Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/HXxRJVywZTVi-4aZEfBdRUFOYcU.mft
File:                     HXxRJVywZTVi-4aZEfBdRUFOYcU.mft (raw, json)
Hash identifier:          dJ6sJO3PFFq07Bf3mggmQL89LCWTfHqSIa9cWpdiRBE=
Subject key identifier:   AF:2C:BE:0C:FC:1D:8A:2E:9A:91:F8:40:88:97:4B:09:24:10:2C:D3
Authority key identifier: 1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5
Certificate issuer:       /CN=1d7c51255cb0653562fb869911f05d45414e61c5
Certificate serial:       018BB989A9F55D1A9D9CF96288FFC1F1A099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/HXxRJVywZTVi-4aZEfBdRUFOYcU.mft
Manifest number:          08FC
Signing time:             Fri 10 Nov 2023 14:01:28 +0000
Manifest this update:     Fri 10 Nov 2023 14:01:28 +0000
Manifest next update:     Sat 11 Nov 2023 14:01:28 +0000
Files and hashes:         1: HXxRJVywZTVi-4aZEfBdRUFOYcU.crl (hash: RNZCrAkbNQGbW79MHmctcPwy20ARcNdE+zCgvWuq84A=)
                          2: mgPFPwNtHJgL7IbzvZrrLiKUccE.roa (hash: rLw1C9G0qKhxxSPhjDQcKo42QTqL3jpDOyIm5Eu6ix8=)
                          3: rOE4ugpbY9-fu5mANSvyKT0WVhk.roa (hash: GRgB5Y0IPO2DI+EdEKoDReQdsTF50GxktaLvUYiMwmM=)
                          4: yVeSp9WhYxxLZjqlAtrgmi0me4k.roa (hash: CKPSMzNM8SZx20C/imtVBdw91H6V7N6/9mm/glkV/+k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:89:a9:f5:5d:1a:9d:9c:f9:62:88:ff:c1:f1:a0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7c51255cb0653562fb869911f05d45414e61c5
        Validity
            Not Before: Nov 10 14:01:28 2023 GMT
            Not After : Nov 11 14:01:28 2023 GMT
        Subject: CN=af2cbe0cfc1d8a2e9a91f84088974b0924102cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:b2:71:73:60:c7:51:9f:4c:4b:5b:8c:73:
                    80:87:d0:a9:a9:45:73:ea:6e:28:bb:0a:70:e4:68:
                    85:7d:f3:de:52:ef:c7:73:d1:86:8f:59:17:5e:69:
                    1d:7e:0e:fc:47:07:0e:39:31:f2:47:86:58:89:c5:
                    ca:b6:d6:62:3c:9e:9b:cf:93:ba:ae:ae:3b:4f:93:
                    95:9a:51:c1:90:63:79:c6:fb:f2:ac:a6:ec:37:41:
                    fa:00:27:36:41:05:13:46:36:ff:cb:87:f7:94:2d:
                    e7:78:15:f0:55:1f:a4:2e:1c:86:19:0b:0a:ea:e1:
                    82:9a:b8:c1:57:58:a8:53:7f:34:ef:43:3d:61:82:
                    e7:2a:0f:a6:54:09:62:95:a2:86:54:51:e0:12:8c:
                    ee:dd:4b:ac:2c:5b:b5:21:c2:5f:30:3b:73:14:b6:
                    a0:c3:7b:a1:4d:26:cd:32:f9:35:d6:df:f6:92:0c:
                    ce:fb:ef:d6:54:27:4e:0a:46:99:79:ac:d5:18:dd:
                    ab:99:b5:0a:01:cb:59:a7:72:0f:e0:46:c8:1e:75:
                    ed:fc:de:21:08:56:29:30:de:77:cc:1c:91:00:8e:
                    22:2d:98:3e:b5:96:a3:62:9c:d8:7e:10:b3:cd:b8:
                    04:98:21:ae:ad:35:9b:30:a0:a5:5f:b6:61:18:fe:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:BE:0C:FC:1D:8A:2E:9A:91:F8:40:88:97:4B:09:24:10:2C:D3
