Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.mft
File:                     HxBvRmxK-judw7__Q8r3C4ZYxOI.mft (raw, json)
Hash identifier:          1l9swxcZU9FQfo6gKWhfrpuoG/C12bQGD6RlcWfimTE=
Subject key identifier:   24:F9:B5:58:B6:B3:14:24:1C:7B:2F:B5:79:B0:B8:CF:35:D4:DB:D8
Authority key identifier: 1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2
Certificate issuer:       /CN=1f106f466c4afa3b9dc3bfff43caf70b8658c4e2
Certificate serial:       018ABB4364787BBBBBA1DFF0CC92FA39EA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxBvRmxK-judw7__Q8r3C4ZYxOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.mft
Manifest number:          0B25
Signing time:             Fri 22 Sep 2023 05:01:10 +0000
Manifest this update:     Fri 22 Sep 2023 05:01:10 +0000
Manifest next update:     Sat 23 Sep 2023 05:01:10 +0000
Files and hashes:         1: EM8laOYI81PIYQBVYGJeglPhyKU.roa (hash: 3+qesGGlxOVwj3hnqCr9W/pFRXCcql9KRlzP4tcU3G0=)
                          2: HxBvRmxK-judw7__Q8r3C4ZYxOI.crl (hash: F7w3frVulG/brKpVb0Zy/vgFb+LkjjgKS976UiSJu9E=)
                          3: KttSrfdufL6GbE8NXmMfRS6JzbM.roa (hash: tLAYsO5xSYCxfu0gnpbg8DInYx1n1jCKxtjUjOdSh7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bb:43:64:78:7b:bb:bb:a1:df:f0:cc:92:fa:39:ea:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f106f466c4afa3b9dc3bfff43caf70b8658c4e2
        Validity
            Not Before: Sep 22 05:01:10 2023 GMT
            Not After : Sep 23 05:01:10 2023 GMT
        Subject: CN=24f9b558b6b314241c7b2fb579b0b8cf35d4dbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:18:51:3a:98:d2:01:56:97:30:6f:14:ec:
                    5c:fc:52:46:74:ab:91:87:58:4a:51:67:bb:25:8a:
                    ea:8f:7e:d7:7d:1f:d3:29:69:b2:13:99:2a:3b:0e:
                    af:6a:0e:f3:55:c9:ad:c1:e3:4b:44:ba:4b:89:f9:
                    37:15:fc:0e:df:11:92:80:75:44:a2:ce:1d:48:a5:
                    19:12:8a:e6:e1:74:b5:78:08:43:51:1b:5d:c2:37:
                    c8:91:67:f9:8d:31:b6:3e:c7:8c:ec:37:18:a7:b1:
                    30:4f:a7:d0:fb:fd:3c:90:21:d1:ed:8a:90:09:c5:
                    f4:10:df:d9:59:c3:86:72:05:09:6e:ba:7c:1c:6b:
                    d3:a5:f2:e8:e9:08:3b:4c:3f:3f:bf:fe:99:f6:ca:
                    95:15:15:ad:7e:c5:b4:28:62:fe:22:ea:e0:cb:96:
                    1a:53:0e:58:20:57:e4:a9:ba:a6:91:7c:fe:89:98:
                    30:d8:81:22:0e:af:4f:d3:25:4b:f4:c5:a9:85:36:
                    c0:4a:2b:6c:06:00:67:53:ca:10:f4:16:24:20:39:
                    2c:0b:58:1f:c8:ce:a2:09:88:ce:ee:69:d9:ac:28:
                    5a:fd:b5:8f:b1:bd:93:36:8e:30:38:63:3c:70:79:
                    79:97:80:ce:6b:03:6f:7e:b6:37:8a:42:a2:59:45:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:B5:58:B6:B3:14:24:1C:7B:2F:B5:79:B0:B8:CF:35:D4:DB:D8
