Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/2HNZMAy1eBswOZwkOjVrBNOzTxI.mft
File:                     2HNZMAy1eBswOZwkOjVrBNOzTxI.mft (raw, json)
Hash identifier:          a9Z0v1KN7bfBL8GgQXDoL2+mrua2j87VGQGIQGFMTSw=
Subject key identifier:   06:4B:6F:22:C3:4A:05:D9:EA:E8:49:3F:17:B7:1E:BC:C5:65:92:1B
Authority key identifier: D8:73:59:30:0C:B5:78:1B:30:39:9C:24:3A:35:6B:04:D3:B3:4F:12
Certificate issuer:       /CN=d87359300cb5781b30399c243a356b04d3b34f12
Certificate serial:       01886FD5EFCF792AC6E7955F61725A7FCAC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HNZMAy1eBswOZwkOjVrBNOzTxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/2HNZMAy1eBswOZwkOjVrBNOzTxI.mft
Manifest number:          09CA
Signing time:             Wed 31 May 2023 03:24:31 +0000
Manifest this update:     Wed 31 May 2023 03:24:31 +0000
Manifest next update:     Thu 01 Jun 2023 03:24:31 +0000
Files and hashes:         1: 2HNZMAy1eBswOZwkOjVrBNOzTxI.crl (hash: ad2v7ZyM08n7piatRQpfrxJSNQ1khOWwL5xtpt/gT40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6f:d5:ef:cf:79:2a:c6:e7:95:5f:61:72:5a:7f:ca:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87359300cb5781b30399c243a356b04d3b34f12
        Validity
            Not Before: May 31 03:24:31 2023 GMT
            Not After : Jun  1 03:24:31 2023 GMT
        Subject: CN=064b6f22c34a05d9eae8493f17b71ebcc565921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:18:d1:f6:4e:0f:96:15:8a:c8:5d:47:73:
                    e9:07:27:44:82:ed:ec:79:71:4b:a0:cc:8f:45:3f:
                    84:9e:1b:98:40:2c:8c:92:84:af:ea:56:e8:2a:92:
                    d6:24:c6:b1:64:31:64:58:8f:07:26:02:f2:37:e1:
                    1b:45:3a:c1:a7:73:a5:06:3b:9e:d1:ca:c4:c4:8b:
                    a3:f7:df:ac:e9:9e:43:49:4d:c7:3f:78:67:a7:98:
                    0f:1c:b4:90:99:aa:59:32:ae:eb:f5:ef:b9:74:ce:
                    e0:e6:b2:60:56:5b:e2:08:f8:6c:50:28:27:fc:0a:
                    e0:73:8b:fb:b4:73:e5:fd:63:46:35:d6:ca:ab:5b:
                    17:93:cb:eb:9b:ac:1c:7f:eb:99:8f:da:89:66:fb:
                    56:05:19:0c:6d:81:29:1c:0d:37:ce:53:e4:c5:9b:
                    5b:8c:85:fb:28:3b:87:54:72:07:c7:be:63:77:5b:
                    88:36:77:d8:5d:60:3e:b5:f0:fa:8f:55:e1:66:ae:
                    6e:2b:0c:11:84:6c:d1:0e:c8:fb:ef:4c:bf:30:8d:
                    dd:49:41:76:bb:2e:4d:fb:c0:e3:3e:ae:39:83:70:
                    8a:3c:f5:54:56:30:e5:f5:48:b6:83:4a:f0:94:a4:
                    4f:da:eb:ef:89:76:5c:c2:c3:f4:32:1a:c3:3e:56:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4B:6F:22:C3:4A:05:D9:EA:E8:49:3F:17:B7:1E:BC:C5:65:92:1B
            X509v3 Authority Key Identifier:
