Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/367c11-71ef-4073-a568-baf5af7c262d/1/HLl01FMUw7SGHMASVfW5lsXWKOI.mft
File:                     HLl01FMUw7SGHMASVfW5lsXWKOI.mft (raw, json)
Hash identifier:          cTfId2rvEa2U70laCXegSMR4/ArshnTBju+USjz/QUg=
Subject key identifier:   7D:56:B1:B7:53:EB:2B:7F:17:F8:41:79:26:BB:C3:A3:A9:0A:65:DC
Authority key identifier: 1C:B9:74:D4:53:14:C3:B4:86:1C:C0:12:55:F5:B9:96:C5:D6:28:E2
Certificate issuer:       /CN=1cb974d45314c3b4861cc01255f5b996c5d628e2
Certificate serial:       018CB72B059625B0DE7F1180BD04EA940E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLl01FMUw7SGHMASVfW5lsXWKOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/367c11-71ef-4073-a568-baf5af7c262d/1/HLl01FMUw7SGHMASVfW5lsXWKOI.mft
Manifest number:          1000
Signing time:             Fri 29 Dec 2023 20:01:39 +0000
Manifest this update:     Fri 29 Dec 2023 20:01:39 +0000
Manifest next update:     Sat 30 Dec 2023 20:01:39 +0000
Files and hashes:         1: HLl01FMUw7SGHMASVfW5lsXWKOI.crl (hash: RiSp8aj1c/G6wrROi3Okr+oyLVY34geAXDkKsIOPcd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b7:2b:05:96:25:b0:de:7f:11:80:bd:04:ea:94:0e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb974d45314c3b4861cc01255f5b996c5d628e2
        Validity
            Not Before: Dec 29 20:01:39 2023 GMT
            Not After : Dec 30 20:01:39 2023 GMT
        Subject: CN=7d56b1b753eb2b7f17f8417926bbc3a3a90a65dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:0b:97:b8:24:6e:70:70:89:89:b0:20:a4:
                    cc:6e:f5:a5:2f:24:f7:12:d7:47:e0:bf:c3:56:a4:
                    c9:36:34:bd:60:ec:e4:29:c7:a5:be:92:3b:13:5e:
                    f7:15:9e:78:7b:03:6a:4d:e4:41:27:f5:5b:14:28:
                    dd:0c:4c:12:aa:79:f3:a0:98:c8:54:54:c3:3e:ea:
                    4b:01:b2:3d:84:5f:cf:2d:b7:a0:96:fd:f6:14:c2:
                    11:7c:fa:86:58:08:c4:74:3a:22:11:bc:ce:fb:65:
                    28:2a:c7:74:0b:b5:df:30:fb:42:4b:c6:c6:32:4c:
                    9f:16:39:d6:96:2d:a0:2f:9b:de:86:61:c2:79:fe:
                    c9:51:b9:67:48:59:53:e7:2e:e9:6e:1b:44:3f:e3:
                    a1:f9:68:b7:b0:43:92:e9:d4:65:89:ee:f7:f3:86:
                    59:49:a4:8f:84:fd:91:db:34:d8:82:e7:84:66:46:
                    ce:39:c0:91:f8:07:36:7d:3a:b7:5f:4a:8f:b7:79:
                    54:01:da:7c:24:be:e2:86:df:1d:a8:09:fb:d5:bb:
                    e3:e2:37:66:ab:1c:3f:51:4b:0d:c1:8a:96:23:d2:
                    f6:3e:cb:23:a6:f9:50:97:9a:39:8c:13:39:bc:3d:
                    a6:a3:32:bd:23:d2:8d:89:36:16:3c:4b:02:ca:da:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:B1:B7:53:EB:2B:7F:17:F8:41:79:26:BB:C3:A3:A9:0A:65:DC
            X509v3 Authority Key Identifier:
