Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.mft
File:                     CiAQCT8QgQsbhXJOqJ4pT83M-_I.mft (raw, json)
Hash identifier:          Iyc5asa4kOaFCrxoiSQuSvozaiF+qgyke9zeGSATi3s=
Subject key identifier:   4D:F0:A0:11:4F:49:CB:C2:5D:7C:B4:79:59:E8:18:D3:3A:8B:06:AC
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Certificate issuer:       /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial:       018B83E40759B0AC595F5C10A1D757C66C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.mft
Manifest number:          0960
Signing time:             Tue 31 Oct 2023 04:00:41 +0000
Manifest this update:     Tue 31 Oct 2023 04:00:41 +0000
Manifest next update:     Wed 01 Nov 2023 04:00:41 +0000
Files and hashes:         1: CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl (hash: I0yDDc66E1Hkv1q4X/1qNy1VHjVb3fg9flg/7Md2e1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:83:e4:07:59:b0:ac:59:5f:5c:10:a1:d7:57:c6:6c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
        Validity
            Not Before: Oct 31 04:00:41 2023 GMT
            Not After : Nov  1 04:00:41 2023 GMT
        Subject: CN=4df0a0114f49cbc25d7cb47959e818d33a8b06ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:b4:29:4c:5c:c6:3e:fd:92:b1:4e:5e:03:
                    fc:e8:e2:d4:3f:af:50:f6:2d:93:8c:31:e5:0f:04:
                    34:12:d9:54:20:4d:58:f8:a0:27:9e:82:20:b6:31:
                    38:41:8b:78:b4:9e:b5:8e:10:3a:9d:02:5d:cb:09:
                    3e:a4:bc:4c:ab:8a:2f:33:ec:b5:7d:b7:8d:b6:10:
                    7e:31:b8:37:1f:0c:67:30:81:23:96:77:34:6a:d9:
                    b5:4e:65:7d:af:f4:b8:31:05:01:57:e1:0d:88:c7:
                    ad:7d:66:4c:b5:32:f0:69:f8:12:2f:ef:56:3a:bf:
                    ac:e6:2c:9b:89:c8:6d:33:f3:74:0b:02:d2:53:b5:
                    70:1d:9a:ea:3b:fa:e7:39:f2:df:05:2c:87:19:49:
                    ae:b5:6c:27:99:d4:a2:80:9c:6a:3e:fb:1c:10:af:
                    ad:60:69:1d:1c:d7:7d:37:eb:2f:51:6d:62:37:fd:
                    f4:1f:19:d6:cf:c9:02:b5:1a:5e:9e:3e:05:0e:29:
                    6c:5e:bf:d4:60:b9:74:a6:92:e3:03:1c:59:8f:9e:
                    4f:96:14:10:6f:5b:a6:98:9d:98:72:a4:cc:ec:0f:
                    41:09:ec:3c:8b:98:e6:b6:22:44:c6:74:39:7d:1a:
                    0e:7b:76:4f:4b:39:90:a8:59:94:5a:17:99:e2:2c:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:A0:11:4F:49:CB:C2:5D:7C:B4:79:59:E8:18:D3:3A:8B:06:AC
            X509v3 Authority Key Identifier:
                keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:4d:8b:cf:77:e0:29:f0:ec:c0:e4:a9:6c:91:d4:7c:cb:
         c6:ba:c6:0c:37:e5:11:41:a2:60:db:38:79:a0:f1:cf:5a:aa:
         21:92:d0:04:f2:fc:1d:74:91:af:f7:71:11:67:27:e2:a1:a1:
         7d:55:a2:dd:70:ab:08:13:16:e1:70:93:83:a6:23:4c:4a:1f:
         5d:85:75:e0:16:24:17:ba:f2:ad:57:73:d2:83:c0:cf:2e:89:
         c6:a7:cb:5d:c2:e6:54:82:26:61:dd:18:cc:9a:d9:42:55:45:
         13:95:f3:cc:9f:fe:e9:09:5a:ef:55:d4:67:ca:4e:98:d8:3a:
         02:d1:bf:4f:38:67:92:02:7f:d2:63:9a:4b:2e:c4:71:38:fa:
         e7:bf:22:84:0c:a6:2a:07:84:51:f8:a4:1c:0c:bf:f1:47:d7:
         1f:44:18:b5:57:fd:f4:45:13:50:f7:1a:ee:ef:3a:54:30:a6:
         08:3f:91:fc:54:31:48:07:47:72:28:f5:8e:6f:9d:ff:d4:9a:
         5e:1e:54:1a:20:13:82:0b:1a:70:c4:f0:89:49:b3:9b:b9:3d:
         c7:19:65:b6:74:89:89:b8:b3:2d:1b:49:bd:bd:7f:22:8a:81:
         d3:d4:16:af:d9:28:81:00:41:57:36:33:0e:05:e9:b3:7f:bf:
         5f:a2:6e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuD5AdZsKxZX1wQoddXxmx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjAxMDA5M2YxMDgxMGIxYjg1NzI0ZWE4OWUyOTRmY2Rj
Y2ZiZjIwHhcNMjMxMDMxMDQwMDQxWhcNMjMxMTAxMDQwMDQxWjAzMTEwLwYDVQQD
Eyg0ZGYwYTAxMTRmNDljYmMyNWQ3Y2I0Nzk1OWU4MThkMzNhOGIwNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6m0KUxcxj79krFOXgP86OLUP69Q
9i2TjDHlDwQ0EtlUIE1Y+KAnnoIgtjE4QYt4tJ61jhA6nQJdywk+pLxMq4ovM+y1
fbeNthB+Mbg3HwxnMIEjlnc0atm1TmV9r/S4MQUBV+ENiMetfWZMtTLwafgSL+9W
Or+s5iybichtM/N0CwLSU7VwHZrqO/rnOfLfBSyHGUmutWwnmdSigJxqPvscEK+t
YGkdHNd9N+svUW1iN/30HxnWz8kCtRpenj4FDilsXr/UYLl0ppLjAxxZj55PlhQQ
b1ummJ2YcqTM7A9BCew8i5jmtiJExnQ5fRoOe3ZPSzmQqFmUWheZ4izxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3woBFPScvCXXy0eVnoGNM6iwasMB8GA1UdIwQY
MBaAFAogEAk/EIELG4VyTqieKU/NzPvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lBUUNUOFFnUXNiaFhKT3FKNHBUODNNLV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81YzBjYzktZjc2MS00ZTdhLTgxNTUt
YmE5YzM3MWUwYjY2LzEvQ2lBUUNUOFFnUXNiaFhKT3FKNHBUODNNLV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81YzBjYzktZjc2MS00ZTdhLTgxNTUtYmE5YzM3MWUwYjY2
LzEvQ2lBUUNUOFFnUXNiaFhKT3FKNHBUODNNLV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUFNi893
4Cnw7MDkqWyR1HzLxrrGDDflEUGiYNs4eaDxz1qqIZLQBPL8HXSRr/dxEWcn4qGh
fVWi3XCrCBMW4XCTg6YjTEofXYV14BYkF7ryrVdz0oPAzy6JxqfLXcLmVIImYd0Y
zJrZQlVFE5XzzJ/+6Qla71XUZ8pOmNg6AtG/TzhnkgJ/0mOaSy7EcTj6578ihAym
KgeEUfikHAy/8UfXH0QYtVf99EUTUPca7u86VDCmCD+R/FQxSAdHcij1jm+d/9Sa
Xh5UGiATggsacMTwiUmzm7k9xxlltnSJibizLRtJvb1/IoqB09QWr9kogQBBVzYz
DgXps3+/X6JutA==
Generated at Tue Oct 31 11:17:06 2023 by rpki-client on console-fra.rpki-client.org