Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d320cb-5519-4c82-af25-3377009e773a/1/n_BitvTfxVNRd07-sSkLnC3YqMY.mft
File:                     n_BitvTfxVNRd07-sSkLnC3YqMY.mft (raw, json)
Hash identifier:          hLLbTpdLvlnUGwknzzaOj6/LlpEirMc4q+i7pCvpDSI=
Subject key identifier:   AC:85:36:75:E5:85:EA:CD:E7:15:2A:09:E6:2F:A4:64:7C:28:74:FC
Authority key identifier: 9F:F0:62:B6:F4:DF:C5:53:51:77:4E:FE:B1:29:0B:9C:2D:D8:A8:C6
Certificate issuer:       /CN=9ff062b6f4dfc55351774efeb1290b9c2dd8a8c6
Certificate serial:       018B5B55C40B170C9E89812E46457E1A3974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_BitvTfxVNRd07-sSkLnC3YqMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d320cb-5519-4c82-af25-3377009e773a/1/n_BitvTfxVNRd07-sSkLnC3YqMY.mft
Manifest number:          02B7
Signing time:             Mon 23 Oct 2023 07:00:29 +0000
Manifest this update:     Mon 23 Oct 2023 07:00:29 +0000
Manifest next update:     Tue 24 Oct 2023 07:00:29 +0000
Files and hashes:         1: VN_pzyTSbeQwhN8T9cO5GHevKf8.roa (hash: cASY7YAEeRddAMmC3cpuonZlB/+mnVi7agnE9kD1PpU=)
                          2: cPobfi55U8sOObz3bxVn9c9PsQ0.roa (hash: ttBUw17AfvwhVlZzflZq6RJvNJMzbEAe8nINJXsXHiI=)
                          3: n_BitvTfxVNRd07-sSkLnC3YqMY.crl (hash: y2+UMvQOycPltIV+vMvvbqE0lo9f1SOKr/thqU0WvNk=)
                          4: p57t5hAe01Hg1bR555_x0z8Y_Dc.roa (hash: xxiXbcc+tONft0BdwhGQpRqbQIJ5H7DqXYj2y8qMrwU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5b:55:c4:0b:17:0c:9e:89:81:2e:46:45:7e:1a:39:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff062b6f4dfc55351774efeb1290b9c2dd8a8c6
        Validity
            Not Before: Oct 23 07:00:29 2023 GMT
            Not After : Oct 24 07:00:29 2023 GMT
        Subject: CN=ac853675e585eacde7152a09e62fa4647c2874fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:d1:6e:c0:86:bf:83:f1:d1:10:78:60:64:
                    37:ee:a4:ed:90:aa:98:82:30:3d:57:a4:5d:12:34:
                    f7:f2:3a:de:e1:cb:37:9e:52:5b:cf:fd:67:b2:d8:
                    73:20:06:ff:a3:e0:6f:99:9c:d6:e1:d7:bb:61:b3:
                    eb:b8:a0:e2:9d:f4:65:b5:7a:5d:d0:b3:b0:98:86:
                    be:e0:df:de:87:df:31:13:b9:02:87:97:50:df:b0:
                    c3:60:01:40:85:f7:58:1d:73:7d:13:8d:18:43:2c:
                    30:45:c6:e3:e8:5d:3e:64:98:37:e9:6f:e4:b5:e2:
                    d0:16:9e:d8:d2:1e:72:3a:2a:e0:3b:78:99:9a:9e:
                    ad:6e:d2:89:5e:4a:e9:df:ca:8b:29:2c:9f:b3:f5:
                    fc:3f:68:c9:92:f5:a2:d8:0a:f0:f1:a3:43:79:29:
                    20:2b:cf:43:18:58:03:19:d4:e7:d1:d3:9d:fc:95:
                    9e:20:66:21:33:d6:85:a0:b7:14:f6:0b:38:7f:63:
                    9b:98:8f:94:3a:d7:22:e0:30:17:2f:af:6e:f6:b8:
                    2f:08:95:b4:f9:24:91:b4:76:cd:5a:87:8b:c8:29:
                    6c:55:69:b7:fa:dd:80:d5:2a:bf:68:9a:f1:63:5d:
                    45:c8:88:2a:03:f0:13:af:42:ed:d2:ae:60:0b:72:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:36:75:E5:85:EA:CD:E7:15:2A:09:E6:2F:A4:64:7C:28:74:FC
