Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/HkzsIRHEOxmocK-p-6P5DNVI-7s.mft
File:                     HkzsIRHEOxmocK-p-6P5DNVI-7s.mft (raw, json)
Hash identifier:          uUeW130c3TP3d5zYMTRoWpgo37J5UW/6rHwEAPNFtes=
Subject key identifier:   F7:22:AC:42:E1:6D:5E:07:FC:F9:C2:30:ED:3F:19:5B:B6:26:70:C2
Authority key identifier: 1E:4C:EC:21:11:C4:3B:19:A8:70:AF:A9:FB:A3:F9:0C:D5:48:FB:BB
Certificate issuer:       /CN=1e4cec2111c43b19a870afa9fba3f90cd548fbbb
Certificate serial:       018BB9F7776FC650097508DE7E46433AD997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkzsIRHEOxmocK-p-6P5DNVI-7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/HkzsIRHEOxmocK-p-6P5DNVI-7s.mft
Manifest number:          01E1
Signing time:             Fri 10 Nov 2023 16:01:24 +0000
Manifest this update:     Fri 10 Nov 2023 16:01:24 +0000
Manifest next update:     Sat 11 Nov 2023 16:01:24 +0000
Files and hashes:         1: HkzsIRHEOxmocK-p-6P5DNVI-7s.crl (hash: YuWazDPR0HhvP/2bqUB0JnbzZ0+bCgrODRvw5VFDXL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:f7:77:6f:c6:50:09:75:08:de:7e:46:43:3a:d9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4cec2111c43b19a870afa9fba3f90cd548fbbb
        Validity
            Not Before: Nov 10 16:01:24 2023 GMT
            Not After : Nov 11 16:01:24 2023 GMT
        Subject: CN=f722ac42e16d5e07fcf9c230ed3f195bb62670c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:26:a9:78:66:f5:14:45:05:9c:84:cc:9c:
                    87:4a:52:d1:83:7d:dd:ca:71:df:d3:01:cd:b8:28:
                    c0:5a:b2:c7:90:aa:6e:c7:4c:bb:c8:e1:47:49:45:
                    00:28:63:4b:83:2b:a1:55:cd:18:f9:da:2d:bd:a1:
                    2b:a6:dc:7d:5d:a4:6c:c4:b9:5d:f2:e9:08:7a:b0:
                    e9:13:16:b8:a5:98:88:b3:c2:96:38:40:48:f1:56:
                    4d:15:b1:2a:06:11:f3:a1:9b:a6:98:59:f6:8b:aa:
                    bd:63:c9:8b:4a:6a:13:52:5b:50:0c:14:10:eb:58:
                    7e:4d:04:21:df:bf:40:b7:81:cc:2f:18:66:7d:ec:
                    10:fb:4e:4d:84:72:59:43:a3:88:c2:fd:09:91:da:
                    05:16:91:4b:7a:57:4e:e1:93:7d:79:d6:20:02:aa:
                    d9:17:51:45:8d:eb:c3:c9:74:21:9a:eb:8c:e1:13:
                    cf:08:0d:bd:18:e7:c8:24:63:57:0f:78:55:09:15:
                    7d:12:98:0e:e0:b7:9f:35:d5:81:72:97:94:f2:a1:
                    7c:83:6c:a0:ed:b5:15:c4:71:1a:eb:89:ce:69:ec:
                    97:a7:41:d9:30:fc:04:22:6a:76:f4:3d:95:99:dc:
                    be:d8:9f:92:11:e8:53:d6:55:ba:a2:3a:c0:0b:c7:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:22:AC:42:E1:6D:5E:07:FC:F9:C2:30:ED:3F:19:5B:B6:26:70:C2
            X509v3 Authority Key Identifier:
                keyid:1E:4C:EC:21:11:C4:3B:19:A8:70:AF:A9:FB:A3:F9:0C:D5:48:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkzsIRHEOxmocK-p-6P5DNVI-7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/HkzsIRHEOxmocK-p-6P5DNVI-7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/HkzsIRHEOxmocK-p-6P5DNVI-7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:40:b4:c0:80:d8:7e:8a:95:1e:88:e6:6f:75:91:e6:d6:
         a3:9f:d1:0c:89:b8:86:db:f1:d3:91:94:85:35:41:92:1b:26:
         05:f8:27:6e:f7:4d:73:de:08:56:73:27:7a:29:16:99:ab:87:
         13:0f:ff:9c:52:50:13:5f:9b:38:4c:bd:79:e5:77:cd:de:b7:
         ef:4e:31:9a:47:8a:bc:48:e7:01:6c:9f:42:80:64:88:aa:15:
         d1:8c:b9:ed:cd:5e:a9:20:65:04:ab:de:d8:8a:1b:7e:cd:e7:
         c9:53:0c:4b:5b:22:f7:94:e9:49:9d:fb:83:0f:63:55:0a:2f:
         09:be:6b:64:c7:10:60:7f:90:58:8c:43:a8:a8:2a:ba:43:0e:
         7c:e5:81:4a:36:cc:28:74:03:fa:15:e6:39:c4:61:7e:dc:93:
         a4:81:0a:b9:40:84:85:66:d4:bf:3a:6a:a4:70:67:59:47:de:
         67:15:6e:d8:d9:47:94:55:b2:70:b2:5d:ac:28:b3:4a:a7:58:
         6f:fe:73:c2:81:18:cf:9b:eb:c7:57:b1:4a:c2:f4:76:11:23:
         a4:58:d7:70:30:b3:1c:57:20:2a:5f:e7:88:f5:58:a8:9c:4e:
         68:fa:28:4e:a3:28:e5:91:0d:c7:82:f0:fa:73:4a:8b:54:5c:
         8f:8f:b3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYu593dvxlAJdQjefkZDOtmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNGNlYzIxMTFjNDNiMTlhODcwYWZhOWZiYTNmOTBjZDU0
OGZiYmIwHhcNMjMxMTEwMTYwMTI0WhcNMjMxMTExMTYwMTI0WjAzMTEwLwYDVQQD
EyhmNzIyYWM0MmUxNmQ1ZTA3ZmNmOWMyMzBlZDNmMTk1YmI2MjY3MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUYmqXhm9RRFBZyEzJyHSlLRg33d
ynHf0wHNuCjAWrLHkKpux0y7yOFHSUUAKGNLgyuhVc0Y+dotvaErptx9XaRsxLld
8ukIerDpExa4pZiIs8KWOEBI8VZNFbEqBhHzoZummFn2i6q9Y8mLSmoTUltQDBQQ
61h+TQQh379At4HMLxhmfewQ+05NhHJZQ6OIwv0JkdoFFpFLeldO4ZN9edYgAqrZ
F1FFjevDyXQhmuuM4RPPCA29GOfIJGNXD3hVCRV9EpgO4LefNdWBcpeU8qF8g2yg
7bUVxHEa64nOaeyXp0HZMPwEImp29D2Vmdy+2J+SEehT1lW6ojrAC8fPnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcirELhbV4H/PnCMO0/GVu2JnDCMB8GA1UdIwQY
MBaAFB5M7CERxDsZqHCvqfuj+QzVSPu7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGt6c0lSSEVPeG1vY0stcC02UDVETlZJLTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81YTNkN2MtMTZhOC00NmQ1LTk5NzMt
ZTkyZTBkYWU0OTJjLzEvSGt6c0lSSEVPeG1vY0stcC02UDVETlZJLTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi81YTNkN2MtMTZhOC00NmQ1LTk5NzMtZTkyZTBkYWU0OTJj
LzEvSGt6c0lSSEVPeG1vY0stcC02UDVETlZJLTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA9AtMCA
2H6KlR6I5m91kebWo5/RDIm4htvx05GUhTVBkhsmBfgnbvdNc94IVnMneikWmauH
Ew//nFJQE1+bOEy9eeV3zd63704xmkeKvEjnAWyfQoBkiKoV0Yy57c1eqSBlBKve
2Iobfs3nyVMMS1si95TpSZ37gw9jVQovCb5rZMcQYH+QWIxDqKgqukMOfOWBSjbM
KHQD+hXmOcRhftyTpIEKuUCEhWbUvzpqpHBnWUfeZxVu2NlHlFWycLJdrCizSqdY
b/5zwoEYz5vrx1exSsL0dhEjpFjXcDCzHFcgKl/niPVYqJxOaPooTqMo5ZENx4Lw
+nNKi1Rcj4+zVA==