Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/1-HTD8iA53R9DW2B53zFyz3nHVBU.mft
File:                     1-HTD8iA53R9DW2B53zFyz3nHVBU.mft (raw, json)
Hash identifier:          HD59V4N93hCC0BClUOKw9OT+fjzp/M1AF4epElS07mE=
Subject key identifier:   26:C2:F4:77:18:80:69:A8:61:C6:AD:6D:B5:C2:3D:08:0B:92:14:6C
Authority key identifier: F8:74:C3:F2:20:39:DD:1F:43:5B:60:79:DF:31:72:CF:79:C7:54:15
Certificate issuer:       /CN=f874c3f22039dd1f435b6079df3172cf79c75415
Certificate serial:       9939CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HTD8iA53R9DW2B53zFyz3nHVBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/1-HTD8iA53R9DW2B53zFyz3nHVBU.mft
Manifest number:          C7
Signing time:             Mon 21 Feb 2022 06:06:41 +0000
Manifest this update:     Mon 21 Feb 2022 06:06:41 +0000
Manifest next update:     Tue 22 Feb 2022 06:06:41 +0000
Files and hashes:         1: 1-HTD8iA53R9DW2B53zFyz3nHVBU.crl (hash: Xeif3pCWeLwmnmIcOdUB44nmN1aQsj4wUEDEnNLjpb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10041806 (0x9939ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f874c3f22039dd1f435b6079df3172cf79c75415
        Validity
            Not Before: Feb 21 06:06:41 2022 GMT
            Not After : Feb 22 06:06:41 2022 GMT
        Subject: CN=26c2f477188069a861c6ad6db5c23d080b92146c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:05:97:16:09:8b:1f:03:6a:d3:89:31:01:
                    18:f1:9e:8b:f4:82:11:58:fd:81:34:b1:65:3c:b2:
                    e3:5e:f4:77:97:6b:d6:e5:88:2f:d2:d0:4f:af:15:
                    82:d3:69:86:c9:cf:d9:2c:75:7b:85:c5:6b:9b:95:
                    28:09:f1:67:bd:6d:00:c2:73:7e:05:de:52:d3:2f:
                    0e:b4:89:28:d9:da:ec:ea:ba:8b:78:5b:96:5b:fe:
                    b3:10:55:b3:b0:ce:b6:3f:a1:61:af:d3:bd:b0:d8:
                    00:47:24:a2:fb:cd:04:38:41:b4:5e:46:a8:38:ab:
                    c9:b7:5c:5a:bd:5a:ac:e4:4d:0f:03:29:b7:44:67:
                    f7:7d:28:a6:28:f4:02:ad:7c:c6:b0:a0:5a:fe:f3:
                    00:f2:03:1c:7c:8e:cd:63:60:8b:cd:2c:aa:bc:0f:
                    82:5d:36:e4:28:34:2b:a1:09:c9:77:3a:a9:26:46:
                    9c:73:9a:6e:91:55:5e:88:26:66:80:fc:44:5c:90:
                    6c:bf:65:3c:3a:64:da:2b:97:62:8a:fd:27:16:e9:
                    14:5e:bc:51:60:77:f5:47:94:84:51:89:0f:4e:80:
                    79:10:14:da:09:03:0c:28:5b:5e:4a:4d:09:ba:54:
                    a3:a1:d0:3c:bc:52:eb:4b:c6:f6:7b:f7:d2:df:c6:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C2:F4:77:18:80:69:A8:61:C6:AD:6D:B5:C2:3D:08:0B:92:14:6C
            X509v3 Authority Key Identifier:
