Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.mft
File:                     _5TEsdM7owlOw4j3pz2NOc2VCGE.mft (raw, json)
Hash identifier:          X7N0IGdvrRqPTErY+tqOfmoSmy2asGA48o7wybchlU8=
Subject key identifier:   D8:78:77:76:3B:8B:55:2D:EC:EA:BD:BA:27:91:DC:F3:D4:3A:35:A1
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Certificate issuer:       /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial:       018B93C5209D8F3B67FB47435AE9E8D178DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.mft
Manifest number:          0F6D
Signing time:             Fri 03 Nov 2023 06:00:51 +0000
Manifest this update:     Fri 03 Nov 2023 06:00:51 +0000
Manifest next update:     Sat 04 Nov 2023 06:00:51 +0000
Files and hashes:         1: Ql3TfeuG8fMjxNOnv4Rvo_GU6h0.roa (hash: nX58NYz7ak9F+wQBhIb2RU4B4Y5JWyceiLNoXg/GnLc=)
                          2: W2TqMjeBh7iuU4jfI4-8CDirdjU.roa (hash: lkxeE1cNlZneQm5n/YmbZfRPFXet7ewUpO2yV3a5DLg=)
                          3: _5TEsdM7owlOw4j3pz2NOc2VCGE.crl (hash: fXHVFLBSmdi+5a3PjM2zlph3GL/8IY9PRTk16OYuW7A=)
                          4: s5A4DWsxHzJhAyaPRc0tZb9Gzpg.roa (hash: 30pVzKr92ShwLLCyhHoUWNm6ZQ3DFjJrd9uf2yIq4p0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:c5:20:9d:8f:3b:67:fb:47:43:5a:e9:e8:d1:78:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
        Validity
            Not Before: Nov  3 06:00:51 2023 GMT
            Not After : Nov  4 06:00:51 2023 GMT
        Subject: CN=d87877763b8b552deceabdba2791dcf3d43a35a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:23:10:89:1e:5e:20:54:6d:b9:8d:f5:91:
                    c1:2d:b3:1f:b5:d6:a8:fd:65:b3:35:01:e0:92:d3:
                    d2:37:82:47:90:e6:58:53:af:6b:9e:6b:8e:94:f5:
                    34:6f:22:9b:3a:38:57:17:54:7d:17:16:83:1c:54:
                    b9:0c:de:aa:da:4b:df:76:1b:45:64:48:59:58:23:
                    20:d8:f7:c8:a6:55:d2:7a:2f:ba:04:29:b9:f0:72:
                    15:e3:a9:3c:fe:c2:58:d1:01:86:65:7c:d4:9a:1c:
                    59:8b:d1:b8:3f:cd:1d:dd:7c:30:a8:6b:4a:d2:0c:
                    7a:c9:f9:01:5d:ed:c6:2e:15:3b:50:8f:62:b2:78:
                    67:f4:c8:4b:09:48:cd:52:df:3d:95:f3:63:b4:9c:
                    f7:08:a5:19:0d:5a:ad:6f:56:19:99:db:ff:ee:3a:
                    e3:bf:31:39:cd:45:a7:e6:43:26:e5:2b:7e:f5:bd:
                    01:b4:79:df:cb:73:96:da:3f:02:bf:f9:e6:04:06:
                    48:63:e5:45:09:16:d8:18:81:02:d4:57:58:e6:28:
                    1d:02:4a:84:9f:3c:8f:3f:b9:4a:1c:ae:93:6b:88:
                    b6:79:8f:12:91:a9:09:98:df:87:0d:cc:a6:be:1a:
                    69:43:1c:74:f5:b0:22:66:3a:42:9a:3a:47:df:04:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:78:77:76:3B:8B:55:2D:EC:EA:BD:BA:27:91:DC:F3:D4:3A:35:A1