            X509v3 Authority Key Identifier:
                keyid:1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/HXxRJVywZTVi-4aZEfBdRUFOYcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/HXxRJVywZTVi-4aZEfBdRUFOYcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:57:fd:ed:49:4b:f5:39:4f:dc:1e:ca:dd:8b:93:03:1d:03:
         00:17:5f:74:41:da:78:80:63:2a:ba:dd:32:ca:a1:bc:d3:2b:
         fa:db:b1:fc:e6:13:98:5d:df:b2:ed:4a:68:35:cc:48:13:15:
         85:de:54:3f:f5:78:25:b6:6f:00:56:88:e0:57:0d:ab:ed:50:
         74:1e:ef:7d:12:07:c6:1d:52:eb:bf:60:ab:ad:f4:a1:49:d1:
         0e:6a:18:95:92:fc:28:e3:9b:12:85:70:64:3b:ef:de:f6:24:
         c2:f2:fe:2c:a3:e6:bf:38:27:a7:45:94:94:a9:cc:57:f4:d4:
         06:86:8d:02:82:da:1a:f0:70:aa:49:14:63:3a:c7:ba:81:32:
         d9:e1:37:77:2b:98:3c:94:d4:1e:b8:0d:f1:21:66:13:a4:f9:
         83:9e:f4:ec:0b:42:73:27:74:f8:22:6d:3c:48:21:96:21:64:
         5d:f1:28:1c:67:1b:c2:86:85:a3:a1:51:5b:10:d4:9c:09:75:
         84:5d:21:a4:81:37:80:c6:82:1c:5d:b2:3e:bd:1b:cd:f5:48:
         61:bb:02:0d:27:13:d6:0b:57:9b:6b:5d:19:f0:03:de:ea:15:
         0c:64:14:84:ea:e0:87:d5:d9:10:60:43:50:2b:6d:0f:33:78:
         27:4f:10:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYu5ian1XRqdnPliiP/B8aCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkN2M1MTI1NWNiMDY1MzU2MmZiODY5OTExZjA1ZDQ1NDE0
ZTYxYzUwHhcNMjMxMTEwMTQwMTI4WhcNMjMxMTExMTQwMTI4WjAzMTEwLwYDVQQD
EyhhZjJjYmUwY2ZjMWQ4YTJlOWE5MWY4NDA4ODk3NGIwOTI0MTAyY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7aycXNgx1GfTEtbjHOAh9CpqUVz
6m4ouwpw5GiFffPeUu/Hc9GGj1kXXmkdfg78RwcOOTHyR4ZYicXKttZiPJ6bz5O6
rq47T5OVmlHBkGN5xvvyrKbsN0H6ACc2QQUTRjb/y4f3lC3neBXwVR+kLhyGGQsK
6uGCmrjBV1ioU38070M9YYLnKg+mVAlilaKGVFHgEozu3UusLFu1IcJfMDtzFLag
w3uhTSbNMvk11t/2kgzO++/WVCdOCkaZeazVGN2rmbUKActZp3IP4EbIHnXt/N4h
CFYpMN53zByRAI4iLZg+tZajYpzYfhCzzbgEmCGurTWbMKClX7ZhGP5lQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8svgz8HYoumpH4QIiXSwkkECzTMB8GA1UdIwQY
MBaAFB18USVcsGU1YvuGmRHwXUVBTmHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFh4UkpWeXdaVFZpLTRhWkVmQmRSVUZPWWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZmMxNTAtYWQzNi00ZmU3LWE2YjAt
ZDYzYjk4Y2UxZGQ2LzEvSFh4UkpWeXdaVFZpLTRhWkVmQmRSVUZPWWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZmMxNTAtYWQzNi00ZmU3LWE2YjAtZDYzYjk4Y2UxZGQ2
LzEvSFh4UkpWeXdaVFZpLTRhWkVmQmRSVUZPWWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlf97UlL
9TlP3B7K3YuTAx0DABdfdEHaeIBjKrrdMsqhvNMr+tux/OYTmF3fsu1KaDXMSBMV
hd5UP/V4JbZvAFaI4FcNq+1QdB7vfRIHxh1S679gq630oUnRDmoYlZL8KOObEoVw
ZDvv3vYkwvL+LKPmvzgnp0WUlKnMV/TUBoaNAoLaGvBwqkkUYzrHuoEy2eE3dyuY
PJTUHrgN8SFmE6T5g5707AtCcyd0+CJtPEghliFkXfEoHGcbwoaFo6FRWxDUnAl1
hF0hpIE3gMaCHF2yPr0bzfVIYbsCDScT1gtXm2tdGfAD3uoVDGQUhOrgh9XZEGBD
UCttDzN4J08QDA==
-----END CERTIFICATE-----