Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.mft
File:                     knVdes6gANSuZhAaxf36yBxnfvw.mft (raw, json)
Hash identifier:          vExqeJZBTcgzm7SmSafYLvO8F+ssrJN7/ghT2NGEm9M=
Subject key identifier:   EB:05:6C:B9:AF:7F:DD:9D:9D:0B:46:1B:EC:4B:04:36:53:4E:23:E2
Authority key identifier: 92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
Certificate issuer:       /CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Certificate serial:       018B3C01F3CBE3AC72047823046D1B77039F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.mft
Manifest number:          076C
Signing time:             Tue 17 Oct 2023 05:00:42 +0000
Manifest this update:     Tue 17 Oct 2023 05:00:42 +0000
Manifest next update:     Wed 18 Oct 2023 05:00:42 +0000
Files and hashes:         1: S9rW99MrrKupw-2SemNN_ueczdk.roa (hash: 8Jn0CpFj0KqgSHpmF6+seSQMCaR+rTleG56Cu54a5ts=)
                          2: a7Mmox05FctxLO9d7U_gqAKcITs.roa (hash: hCVmpMlGjWX5Xp8rxJUpSZFSC2MxwjRT7gf8I8vXCbk=)
                          3: knVdes6gANSuZhAaxf36yBxnfvw.crl (hash: cAfmcrIquDnEUavfu1bgvgwMdDi+LlDTFQ+ziUNu0lo=)
                          4: qoo_pnPnJFzXOGk8Va3739D9RZ8.roa (hash: tG8iBGqo0poVSM95xN/SpSZUP5alEOuXQzZvLEohF0w=)
                          5: yVfH9A6-X9up8HNSdxqfWZLhsao.roa (hash: Ncr7RHWrzqAI5IY2xwwHleb18tOaopEuDRHUNtHR+eM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:01:f3:cb:e3:ac:72:04:78:23:04:6d:1b:77:03:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92755d7acea000d4ae66101ac5fdfac81c677efc
        Validity
            Not Before: Oct 17 05:00:42 2023 GMT
            Not After : Oct 18 05:00:42 2023 GMT
        Subject: CN=eb056cb9af7fdd9d9d0b461bec4b0436534e23e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:b1:9b:b0:45:ef:ea:46:d2:89:79:57:28:
                    aa:c7:5b:9e:5c:e8:ef:f9:fa:3c:9a:16:27:57:b9:
                    ca:60:f7:f5:53:8b:d0:b6:fd:e8:04:09:0a:05:87:
                    d3:bc:29:a9:20:a1:9b:cd:19:d2:54:02:6c:b3:9c:
                    ac:fd:25:92:ef:21:5f:d1:d4:7a:b9:ad:47:9b:13:
                    4c:17:5e:8f:7a:9b:5d:f7:37:46:31:00:ce:a8:2d:
                    27:bb:98:e7:e8:10:7a:fe:58:f9:99:04:8c:94:a6:
                    c5:0f:c8:81:58:e1:86:5a:9d:41:d8:3e:9a:9b:f5:
                    e4:0a:f4:df:85:f2:60:f0:6f:da:a4:2f:ab:9f:5a:
                    cb:3c:cd:36:8e:bd:49:88:ae:7d:ff:83:70:65:45:
                    be:a9:40:40:82:b9:43:1d:c6:2c:02:c6:f1:b9:60:
                    98:d8:41:74:d4:c0:f5:9e:fd:e1:b9:af:f8:30:06:
                    14:d2:0e:ee:b0:43:12:20:67:ac:bd:71:81:fc:32:
                    59:d2:3f:2a:f3:98:fe:17:0a:84:e5:78:94:78:71:
                    cc:2a:e0:fa:80:c7:ed:02:b6:8f:d3:63:8d:ef:d5:
                    74:d0:30:13:17:6b:67:1a:89:e7:95:9f:e4:fe:2c:
                    4e:9b:ef:74:ad:6e:c1:92:28:19:1d:62:19:67:a9:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:05:6C:B9:AF:7F:DD:9D:9D:0B:46:1B:EC:4B:04:36:53:4E:23:E2
            X509v3 Authority Key Identifier:
                keyid:92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:1b:f1:ca:31:8c:8f:12:5f:14:d2:a9:bf:8f:eb:f9:72:
         56:cd:d2:52:c3:05:20:bb:4b:d1:b1:91:d1:67:9c:5d:4f:04:
         80:8e:85:a2:34:55:c4:45:08:23:07:48:9d:2a:81:16:10:b4:
         50:f9:bf:ab:8d:71:61:22:c8:dc:c0:58:a1:f0:97:c9:4e:2e:
         b5:85:fe:98:c1:73:18:07:d2:14:ea:3e:c6:86:f9:ae:49:32:
         74:4c:b7:cb:2d:f2:39:cc:2c:a5:7a:79:76:f5:cc:47:bf:1e:
         0a:2f:7b:de:16:ed:5b:f1:53:bf:e1:57:38:c0:46:bf:89:11:
         3c:19:34:09:0e:9a:5f:08:1f:54:1d:fb:70:2a:0b:26:2b:98:
         8b:cf:0b:d4:0b:f9:93:ea:ad:9d:88:86:ee:c0:25:b1:df:7e:
         db:b0:57:92:2e:55:d5:f9:33:b0:a6:e0:c0:6e:14:0c:54:6d:
         c0:27:90:15:38:0a:d6:f8:02:db:8c:f8:5d:91:80:64:02:1e:
         bd:0b:4a:04:6e:fe:6f:9a:f2:a5:41:7b:af:c7:44:e6:d4:49:
         c5:95:fd:73:e5:91:b2:c8:d1:13:3c:cd:21:a6:8e:b8:c2:53:
         0d:9f:db:e0:c6:70:c7:97:af:9f:1f:24:18:46:00:f9:43:6a:
         38:d6:25:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYs8AfPL46xyBHgjBG0bdwOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzU1ZDdhY2VhMDAwZDRhZTY2MTAxYWM1ZmRmYWM4MWM2
NzdlZmMwHhcNMjMxMDE3MDUwMDQyWhcNMjMxMDE4MDUwMDQyWjAzMTEwLwYDVQQD
EyhlYjA1NmNiOWFmN2ZkZDlkOWQwYjQ2MWJlYzRiMDQzNjUzNGUyM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/yxm7BF7+pG0ol5Vyiqx1ueXOjv
+fo8mhYnV7nKYPf1U4vQtv3oBAkKBYfTvCmpIKGbzRnSVAJss5ys/SWS7yFf0dR6
ua1HmxNMF16Peptd9zdGMQDOqC0nu5jn6BB6/lj5mQSMlKbFD8iBWOGGWp1B2D6a
m/XkCvTfhfJg8G/apC+rn1rLPM02jr1JiK59/4NwZUW+qUBAgrlDHcYsAsbxuWCY
2EF01MD1nv3hua/4MAYU0g7usEMSIGesvXGB/DJZ0j8q85j+FwqE5XiUeHHMKuD6
gMftAraP02ON79V00DATF2tnGonnlZ/k/ixOm+90rW7BkigZHWIZZ6nJlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsFbLmvf92dnQtGG+xLBDZTTiPiMB8GA1UdIwQY
MBaAFJJ1XXrOoADUrmYQGsX9+sgcZ378MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25WZGVzNmdBTlN1WmhBYXhmMzZ5QnhuZnZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84YTZjNWItN2UyOC00NTQ4LTgxN2Qt
ZjFlNjk4NWRlZjI1LzEva25WZGVzNmdBTlN1WmhBYXhmMzZ5QnhuZnZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84YTZjNWItN2UyOC00NTQ4LTgxN2QtZjFlNjk4NWRlZjI1
LzEva25WZGVzNmdBTlN1WmhBYXhmMzZ5QnhuZnZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1Ub8cox
jI8SXxTSqb+P6/lyVs3SUsMFILtL0bGR0WecXU8EgI6FojRVxEUIIwdInSqBFhC0
UPm/q41xYSLI3MBYofCXyU4utYX+mMFzGAfSFOo+xob5rkkydEy3yy3yOcwspXp5
dvXMR78eCi973hbtW/FTv+FXOMBGv4kRPBk0CQ6aXwgfVB37cCoLJiuYi88L1Av5
k+qtnYiG7sAlsd9+27BXki5V1fkzsKbgwG4UDFRtwCeQFTgK1vgC24z4XZGAZAIe
vQtKBG7+b5rypUF7r8dE5tRJxZX9c+WRssjREzzNIaaOuMJTDZ/b4MZwx5evnx8k
GEYA+UNqONYl6A==
-----END CERTIFICATE-----