            X509v3 Authority Key Identifier:
                keyid:1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxBvRmxK-judw7__Q8r3C4ZYxOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bc:ac:57:88:22:5f:0c:95:5e:2b:34:88:83:cd:ee:65:af:
         c4:a8:a6:00:80:d2:12:a7:38:1c:04:b3:bf:92:94:7b:eb:6c:
         0d:4d:2b:7a:de:5a:d4:77:77:e3:68:de:ed:5b:b9:39:86:66:
         85:38:31:11:8a:9f:43:e8:39:b3:ef:09:a3:e4:a3:93:81:44:
         41:74:8b:fc:54:ce:fc:87:bc:8e:fd:4e:48:0e:23:10:87:62:
         8e:9d:58:6a:3d:34:c3:95:26:bd:e2:a1:d7:24:8c:e6:81:f1:
         7b:db:dd:09:bf:fd:ea:9f:9d:74:61:b0:09:a6:af:8e:55:ad:
         1f:c0:55:1f:0d:b0:1e:a3:71:06:83:70:0c:5e:49:c7:4e:52:
         a0:55:ae:08:36:47:76:fc:32:1c:25:6c:80:83:8b:ca:96:aa:
         ec:a0:eb:aa:3e:ae:bc:75:27:e9:59:2b:6e:5d:94:28:bd:90:
         7d:ab:35:ad:a5:61:9b:6e:25:e2:25:c5:ad:17:4c:7b:fd:5b:
         cf:57:ec:9b:2c:70:4b:41:6f:f6:0b:5b:5e:ed:56:34:0e:c3:
         67:04:a0:d9:1a:bc:44:68:3f:4e:77:25:78:bf:2d:a5:6b:46:
         04:58:92:6b:96:5a:ec:93:9d:8f:5e:93:90:6f:56:3c:f2:96:
         2f:ef:2b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYq7Q2R4e7u7od/wzJL6OeqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTA2ZjQ2NmM0YWZhM2I5ZGMzYmZmZjQzY2FmNzBiODY1
OGM0ZTIwHhcNMjMwOTIyMDUwMTEwWhcNMjMwOTIzMDUwMTEwWjAzMTEwLwYDVQQD
EygyNGY5YjU1OGI2YjMxNDI0MWM3YjJmYjU3OWIwYjhjZjM1ZDRkYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD0YUTqY0gFWlzBvFOxc/FJGdKuR
h1hKUWe7JYrqj37XfR/TKWmyE5kqOw6vag7zVcmtweNLRLpLifk3FfwO3xGSgHVE
os4dSKUZEorm4XS1eAhDURtdwjfIkWf5jTG2PseM7DcYp7EwT6fQ+/08kCHR7YqQ
CcX0EN/ZWcOGcgUJbrp8HGvTpfLo6Qg7TD8/v/6Z9sqVFRWtfsW0KGL+Iurgy5Ya
Uw5YIFfkqbqmkXz+iZgw2IEiDq9P0yVL9MWphTbASitsBgBnU8oQ9BYkIDksC1gf
yM6iCYjO7mnZrCha/bWPsb2TNo4wOGM8cHl5l4DOawNvfrY3ikKiWUVl5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT5tVi2sxQkHHsvtXmwuM811NvYMB8GA1UdIwQY
MBaAFB8Qb0ZsSvo7ncO//0PK9wuGWMTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhCdlJteEstanVkdzdfX1E4cjNDNFpZeE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jYmQ4ZTctMzEyYy00YTQ4LTgzMGQt
YWE3NTViMTJkZTgwLzEvSHhCdlJteEstanVkdzdfX1E4cjNDNFpZeE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jYmQ4ZTctMzEyYy00YTQ4LTgzMGQtYWE3NTViMTJkZTgw
LzEvSHhCdlJteEstanVkdzdfX1E4cjNDNFpZeE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprysV4gi
XwyVXis0iIPN7mWvxKimAIDSEqc4HASzv5KUe+tsDU0ret5a1Hd342je7Vu5OYZm
hTgxEYqfQ+g5s+8Jo+Sjk4FEQXSL/FTO/Ie8jv1OSA4jEIdijp1Yaj00w5UmveKh
1ySM5oHxe9vdCb/96p+ddGGwCaavjlWtH8BVHw2wHqNxBoNwDF5Jx05SoFWuCDZH
dvwyHCVsgIOLypaq7KDrqj6uvHUn6Vkrbl2UKL2Qfas1raVhm24l4iXFrRdMe/1b
z1fsmyxwS0Fv9gtbXu1WNA7DZwSg2Rq8RGg/TncleL8tpWtGBFiSa5Za7JOdj16T
kG9WPPKWL+8r6A==
-----END CERTIFICATE-----