            X509v3 Authority Key Identifier:
                keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:55:25:c6:1e:5e:d4:c4:6d:52:96:d2:48:73:28:2b:76:
         7e:1c:9d:68:25:42:be:96:af:09:19:3d:ca:7e:96:6e:5f:06:
         12:46:06:dd:11:68:05:e3:5e:a0:90:cd:c3:74:e1:25:3f:c9:
         c3:01:d2:9b:0e:c6:26:17:9b:5f:eb:6d:68:bf:72:fe:6a:22:
         57:de:ca:2d:b0:36:b2:b9:18:a4:7d:e4:71:3a:20:b2:59:dc:
         e7:68:8e:8c:0c:33:6a:e6:56:1a:8a:c5:df:be:5e:f8:2e:7f:
         c2:f9:5e:68:28:91:a0:e8:c0:fb:17:76:1c:87:81:ef:ca:f0:
         d9:8a:b6:1d:a0:26:dc:9c:6e:b9:99:31:1d:74:77:46:25:5f:
         f3:63:f7:20:c2:b8:0c:da:fb:7c:d0:48:1f:37:85:f6:cd:1d:
         aa:5e:99:f8:d4:0d:40:a9:87:48:de:37:83:93:5e:bb:76:4f:
         d0:f1:d8:ae:d1:33:7b:8c:84:41:f7:13:c9:b1:e3:08:85:dd:
         db:15:73:e1:b7:8c:0d:a0:f0:21:08:a8:01:71:33:20:c2:95:
         26:7a:ee:39:08:38:70:37:bf:93:36:bf:5d:1f:22:d1:42:82:
         9a:fb:3e:98:7a:42:5b:a1:47:ee:fa:f2:68:38:31:86:bd:c0:
         93:2e:51:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuTxSCdjztn+0dDWuno0XjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTRjNGIxZDMzYmEzMDk0ZWMzODhmN2E3M2Q4ZDM5Y2Q5
NTA4NjEwHhcNMjMxMTAzMDYwMDUxWhcNMjMxMTA0MDYwMDUxWjAzMTEwLwYDVQQD
EyhkODc4Nzc3NjNiOGI1NTJkZWNlYWJkYmEyNzkxZGNmM2Q0M2EzNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoMjEIkeXiBUbbmN9ZHBLbMftdao
/WWzNQHgktPSN4JHkOZYU69rnmuOlPU0byKbOjhXF1R9FxaDHFS5DN6q2kvfdhtF
ZEhZWCMg2PfIplXSei+6BCm58HIV46k8/sJY0QGGZXzUmhxZi9G4P80d3XwwqGtK
0gx6yfkBXe3GLhU7UI9isnhn9MhLCUjNUt89lfNjtJz3CKUZDVqtb1YZmdv/7jrj
vzE5zUWn5kMm5St+9b0BtHnfy3OW2j8Cv/nmBAZIY+VFCRbYGIEC1FdY5igdAkqE
nzyPP7lKHK6Ta4i2eY8SkakJmN+HDcymvhppQxx09bAiZjpCmjpH3wSbkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh4d3Y7i1Ut7Oq9uieR3PPUOjWhMB8GA1UdIwQY
MBaAFP+UxLHTO6MJTsOI96c9jTnNlQhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVURXNkTTdvd2xPdzRqM3B6Mk5PYzJWQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xNzdmMjktYzRlYi00MTFmLTk1ZmYt
NWUxMDJkMTk3NzQyLzEvXzVURXNkTTdvd2xPdzRqM3B6Mk5PYzJWQ0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xNzdmMjktYzRlYi00MTFmLTk1ZmYtNWUxMDJkMTk3NzQy
LzEvXzVURXNkTTdvd2xPdzRqM3B6Mk5PYzJWQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUtVJcYe
XtTEbVKW0khzKCt2fhydaCVCvpavCRk9yn6Wbl8GEkYG3RFoBeNeoJDNw3ThJT/J
wwHSmw7GJhebX+ttaL9y/moiV97KLbA2srkYpH3kcTogslnc52iOjAwzauZWGorF
375e+C5/wvleaCiRoOjA+xd2HIeB78rw2Yq2HaAm3JxuuZkxHXR3RiVf82P3IMK4
DNr7fNBIHzeF9s0dql6Z+NQNQKmHSN43g5Neu3ZP0PHYrtEze4yEQfcTybHjCIXd
2xVz4beMDaDwIQioAXEzIMKVJnruOQg4cDe/kza/XR8i0UKCmvs+mHpCW6FH7vry
aDgxhr3Aky5R2A==
-----END CERTIFICATE-----