Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.mft
File:                     pmndEhuLXetRKfP9uuunzj1jJco.mft (raw, json)
Hash identifier:          dgnoVX87DYTKg8FIDCIfKILz8Z7pbBmMvAhjxECRBE8=
Subject key identifier:   B1:16:F1:51:E1:BA:C4:53:9D:9B:4F:C8:B6:96:72:45:5A:9B:AC:17
Authority key identifier: A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
Certificate issuer:       /CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
Certificate serial:       018BDA264239F43DF309BD5B7459EC8C661F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.mft
Manifest number:          0869
Signing time:             Thu 16 Nov 2023 22:00:22 +0000
Manifest this update:     Thu 16 Nov 2023 22:00:22 +0000
Manifest next update:     Fri 17 Nov 2023 22:00:22 +0000
Files and hashes:         1: pmndEhuLXetRKfP9uuunzj1jJco.crl (hash: xGo9Bjyt2kG4V0zyt/CywHIfijZgU2HHPkyt4n5NAMI=)
                          2: sQR7ApaOPLsGpP3eW9N3fHByr8M.roa (hash: bT+zbEFTzcxaHIAyAV5lhu45keQZGC9ukk2eCgCc1qE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:da:26:42:39:f4:3d:f3:09:bd:5b:74:59:ec:8c:66:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
        Validity
            Not Before: Nov 16 22:00:22 2023 GMT
            Not After : Nov 17 22:00:22 2023 GMT
        Subject: CN=b116f151e1bac4539d9b4fc8b69672455a9bac17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:4f:65:29:f8:d1:62:b3:5a:6d:77:3d:02:
                    d9:e4:cc:98:0a:77:ff:94:c2:40:a8:e7:a7:c5:43:
                    74:a6:ca:fc:51:02:f2:c2:51:42:8d:b5:2d:48:ab:
                    b6:de:60:60:b2:1b:fb:f7:b7:8a:70:9a:9d:90:5e:
                    e2:3d:ce:4f:09:2c:b8:e2:f2:aa:50:13:e4:29:d8:
                    ad:5d:de:95:a7:8d:7d:63:f5:29:0c:8e:3c:47:41:
                    db:70:ac:81:a5:e8:20:e2:7b:f7:c0:bf:93:e1:c4:
                    bb:17:0b:4b:87:df:b2:24:d3:33:51:65:ec:e7:d9:
                    a9:e5:94:5a:d8:ee:5e:d6:6c:df:e3:9c:36:f7:41:
                    30:d5:d4:d0:0a:f9:16:c5:73:57:79:61:ec:06:2f:
                    22:15:01:22:53:40:f7:08:25:fc:25:7a:68:29:e0:
                    92:37:59:d9:f4:51:5b:0d:88:0a:a0:ca:3c:47:b1:
                    4a:40:dc:89:18:a8:af:7c:08:0a:e8:ee:29:51:3d:
                    7f:a8:2c:f3:b7:de:c9:d3:22:69:e3:2b:75:42:49:
                    a5:8e:20:e9:23:f6:e5:d7:5c:6d:ff:ac:b0:b7:27:
                    77:ac:a5:c3:f7:0b:75:c9:e9:60:31:74:95:27:1c:
                    c7:37:b8:4b:ff:6c:a4:54:b5:da:06:12:8f:e9:41:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:16:F1:51:E1:BA:C4:53:9D:9B:4F:C8:B6:96:72:45:5A:9B:AC:17