                keyid:1C:B9:74:D4:53:14:C3:B4:86:1C:C0:12:55:F5:B9:96:C5:D6:28:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLl01FMUw7SGHMASVfW5lsXWKOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/367c11-71ef-4073-a568-baf5af7c262d/1/HLl01FMUw7SGHMASVfW5lsXWKOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/367c11-71ef-4073-a568-baf5af7c262d/1/HLl01FMUw7SGHMASVfW5lsXWKOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9f:9f:86:8c:4b:49:90:ca:3f:fc:aa:64:79:ed:0d:3a:d9:
         7e:e3:fd:7b:4c:fb:aa:20:3e:ab:cc:0f:f9:42:d8:22:c0:a3:
         18:af:2d:74:c5:56:7a:1c:f2:ae:dc:aa:6d:8b:2b:17:b5:17:
         79:32:45:ce:cc:60:dc:d0:0d:29:ea:28:a3:00:30:6f:b3:12:
         e3:ea:70:c3:37:c9:76:26:15:33:d5:77:8c:06:b7:08:b2:eb:
         9f:6a:08:25:a4:de:ad:7e:77:0b:9d:da:67:ac:6d:e4:3f:25:
         ef:12:5c:72:c4:8a:f8:69:0a:2f:7b:1e:14:e0:b2:1c:e6:64:
         ce:de:e3:89:34:dd:6b:ca:ca:9c:8a:dc:0f:dd:b0:5a:44:4c:
         28:7f:c9:6a:93:08:42:ce:d9:13:aa:0a:00:71:f0:00:c3:b8:
         82:3b:17:00:75:55:db:4b:29:fd:32:09:cd:4a:1d:3a:ff:1e:
         3e:fa:ff:a9:ef:64:02:ef:47:fa:a7:b7:ab:c5:c1:57:b0:c9:
         35:45:70:ea:ef:3c:15:76:be:c4:7d:54:51:cc:85:73:9a:53:
         fa:5b:cd:03:f3:b6:4c:a6:0d:80:bd:d4:10:2b:4d:fe:c5:76:
         c2:a6:9c:0e:ca:19:de:f5:dd:8c:61:b3:22:cc:c2:69:82:43:
         13:90:a3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYy3KwWWJbDefxGAvQTqlA5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYjk3NGQ0NTMxNGMzYjQ4NjFjYzAxMjU1ZjViOTk2YzVk
NjI4ZTIwHhcNMjMxMjI5MjAwMTM5WhcNMjMxMjMwMjAwMTM5WjAzMTEwLwYDVQQD
Eyg3ZDU2YjFiNzUzZWIyYjdmMTdmODQxNzkyNmJiYzNhM2E5MGE2NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujsLl7gkbnBwiYmwIKTMbvWlLyT3
EtdH4L/DVqTJNjS9YOzkKcelvpI7E173FZ54ewNqTeRBJ/VbFCjdDEwSqnnzoJjI
VFTDPupLAbI9hF/PLbeglv32FMIRfPqGWAjEdDoiEbzO+2UoKsd0C7XfMPtCS8bG
MkyfFjnWli2gL5vehmHCef7JUblnSFlT5y7pbhtEP+Oh+Wi3sEOS6dRlie7384ZZ
SaSPhP2R2zTYgueEZkbOOcCR+Ac2fTq3X0qPt3lUAdp8JL7iht8dqAn71bvj4jdm
qxw/UUsNwYqWI9L2PssjpvlQl5o5jBM5vD2mozK9I9KNiTYWPEsCytpEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1WsbdT6yt/F/hBeSa7w6OpCmXcMB8GA1UdIwQY
MBaAFBy5dNRTFMO0hhzAElX1uZbF1ijiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSExsMDFGTVV3N1NHSE1BU1ZmVzVsc1hXS09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNjdjMTEtNzFlZi00MDczLWE1Njgt
YmFmNWFmN2MyNjJkLzEvSExsMDFGTVV3N1NHSE1BU1ZmVzVsc1hXS09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNjdjMTEtNzFlZi00MDczLWE1NjgtYmFmNWFmN2MyNjJk
LzEvSExsMDFGTVV3N1NHSE1BU1ZmVzVsc1hXS09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ+fhoxL
SZDKP/yqZHntDTrZfuP9e0z7qiA+q8wP+ULYIsCjGK8tdMVWehzyrtyqbYsrF7UX
eTJFzsxg3NANKeooowAwb7MS4+pwwzfJdiYVM9V3jAa3CLLrn2oIJaTerX53C53a
Z6xt5D8l7xJccsSK+GkKL3seFOCyHOZkzt7jiTTda8rKnIrcD92wWkRMKH/JapMI
Qs7ZE6oKAHHwAMO4gjsXAHVV20sp/TIJzUodOv8ePvr/qe9kAu9H+qe3q8XBV7DJ
NUVw6u88FXa+xH1UUcyFc5pT+lvNA/O2TKYNgL3UECtN/sV2wqacDsoZ3vXdjGGz
IszCaYJDE5Cj6Q==
-----END CERTIFICATE-----