Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2ed71a-8e03-4659-8622-219a3ba02d39/1/HzBlcBlAfn6bu9nAYaqEBIMTIEY.mft
File:                     HzBlcBlAfn6bu9nAYaqEBIMTIEY.mft (raw, json)
Hash identifier:          kw9rEiTPgqGfQf/xYMT0fHfkaD+MyPmpnOBWi0K1HGw=
Subject key identifier:   30:C3:08:79:31:24:BA:AF:41:B7:DF:0F:34:EA:98:F6:43:8E:9F:81
Authority key identifier: 1F:30:65:70:19:40:7E:7E:9B:BB:D9:C0:61:AA:84:04:83:13:20:46
Certificate issuer:       /CN=1f30657019407e7e9bbbd9c061aa840483132046
Certificate serial:       0188E0EC427FE893FDAD43A14391590ADE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzBlcBlAfn6bu9nAYaqEBIMTIEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/2ed71a-8e03-4659-8622-219a3ba02d39/1/HzBlcBlAfn6bu9nAYaqEBIMTIEY.mft
Manifest number:          0DBC
Signing time:             Thu 22 Jun 2023 02:25:59 +0000
Manifest this update:     Thu 22 Jun 2023 02:25:59 +0000
Manifest next update:     Fri 23 Jun 2023 02:25:59 +0000
Files and hashes:         1: HzBlcBlAfn6bu9nAYaqEBIMTIEY.crl (hash: 2lAXH6ilzmeWrqy8h9/zEYRisV0iMPr2fyZkKce7LHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e0:ec:42:7f:e8:93:fd:ad:43:a1:43:91:59:0a:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f30657019407e7e9bbbd9c061aa840483132046
        Validity
            Not Before: Jun 22 02:25:59 2023 GMT
            Not After : Jun 23 02:25:59 2023 GMT
        Subject: CN=30c308793124baaf41b7df0f34ea98f6438e9f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:24:ea:e9:17:30:30:ba:8a:f4:13:51:cb:
                    a4:24:24:c0:88:41:1e:10:ba:e0:c1:53:94:3b:cf:
                    97:1f:b7:08:12:02:61:c8:36:c6:e7:23:6f:df:ff:
                    e8:b9:1f:50:d5:4c:04:f1:62:e0:e7:f7:57:10:7e:
                    77:e1:ce:dd:bd:92:02:12:8e:fb:4f:4d:e3:1d:2c:
                    6b:1c:54:d7:00:f3:32:be:5f:c3:c3:ea:48:c4:4d:
                    a8:a7:ba:46:2b:30:80:a1:c7:83:80:e9:3b:b4:45:
                    37:18:58:37:71:b8:ce:b5:14:b8:51:60:aa:f4:87:
                    89:96:51:c2:e9:14:d6:27:40:eb:ef:93:69:94:9b:
                    2e:bc:6b:dd:36:87:d1:4d:48:71:a1:6e:66:c4:d2:
                    a4:da:9b:4d:04:bb:ac:18:25:31:30:b0:36:1a:d0:
                    7a:2c:0a:12:88:64:3a:72:d9:5f:64:65:e7:58:01:
                    51:ea:b4:eb:b0:77:92:e1:62:18:cc:38:b6:7e:c4:
                    67:19:ea:ab:9b:26:28:67:b9:61:d3:69:53:52:a4:
                    6c:ab:20:3f:ba:c0:03:39:7e:ee:7a:a9:22:23:6e:
                    da:54:3f:17:f2:7e:23:b0:9e:ae:87:d1:84:e4:2c:
                    6c:24:fe:83:62:da:01:8b:c3:70:e6:60:c1:77:f5:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:08:79:31:24:BA:AF:41:B7:DF:0F:34:EA:98:F6:43:8E:9F:81
            X509v3 Authority Key Identifier:
                keyid:1F:30:65:70:19:40:7E:7E:9B:BB:D9:C0:61:AA:84:04:83:13:20:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzBlcBlAfn6bu9nAYaqEBIMTIEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2ed71a-8e03-4659-8622-219a3ba02d39/1/HzBlcBlAfn6bu9nAYaqEBIMTIEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2ed71a-8e03-4659-8622-219a3ba02d39/1/HzBlcBlAfn6bu9nAYaqEBIMTIEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:91:b8:10:67:00:42:4d:fb:4d:ad:3a:5a:f7:30:53:f3:fd:
         80:26:16:ff:bc:79:8b:c9:df:0d:20:98:5d:1d:24:47:a1:23:
         df:73:1a:44:7b:df:02:3b:f0:46:84:d8:9f:c9:59:58:07:70:
         4c:25:ce:0d:9e:ef:bd:b3:b4:75:91:3f:c0:bc:c5:cf:4b:db:
         b7:e1:01:e2:b5:36:12:af:40:20:92:2c:ae:aa:c1:4c:e2:01:
         2e:7d:eb:fd:13:1f:89:4c:c8:2f:cf:0c:37:d8:c6:14:75:39:
         3b:a9:d7:3f:59:ba:41:d5:9f:d6:66:07:5e:11:92:bf:5e:e8:
         ea:2b:16:ea:5b:35:b5:54:fa:35:c2:5f:2b:0c:39:9c:43:48:
         bc:31:ad:87:bd:8a:e0:3d:e9:6c:70:63:65:15:a3:d4:ab:0c:
         e3:e0:2e:95:49:98:19:0b:7a:07:7d:b0:6e:6f:8d:70:ca:5b:
         cb:7b:30:39:9b:0d:ac:74:23:03:66:bf:3a:98:7d:b2:ad:46:
         2d:02:ab:2d:0b:c8:16:bb:5a:53:d9:c1:02:85:2b:f0:7c:3b:
         9e:9b:92:a7:ab:45:d2:c0:ac:20:31:c8:91:0b:b2:19:ad:0c:
         5c:0c:95:be:69:69:5c:51:5b:b7:4e:7f:e7:57:65:9d:d3:1e:
         f8:91:d8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYjg7EJ/6JP9rUOhQ5FZCt4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMzA2NTcwMTk0MDdlN2U5YmJiZDljMDYxYWE4NDA0ODMx
MzIwNDYwHhcNMjMwNjIyMDIyNTU5WhcNMjMwNjIzMDIyNTU5WjAzMTEwLwYDVQQD
EygzMGMzMDg3OTMxMjRiYWFmNDFiN2RmMGYzNGVhOThmNjQzOGU5ZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy8k6ukXMDC6ivQTUcukJCTAiEEe
ELrgwVOUO8+XH7cIEgJhyDbG5yNv3//ouR9Q1UwE8WLg5/dXEH534c7dvZICEo77
T03jHSxrHFTXAPMyvl/Dw+pIxE2op7pGKzCAoceDgOk7tEU3GFg3cbjOtRS4UWCq
9IeJllHC6RTWJ0Dr75NplJsuvGvdNofRTUhxoW5mxNKk2ptNBLusGCUxMLA2GtB6
LAoSiGQ6ctlfZGXnWAFR6rTrsHeS4WIYzDi2fsRnGeqrmyYoZ7lh02lTUqRsqyA/
usADOX7ueqkiI27aVD8X8n4jsJ6uh9GE5CxsJP6DYtoBi8Nw5mDBd/WcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDDCHkxJLqvQbffDzTqmPZDjp+BMB8GA1UdIwQY
MBaAFB8wZXAZQH5+m7vZwGGqhASDEyBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHpCbGNCbEFmbjZidTluQVlhcUVCSU1USUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yZWQ3MWEtOGUwMy00NjU5LTg2MjIt
MjE5YTNiYTAyZDM5LzEvSHpCbGNCbEFmbjZidTluQVlhcUVCSU1USUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yZWQ3MWEtOGUwMy00NjU5LTg2MjItMjE5YTNiYTAyZDM5
LzEvSHpCbGNCbEFmbjZidTluQVlhcUVCSU1USUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZG4EGcA
Qk37Ta06WvcwU/P9gCYW/7x5i8nfDSCYXR0kR6Ej33MaRHvfAjvwRoTYn8lZWAdw
TCXODZ7vvbO0dZE/wLzFz0vbt+EB4rU2Eq9AIJIsrqrBTOIBLn3r/RMfiUzIL88M
N9jGFHU5O6nXP1m6QdWf1mYHXhGSv17o6isW6ls1tVT6NcJfKww5nENIvDGth72K
4D3pbHBjZRWj1KsM4+AulUmYGQt6B32wbm+NcMpby3swOZsNrHQjA2a/Oph9sq1G
LQKrLQvIFrtaU9nBAoUr8Hw7npuSp6tF0sCsIDHIkQuyGa0MXAyVvmlpXFFbt05/
51dlndMe+JHY6Q==
-----END CERTIFICATE-----