            X509v3 Authority Key Identifier:
                keyid:A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:47:15:76:11:1c:3d:30:49:63:18:98:0d:1f:aa:99:77:0e:
         28:03:57:e7:54:f6:9b:28:7c:8e:35:ea:f2:49:70:69:a3:34:
         8f:b8:88:df:85:71:8a:15:82:ec:a9:46:e4:f7:ad:ff:53:7d:
         13:9e:73:97:52:ad:d8:ae:3f:a6:41:56:94:3d:e8:30:f6:23:
         b6:86:0e:c7:3d:e1:48:d3:45:26:13:46:1d:70:30:24:07:7a:
         86:bc:f8:2e:09:de:d0:df:14:14:05:fc:ee:f7:eb:c2:82:73:
         f9:f4:16:cf:23:8c:04:84:bb:f2:51:df:e7:b9:3c:88:74:40:
         36:09:a0:82:80:b1:f9:2b:52:af:d7:3c:9b:c7:0f:8a:85:48:
         26:2c:9c:87:74:7d:5d:e5:a7:27:71:81:75:a6:9c:4e:e4:dd:
         53:b0:05:f7:b9:b6:5f:db:c5:34:de:bc:c3:4e:64:c3:da:fc:
         03:7f:f1:c9:39:51:2e:83:0d:5a:18:df:4d:33:c6:e4:23:28:
         be:49:77:ba:c2:9a:73:42:71:d3:68:97:08:c0:d7:58:05:de:
         93:ea:4f:b2:22:83:47:69:ea:3b:69:99:44:55:fe:ad:69:71:
         83:72:e1:6c:9e:dd:a5:46:42:72:12:d0:36:a5:7a:cd:8f:0d:
         31:ab:ef:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvaJkI59D3zCb1bdFnsjGYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjlkZDEyMWI4YjVkZWI1MTI5ZjNmZGJhZWJhN2NlM2Q2
MzI1Y2EwHhcNMjMxMTE2MjIwMDIyWhcNMjMxMTE3MjIwMDIyWjAzMTEwLwYDVQQD
EyhiMTE2ZjE1MWUxYmFjNDUzOWQ5YjRmYzhiNjk2NzI0NTVhOWJhYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP9PZSn40WKzWm13PQLZ5MyYCnf/
lMJAqOenxUN0psr8UQLywlFCjbUtSKu23mBgshv797eKcJqdkF7iPc5PCSy44vKq
UBPkKditXd6Vp419Y/UpDI48R0HbcKyBpegg4nv3wL+T4cS7FwtLh9+yJNMzUWXs
59mp5ZRa2O5e1mzf45w290Ew1dTQCvkWxXNXeWHsBi8iFQEiU0D3CCX8JXpoKeCS
N1nZ9FFbDYgKoMo8R7FKQNyJGKivfAgK6O4pUT1/qCzzt97J0yJp4yt1QkmljiDp
I/bl11xt/6ywtyd3rKXD9wt1yelgMXSVJxzHN7hL/2ykVLXaBhKP6UHvVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEW8VHhusRTnZtPyLaWckVam6wXMB8GA1UdIwQY
MBaAFKZp3RIbi13rUSnz/brrp849YyXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1uZEVodUxYZXRSS2ZQOXV1dW56ajFqSmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84NDNmOGEtZGZhNC00YmI4LTliMDct
ZGZjMTkzMGJiZjg0LzEvcG1uZEVodUxYZXRSS2ZQOXV1dW56ajFqSmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84NDNmOGEtZGZhNC00YmI4LTliMDctZGZjMTkzMGJiZjg0
LzEvcG1uZEVodUxYZXRSS2ZQOXV1dW56ajFqSmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUcVdhEc
PTBJYxiYDR+qmXcOKANX51T2myh8jjXq8klwaaM0j7iI34VxihWC7KlG5Pet/1N9
E55zl1Kt2K4/pkFWlD3oMPYjtoYOxz3hSNNFJhNGHXAwJAd6hrz4Lgne0N8UFAX8
7vfrwoJz+fQWzyOMBIS78lHf57k8iHRANgmggoCx+StSr9c8m8cPioVIJiych3R9
XeWnJ3GBdaacTuTdU7AF97m2X9vFNN68w05kw9r8A3/xyTlRLoMNWhjfTTPG5CMo
vkl3usKac0Jx02iXCMDXWAXek+pPsiKDR2nqO2mZRFX+rWlxg3LhbJ7dpUZCchLQ
NqV6zY8NMavvCg==
-----END CERTIFICATE-----