                keyid:D8:73:59:30:0C:B5:78:1B:30:39:9C:24:3A:35:6B:04:D3:B3:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HNZMAy1eBswOZwkOjVrBNOzTxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/2HNZMAy1eBswOZwkOjVrBNOzTxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/2HNZMAy1eBswOZwkOjVrBNOzTxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fa:c1:15:fe:8e:39:b3:19:68:da:c5:b9:44:49:26:14:55:
         e5:23:2c:3d:62:c6:c1:0e:d6:dd:8b:e4:1f:f9:b4:48:52:4e:
         69:f5:84:6f:01:7b:ba:fe:0f:56:49:c1:de:95:23:8b:a8:c7:
         19:b4:50:ea:79:17:e5:79:a7:0a:25:e8:89:5c:25:34:69:bc:
         1d:66:ca:b9:4b:43:2a:d3:e1:f2:9b:44:b7:11:c7:9a:6b:cd:
         c1:06:51:a1:b6:a6:e1:58:10:6e:44:84:83:69:c8:06:07:63:
         a2:f5:98:4e:48:0f:91:29:98:48:be:c8:56:bf:0d:1c:12:dd:
         da:f5:d1:90:0e:e1:2a:c6:1b:5d:a5:b4:a1:ff:a1:2b:83:0a:
         e3:ff:44:fb:74:26:25:23:6e:8a:22:fa:b4:8b:52:07:cb:80:
         da:98:6b:4f:2f:b4:92:80:e8:70:60:ba:ec:e6:cb:80:f6:0b:
         0e:49:18:f2:b3:93:b9:5c:8c:c4:06:36:3a:f6:3b:4d:80:77:
         2f:73:79:1e:d9:30:c8:69:14:1a:3d:f8:a9:43:0a:ba:b6:e2:
         a2:ee:4b:cc:c3:ad:0f:3b:7a:86:a3:a3:80:6d:48:39:5e:e1:
         93:05:65:56:a7:d7:97:e9:59:2f:a8:55:74:6c:9d:de:72:03:
         44:71:c7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYhv1e/PeSrG55VfYXJaf8rFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzM1OTMwMGNiNTc4MWIzMDM5OWMyNDNhMzU2YjA0ZDNi
MzRmMTIwHhcNMjMwNTMxMDMyNDMxWhcNMjMwNjAxMDMyNDMxWjAzMTEwLwYDVQQD
EygwNjRiNmYyMmMzNGEwNWQ5ZWFlODQ5M2YxN2I3MWViY2M1NjU5MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1YY0fZOD5YVishdR3PpBydEgu3s
eXFLoMyPRT+EnhuYQCyMkoSv6lboKpLWJMaxZDFkWI8HJgLyN+EbRTrBp3OlBjue
0crExIuj99+s6Z5DSU3HP3hnp5gPHLSQmapZMq7r9e+5dM7g5rJgVlviCPhsUCgn
/Argc4v7tHPl/WNGNdbKq1sXk8vrm6wcf+uZj9qJZvtWBRkMbYEpHA03zlPkxZtb
jIX7KDuHVHIHx75jd1uINnfYXWA+tfD6j1XhZq5uKwwRhGzRDsj770y/MI3dSUF2
uy5N+8DjPq45g3CKPPVUVjDl9Ui2g0rwlKRP2uvviXZcwsP0MhrDPlZTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZLbyLDSgXZ6uhJPxe3HrzFZZIbMB8GA1UdIwQY
MBaAFNhzWTAMtXgbMDmcJDo1awTTs08SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhOWk1BeTFlQnN3T1p3a09qVnJCTk96VHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81MDc5MTMtMWIzYS00MWRmLTgyN2Ut
NzdkNTQwODU4ZjgxLzEvMkhOWk1BeTFlQnN3T1p3a09qVnJCTk96VHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81MDc5MTMtMWIzYS00MWRmLTgyN2UtNzdkNTQwODU4Zjgx
LzEvMkhOWk1BeTFlQnN3T1p3a09qVnJCTk96VHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/rBFf6O
ObMZaNrFuURJJhRV5SMsPWLGwQ7W3YvkH/m0SFJOafWEbwF7uv4PVknB3pUji6jH
GbRQ6nkX5XmnCiXoiVwlNGm8HWbKuUtDKtPh8ptEtxHHmmvNwQZRobam4VgQbkSE
g2nIBgdjovWYTkgPkSmYSL7IVr8NHBLd2vXRkA7hKsYbXaW0of+hK4MK4/9E+3Qm
JSNuiiL6tItSB8uA2phrTy+0koDocGC67ObLgPYLDkkY8rOTuVyMxAY2OvY7TYB3
L3N5HtkwyGkUGj34qUMKurbiou5LzMOtDzt6hqOjgG1IOV7hkwVlVqfXl+lZL6hV
dGyd3nIDRHHHow==
-----END CERTIFICATE-----