            X509v3 Authority Key Identifier:
                keyid:9F:F0:62:B6:F4:DF:C5:53:51:77:4E:FE:B1:29:0B:9C:2D:D8:A8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_BitvTfxVNRd07-sSkLnC3YqMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d320cb-5519-4c82-af25-3377009e773a/1/n_BitvTfxVNRd07-sSkLnC3YqMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d320cb-5519-4c82-af25-3377009e773a/1/n_BitvTfxVNRd07-sSkLnC3YqMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:23:15:ab:08:08:8d:42:ea:0a:8e:c0:8b:7b:e1:6a:f4:
         54:9b:92:68:1f:46:31:38:9b:69:e6:e7:f9:f6:ba:cf:ab:9b:
         1f:e3:ea:56:1c:3a:a4:c3:de:79:a5:f7:51:fe:cf:a2:f1:99:
         fa:a1:d8:03:96:76:2c:39:a8:75:5b:bc:05:81:01:b0:f6:3b:
         33:78:4c:c8:7b:1b:cc:95:7a:7f:53:25:24:aa:3c:fd:05:9f:
         ac:d9:a8:cc:37:00:5a:63:dd:e0:da:8e:0c:ee:17:e7:3b:c0:
         63:74:0c:95:ee:17:8f:09:79:d7:e3:d7:1c:07:28:29:a9:ec:
         c3:2f:a6:fe:5b:cd:0d:60:b5:d3:2f:eb:9a:3b:2f:5c:37:71:
         7d:60:3b:4e:26:7b:d2:e9:b5:bb:ea:c0:6b:fb:b2:99:45:e9:
         44:f2:16:a5:bf:94:03:ca:ea:2e:5b:9a:13:ed:7b:84:a4:8a:
         a9:55:6a:6e:ac:f1:ec:82:31:91:dc:8f:7c:e1:6f:1f:92:2a:
         be:0d:bb:2f:6e:1f:68:ae:95:cd:43:fe:ea:7d:ed:ee:73:91:
         08:0b:17:37:89:a7:75:ac:7e:8c:18:e8:37:db:3a:60:ee:55:
         11:90:a3:89:57:b6:b6:3d:8c:63:97:14:70:26:b6:2b:54:db:
         af:22:47:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYtbVcQLFwyeiYEuRkV+Gjl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjA2MmI2ZjRkZmM1NTM1MTc3NGVmZWIxMjkwYjljMmRk
OGE4YzYwHhcNMjMxMDIzMDcwMDI5WhcNMjMxMDI0MDcwMDI5WjAzMTEwLwYDVQQD
EyhhYzg1MzY3NWU1ODVlYWNkZTcxNTJhMDllNjJmYTQ2NDdjMjg3NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/RbsCGv4Px0RB4YGQ37qTtkKqY
gjA9V6RdEjT38jre4cs3nlJbz/1nsthzIAb/o+BvmZzW4de7YbPruKDinfRltXpd
0LOwmIa+4N/eh98xE7kCh5dQ37DDYAFAhfdYHXN9E40YQywwRcbj6F0+ZJg36W/k
teLQFp7Y0h5yOirgO3iZmp6tbtKJXkrp38qLKSyfs/X8P2jJkvWi2Arw8aNDeSkg
K89DGFgDGdTn0dOd/JWeIGYhM9aFoLcU9gs4f2ObmI+UOtci4DAXL69u9rgvCJW0
+SSRtHbNWoeLyClsVWm3+t2A1Sq/aJrxY11FyIgqA/ATr0Lt0q5gC3IGMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyFNnXlherN5xUqCeYvpGR8KHT8MB8GA1UdIwQY
MBaAFJ/wYrb038VTUXdO/rEpC5wt2KjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9CaXR2VGZ4Vk5SZDA3LXNTa0xuQzNZcU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kMzIwY2ItNTUxOS00YzgyLWFmMjUt
MzM3NzAwOWU3NzNhLzEvbl9CaXR2VGZ4Vk5SZDA3LXNTa0xuQzNZcU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kMzIwY2ItNTUxOS00YzgyLWFmMjUtMzM3NzAwOWU3NzNh
LzEvbl9CaXR2VGZ4Vk5SZDA3LXNTa0xuQzNZcU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW0jFasI
CI1C6gqOwIt74Wr0VJuSaB9GMTibaebn+fa6z6ubH+PqVhw6pMPeeaX3Uf7PovGZ
+qHYA5Z2LDmodVu8BYEBsPY7M3hMyHsbzJV6f1MlJKo8/QWfrNmozDcAWmPd4NqO
DO4X5zvAY3QMle4Xjwl51+PXHAcoKanswy+m/lvNDWC10y/rmjsvXDdxfWA7TiZ7
0um1u+rAa/uymUXpRPIWpb+UA8rqLluaE+17hKSKqVVqbqzx7IIxkdyPfOFvH5Iq
vg27L24faK6VzUP+6n3t7nORCAsXN4mndax+jBjoN9s6YO5VEZCjiVe2tj2MY5cU
cCa2K1TbryJH5g==
-----END CERTIFICATE-----