                keyid:F8:74:C3:F2:20:39:DD:1F:43:5B:60:79:DF:31:72:CF:79:C7:54:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HTD8iA53R9DW2B53zFyz3nHVBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/1-HTD8iA53R9DW2B53zFyz3nHVBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/1-HTD8iA53R9DW2B53zFyz3nHVBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:c3:fa:cf:d5:65:b5:73:a8:cc:c7:08:0c:fe:41:1f:6d:
         7d:1c:04:90:0f:15:3c:fa:d4:a4:80:51:0f:ea:bb:5b:25:55:
         17:be:3b:25:86:2a:62:dc:9d:eb:a5:7a:fc:1f:9d:09:d5:68:
         01:4f:d4:49:00:2d:fc:e3:8e:e3:d2:6a:87:5b:ab:08:08:01:
         14:b6:17:70:e4:a4:83:91:12:a7:48:69:14:fc:5b:f1:c0:af:
         21:9f:31:29:94:86:58:f6:8c:c8:86:b7:54:35:f4:70:4c:ba:
         e8:50:ba:fe:b2:dd:c2:a0:c7:cb:17:63:1f:8f:81:71:4a:77:
         04:a3:5e:8e:47:eb:89:d2:70:26:cb:98:24:45:d5:3a:8c:ed:
         03:1b:fd:4c:2a:48:e9:9c:c8:55:f5:d6:11:22:8c:2c:a9:52:
         e8:e2:ee:ba:77:da:19:eb:d7:d9:e0:09:3b:17:bf:c3:8d:76:
         f1:68:84:57:60:32:d8:0a:3c:cc:bd:1e:13:8b:72:18:66:7b:
         51:f0:f2:e2:27:dd:cd:01:d4:fc:1e:26:32:0a:60:c5:05:da:
         a4:de:0c:74:e6:4c:34:4e:18:f5:2c:24:e0:04:df:93:fe:4c:
         56:8d:d6:47:b2:d1:e7:23:a8:e1:25:25:3f:da:79:90:1a:47:
         a9:0a:2f:c1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEAJk5zjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ODc0YzNmMjIwMzlkZDFmNDM1YjYwNzlkZjMxNzJjZjc5Yzc1NDE1MB4XDTIyMDIy
MTA2MDY0MVoXDTIyMDIyMjA2MDY0MVowMzExMC8GA1UEAxMoMjZjMmY0NzcxODgw
NjlhODYxYzZhZDZkYjVjMjNkMDgwYjkyMTQ2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlVBZcWCYsfA2rTiTEBGPGei/SCEVj9gTSxZTyy4170d5dr
1uWIL9LQT68VgtNphsnP2Sx1e4XFa5uVKAnxZ71tAMJzfgXeUtMvDrSJKNna7Oq6
i3hbllv+sxBVs7DOtj+hYa/TvbDYAEckovvNBDhBtF5GqDirybdcWr1arORNDwMp
t0Rn930opij0Aq18xrCgWv7zAPIDHHyOzWNgi80sqrwPgl025Cg0K6EJyXc6qSZG
nHOabpFVXogmZoD8RFyQbL9lPDpk2iuXYor9JxbpFF68UWB39UeUhFGJD06AeRAU
2gkDDChbXkpNCbpUo6HQPLxS60vG9nv30t/G40MCAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBQmwvR3GIBpqGHGrW21wj0IC5IUbDAfBgNVHSMEGDAWgBT4dMPyIDndH0Nb
YHnfMXLPecdUFTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtSFREOGlBNTNSOURXMkI1M3pGeXozbkhWQlUuY2VyMIGOBggrBgEFBQcBCwSB
gTB/MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzZjLzNhODgyOS1hZjA3LTQ2NDgtOTIxOC1hYjE0NWI1OTBjMmEv
MS8xLUhURDhpQTUzUjlEVzJCNTN6Rnl6M25IVkJVLm1mdDCBggYDVR0fBHsweTB3
oHWgc4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82
Yy8zYTg4MjktYWYwNy00NjQ4LTkyMTgtYWIxNDViNTkwYzJhLzEvMS1IVEQ4aUE1
M1I5RFcyQjUzekZ5ejNuSFZCVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFafw/rP1WW1c6jMxwgM/kEf
bX0cBJAPFTz61KSAUQ/qu1slVRe+OyWGKmLcneulevwfnQnVaAFP1EkALfzjjuPS
aodbqwgIARS2F3DkpIOREqdIaRT8W/HAryGfMSmUhlj2jMiGt1Q19HBMuuhQuv6y
3cKgx8sXYx+PgXFKdwSjXo5H64nScCbLmCRF1TqM7QMb/UwqSOmcyFX11hEijCyp
Uuji7rp32hnr19ngCTsXv8ONdvFohFdgMtgKPMy9HhOLchhme1Hw8uIn3c0B1Pwe
JjIKYMUF2qTeDHTmTDROGPUsJOAE35P+TFaN1key0ecjqOElJT/aeZAaR6kKL8E=
-----END CERTIFICATE-----