4e:a9:98:2f:9d:53:37:88:56:e5:75:1c:
                    a1:38:93:69:9b:19:83:45:2f:29:40:dd:4c:57:e3:
                    e0:62:13:9e:46:ba:65:13:7d:18:17:f7:df:00:4e:
                    81:be:13:99:dc:e9:0a:8d:17:55:e8:23:73:da:c9:
                    77:9a:52:f3:5a:d6:c8:d5:08:8b:49:c8:82:b7:0c:
                    db:70:96:ce:47:11:7b:68:76:22:94:84:2a:f9:e0:
                    86:77:73:86:73:ea:7a:dd:5e:7c:73:6d:2e:ab:5d:
                    34:d9:2d:5e:b6:4f:d3:b7:8b:58:c2:c6:23:6f:95:
                    11:2c:53:10:8b:78:39:32:22:76:46:6e:0b:dd:cc:
                    c5:f2:03:41:f3:0c:4a:04:ad:9d:84:65:c8:b0:6e:
                    3d:34:35:34:9f:5e:51:ab:74:09:a5:99:7c:9e:d3:
                    07:5d:87:7f:3b:03:96:9b:5b:ca:44:35:eb:15:3e:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:66:CB:4E:CD:48:84:4D:E5:65:68:60:BB:6F:4A:5E:12:81:EB
            X509v3 Authority Key Identifier:
                keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:1c:d7:05:76:6a:45:b9:bb:ce:2b:4d:81:49:d8:62:e6:
         0d:17:4f:4b:af:96:7b:cf:52:c5:75:22:36:60:37:fe:70:ee:
         24:5d:c4:09:68:52:6f:37:ae:d0:cc:97:40:89:70:dd:3f:04:
         b3:91:f0:17:b8:75:c3:8c:90:54:e2:0d:e7:e8:a0:94:2e:35:
         12:ef:15:54:3b:47:18:4c:81:c9:33:81:ee:75:82:15:b8:b5:
         c9:cc:87:12:6d:e1:9d:45:67:dd:b4:1c:13:5c:62:fb:59:df:
         29:7a:92:e7:b0:ef:28:30:33:cd:0a:b4:a9:8d:e3:a7:d4:0c:
         52:24:0a:14:9f:17:74:40:ee:17:d9:f3:1c:ee:ff:66:c2:9b:
         23:ce:bf:f2:53:d4:98:4d:8f:b8:ef:2e:e9:41:58:92:43:c7:
         76:70:c1:4b:eb:91:c7:18:69:d4:dc:7c:15:66:70:c3:48:04:
         ab:de:ec:aa:a0:58:77:5f:ac:b7:5b:fc:33:09:4a:79:1b:92:
         b1:07:4f:63:88:6d:f7:46:6e:f1:04:66:02:f4:5c:ee:0e:30:
         2b:ad:f9:72:de:27:86:2d:d6:57:dd:10:2f:43:d4:ca:ab:5c:
         43:c8:03:29:8d:e4:b2:a4:e7:15:3d:a1:8a:61:b4:15:b3:2a:
         ee:8f:0f:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzsz34IebwXeY69IUzv2vAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjNhYmQ0NzljYmZmNzYwODIzMDRiZjYwZDAzYWRjMzE4
N2Q5MzYwHhcNMjQwMTA5MDYwMTEwWhcNMjQwMTEwMDYwMTEwWjAzMTEwLwYDVQQD
EyhiYmI3NjZjYjRlY2Q0ODg0NGRlNTY1Njg2MGJiNmY0YTVlMTI4MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRm7T8ba1v/+Dir/YdEOJ2M7twWV
CDXmSiSS+c4Xr0flfRCOiZtLAp3VxLHKRPVfuQnRTCpMVrBOc/PeHA7SvryPC5ZV
BL+YKGc1Q+FOqZgvnVM3iFbldRyhOJNpmxmDRS8pQN1MV+PgYhOeRrplE30YF/ff
AE6BvhOZ3OkKjRdV6CNz2sl3mlLzWtbI1QiLSciCtwzbcJbORxF7aHYilIQq+eCG
d3OGc+p63V58c20uq1002S1etk/Tt4tYwsYjb5URLFMQi3g5MiJ2Rm4L3czF8gNB
8wxKBK2dhGXIsG49NDU0n15Rq3QJpZl8ntMHXYd/OwOWm1vKRDXrFT7C+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu3ZstOzUiETeVlaGC7b0peEoHrMB8GA1UdIwQY
MBaAFKZjq9R5y/92CCMEv2DQOtwxh9k2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1PcjFIbkxfM1lJSXdTX1lOQTYzREdIMlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mNDI3MjQtZDAwOS00ODdkLWE3OWMt
YmZhMDRmNmNkZTUwLzEvcG1PcjFIbkxfM1lJSXdTX1lOQTYzREdIMlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mNDI3MjQtZDAwOS00ODdkLWE3OWMtYmZhMDRmNmNkZTUw
LzEvcG1PcjFIbkxfM1lJSXdTX1lOQTYzREdIMlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzUc1wV2
akW5u84rTYFJ2GLmDRdPS6+We89SxXUiNmA3/nDuJF3ECWhSbzeu0MyXQIlw3T8E
s5HwF7h1w4yQVOIN5+iglC41Eu8VVDtHGEyByTOB7nWCFbi1ycyHEm3hnUVn3bQc
E1xi+1nfKXqS57DvKDAzzQq0qY3jp9QMUiQKFJ8XdEDuF9nzHO7/ZsKbI86/8lPU
mE2PuO8u6UFYkkPHdnDBS+uRxxhp1Nx8FWZww0gEq97sqqBYd1+st1v8MwlKeRuS
sQdPY4ht90Zu8QRmAvRc7g4wK635ct4nhi3WV90QL0PUyqtcQ8gDKY3ksqTnFT2h
imG0FbMq7o8PGA==
-----END CERTIFICATE-----