Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/78c0f0-1ce1-468a-bef3-d4fd335f801b/1/HWx4OJhKreAC2_Bf7JmIu7tOnPc.mft
File:                     HWx4OJhKreAC2_Bf7JmIu7tOnPc.mft (raw, json)
Hash identifier:          TgrC2dFupBTDcA42PX1u3KUGEoryh5IcvUWqC7c6wXs=
Subject key identifier:   F4:8A:68:9F:93:A3:C8:39:7F:3D:B2:C8:83:9B:F3:03:E3:75:9C:70
Authority key identifier: 1D:6C:78:38:98:4A:AD:E0:02:DB:F0:5F:EC:99:88:BB:BB:4E:9C:F7
Certificate issuer:       /CN=1d6c7838984aade002dbf05fec9988bbbb4e9cf7
Certificate serial:       01892A17339A2EB1DFA0E517C8ED245944B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWx4OJhKreAC2_Bf7JmIu7tOnPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/78c0f0-1ce1-468a-bef3-d4fd335f801b/1/HWx4OJhKreAC2_Bf7JmIu7tOnPc.mft
Manifest number:          01
Signing time:             Thu 06 Jul 2023 07:25:10 +0000
Manifest this update:     Thu 06 Jul 2023 07:25:10 +0000
Manifest next update:     Fri 07 Jul 2023 07:25:10 +0000
Files and hashes:         1: HWx4OJhKreAC2_Bf7JmIu7tOnPc.crl (hash: Gj1k1MHO/AVm957v8s+WQWAu6UMCO5ZVC1Mo0f4S7KE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2a:17:33:9a:2e:b1:df:a0:e5:17:c8:ed:24:59:44:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6c7838984aade002dbf05fec9988bbbb4e9cf7
        Validity
            Not Before: Jul  6 07:25:10 2023 GMT
            Not After : Jul  7 07:25:10 2023 GMT
        Subject: CN=f48a689f93a3c8397f3db2c8839bf303e3759c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:83:e9:2b:a7:54:74:fa:69:da:2c:fe:8b:
                    cf:5d:10:73:dc:97:65:70:2b:cd:89:25:8e:86:5c:
                    90:b9:d6:87:af:a6:80:d5:a7:a7:b0:ce:da:61:d2:
                    3c:75:60:34:37:c3:b1:04:24:c3:4a:a9:91:40:98:
                    1d:69:04:5a:1a:a5:25:ad:9a:f5:95:d4:c6:8f:c9:
                    69:d0:56:ab:dd:a7:ec:cb:43:fa:50:62:51:84:6c:
                    94:72:fb:06:5c:63:de:dd:e0:5b:16:67:49:84:c4:
                    db:61:1f:2c:8e:2f:23:9c:67:40:47:2e:2e:6c:cc:
                    85:5c:63:14:b7:73:78:40:f3:7c:04:67:50:33:e3:
                    a4:01:54:df:6b:e5:a7:a7:13:00:4e:65:71:4d:36:
                    fa:4c:bd:a5:9b:43:43:ba:38:47:6a:40:19:11:39:
                    84:f9:f5:67:4e:f5:62:d6:d1:74:98:b4:aa:45:35:
                    8a:e3:81:3a:f3:9c:6c:d0:3b:19:76:b2:24:ff:bb:
                    a1:14:ba:81:06:be:21:e8:a3:3d:43:60:33:c1:92:
                    6e:a6:f7:22:e8:70:f5:3f:9b:d6:67:79:c3:40:35:
                    bb:10:51:7b:5f:cf:18:80:38:9f:af:76:04:25:d0:
                    90:96:ab:d2:01:99:f3:de:38:8a:d6:32:da:52:f1:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:68:9F:93:A3:C8:39:7F:3D:B2:C8:83:9B:F3:03:E3:75:9C:70
            X509v3 Authority Key Identifier:
                keyid:1D:6C:78:38:98:4A:AD:E0:02:DB:F0:5F:EC:99:88:BB:BB:4E:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWx4OJhKreAC2_Bf7JmIu7tOnPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/78c0f0-1ce1-468a-bef3-d4fd335f801b/1/HWx4OJhKreAC2_Bf7JmIu7tOnPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/78c0f0-1ce1-468a-bef3-d4fd335f801b/1/HWx4OJhKreAC2_Bf7JmIu7tOnPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9b:db:4f:2f:43:16:9e:f2:a6:33:a5:8a:ed:a0:66:4b:6e:
         74:d9:ed:1a:10:5a:f0:a8:32:23:f7:ed:b2:f3:19:c7:ea:57:
         cc:55:d3:14:57:60:cf:74:44:cb:87:15:b8:4d:b7:84:3b:66:
         20:7d:5c:5a:f6:19:74:d5:b6:45:dc:23:df:86:12:bb:bb:34:
         13:dd:b9:90:53:43:65:03:9c:11:7f:96:d7:15:e2:7e:72:8a:
         30:0c:4d:7d:4d:4f:49:e7:47:83:6e:08:1e:7d:89:73:15:4d:
         51:f2:f5:67:eb:10:3f:8c:9f:d9:b9:d0:4a:b2:4b:37:a9:63:
         d1:30:44:7f:a0:5f:ab:c3:6d:70:e2:2b:6b:70:d2:33:7a:07:
         87:35:89:ec:2f:df:10:bc:4d:8c:13:ca:7e:0d:c9:cd:3c:a1:
         8d:70:a3:e0:38:a1:df:b5:86:42:e1:bd:55:5b:76:59:35:25:
         97:96:91:46:3e:0e:cb:01:81:a8:a3:c9:4d:64:52:38:92:41:
         1b:de:ed:28:36:ad:80:10:3c:d0:fa:94:53:4b:f5:fe:3e:20:
         27:e5:d7:cc:c5:a3:e0:21:6d:41:8a:5a:14:7e:f4:10:f7:31:
         76:25:07:4a:8c:a4:f9:f2:c3:6f:09:b7:94:ab:af:b8:12:e0:
         bc:d2:58:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYkqFzOaLrHfoOUXyO0kWUSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNmM3ODM4OTg0YWFkZTAwMmRiZjA1ZmVjOTk4OGJiYmI0
ZTljZjcwHhcNMjMwNzA2MDcyNTEwWhcNMjMwNzA3MDcyNTEwWjAzMTEwLwYDVQQD
EyhmNDhhNjg5ZjkzYTNjODM5N2YzZGIyYzg4MzliZjMwM2UzNzU5YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD2D6SunVHT6ados/ovPXRBz3Jdl
cCvNiSWOhlyQudaHr6aA1aensM7aYdI8dWA0N8OxBCTDSqmRQJgdaQRaGqUlrZr1
ldTGj8lp0Far3afsy0P6UGJRhGyUcvsGXGPe3eBbFmdJhMTbYR8sji8jnGdARy4u
bMyFXGMUt3N4QPN8BGdQM+OkAVTfa+WnpxMATmVxTTb6TL2lm0NDujhHakAZETmE
+fVnTvVi1tF0mLSqRTWK44E685xs0DsZdrIk/7uhFLqBBr4h6KM9Q2AzwZJupvci
6HD1P5vWZ3nDQDW7EFF7X88YgDifr3YEJdCQlqvSAZnz3jiK1jLaUvHaIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSKaJ+To8g5fz2yyIOb8wPjdZxwMB8GA1UdIwQY
MBaAFB1seDiYSq3gAtvwX+yZiLu7Tpz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFd4NE9KaEtyZUFDMl9CZjdKbUl1N3RPblBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83OGMwZjAtMWNlMS00NjhhLWJlZjMt
ZDRmZDMzNWY4MDFiLzEvSFd4NE9KaEtyZUFDMl9CZjdKbUl1N3RPblBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83OGMwZjAtMWNlMS00NjhhLWJlZjMtZDRmZDMzNWY4MDFi
LzEvSFd4NE9KaEtyZUFDMl9CZjdKbUl1N3RPblBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopvbTy9D
Fp7ypjOliu2gZktudNntGhBa8KgyI/ftsvMZx+pXzFXTFFdgz3REy4cVuE23hDtm
IH1cWvYZdNW2Rdwj34YSu7s0E925kFNDZQOcEX+W1xXifnKKMAxNfU1PSedHg24I
Hn2JcxVNUfL1Z+sQP4yf2bnQSrJLN6lj0TBEf6Bfq8NtcOIra3DSM3oHhzWJ7C/f
ELxNjBPKfg3JzTyhjXCj4Dih37WGQuG9VVt2WTUll5aRRj4OywGBqKPJTWRSOJJB
G97tKDatgBA80PqUU0v1/j4gJ+XXzMWj4CFtQYpaFH70EPcxdiUHSoyk+fLDbwm3
lKuvuBLgvNJYLQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:11 2023 by rpki-client on console.sobornost.net