Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.mft
File:                     5s-R57lJ_YQ9iOz84tFVTWrpgdk.mft (raw, json)
Hash identifier:          6UsWPnLaVP2Dylq8ozPmo7PJRHVUnzIEiKI25iDhK0c=
Subject key identifier:   91:71:10:8F:24:56:ED:22:D7:1C:64:A8:E0:88:DA:1A:D2:D5:E2:2E
Authority key identifier: E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9
Certificate issuer:       /CN=e6cf91e7b949fd843d88ecfce2d1554d6ae981d9
Certificate serial:       018B3824A7FCA4F7E05FCECE35E04CB15772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.mft
Manifest number:          085F
Signing time:             Mon 16 Oct 2023 11:00:08 +0000
Manifest this update:     Mon 16 Oct 2023 11:00:08 +0000
Manifest next update:     Tue 17 Oct 2023 11:00:08 +0000
Files and hashes:         1: 5s-R57lJ_YQ9iOz84tFVTWrpgdk.crl (hash: na/nLR1LS5FSseLzTOd6vgYeeMDBIg282Wc7MmMOKlE=)
                          2: AM2uTsG2Uvji2Y0Khcgb0n_lUlc.roa (hash: 4u4x4damg7eGc1Im+b5uf3VBJGXhJAwZy1LjfZAdwXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:24:a7:fc:a4:f7:e0:5f:ce:ce:35:e0:4c:b1:57:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6cf91e7b949fd843d88ecfce2d1554d6ae981d9
        Validity
            Not Before: Oct 16 11:00:08 2023 GMT
            Not After : Oct 17 11:00:08 2023 GMT
        Subject: CN=9171108f2456ed22d71c64a8e088da1ad2d5e22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:0e:94:36:ff:24:b0:68:72:81:f4:2e:5c:
                    51:83:11:a4:c0:f3:2a:01:41:ac:29:ee:5d:f2:d1:
                    41:13:1b:4f:8e:f4:31:3d:20:62:a9:5a:3d:3e:09:
                    12:48:bd:b9:15:f4:20:f9:e7:44:79:7a:9d:0e:f2:
                    23:06:ce:b4:41:19:f5:4f:d7:df:bc:ea:b0:f3:f8:
                    94:6f:a4:d9:16:29:6d:05:28:39:c4:02:10:48:76:
                    82:19:19:f2:82:51:53:89:cc:bc:07:d3:25:11:3e:
                    68:79:10:56:bc:0b:a3:b0:46:4a:49:eb:3a:89:b0:
                    af:92:28:d5:0c:89:0e:d4:8a:59:3b:08:03:de:26:
                    7e:de:a9:46:ae:88:45:b5:68:26:3c:50:a0:7d:c3:
                    e0:f7:45:a9:8a:6f:42:8d:0d:12:bb:86:47:92:14:
                    ac:af:92:17:f8:0a:9a:3e:95:d1:ef:e4:dc:b9:08:
                    73:c1:60:a1:ec:dc:cb:92:81:09:09:53:1b:11:f3:
                    2b:0c:6c:4b:59:99:d6:5f:12:2b:ff:38:fc:fe:1d:
                    70:2a:28:a9:b9:a5:ac:f2:c0:33:da:6a:df:ed:be:
                    38:a6:85:22:4e:bf:93:f8:8d:ae:9a:fc:12:80:78:
                    7a:e2:9c:9d:4e:32:97:50:93:d8:b8:87:e4:83:7e:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:71:10:8F:24:56:ED:22:D7:1C:64:A8:E0:88:DA:1A:D2:D5:E2:2E
            X509v3 Authority Key Identifier:
                keyid:E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:43:4a:3b:fc:72:8d:13:6b:98:82:07:45:49:f5:c0:69:bb:
         dc:74:b7:1d:bd:7c:6d:db:8b:b9:58:b6:5e:cc:4d:f6:bb:1f:
         19:63:a8:e8:9b:d9:46:7b:34:c4:15:ad:cc:54:8e:9f:9d:15:
         75:22:83:26:ce:39:7a:84:12:a2:01:07:8c:44:95:7f:d2:38:
         df:c1:f5:e2:64:bf:1f:55:1a:5d:9f:67:91:04:f0:9b:2b:19:
         b2:bb:04:41:aa:ee:b9:17:68:ff:3c:e8:66:e8:b5:e1:eb:6e:
         07:9a:33:42:fb:05:36:ed:bd:46:21:79:55:3f:1b:1e:a8:c1:
         48:fd:0c:8a:46:80:b1:1a:49:ca:b3:26:e8:67:a7:3c:d3:cb:
         3d:ab:3e:a2:eb:de:1f:73:3e:c8:7b:4f:f6:e2:fa:ad:e7:a1:
         31:02:6c:99:ea:50:ea:b4:b0:dd:bd:6e:bd:18:52:28:fa:69:
         4c:fe:24:cb:77:9f:ef:97:ad:bc:d1:15:f2:50:88:c9:38:dd:
         c0:87:0d:e1:48:ce:86:b9:4b:61:af:0f:bc:21:bd:c4:6f:d8:
         35:ef:af:c0:a3:96:4c:08:9a:60:7a:04:ea:b2:b9:f8:b3:69:
         e2:f5:da:cd:50:ed:53:c2:a3:ba:84:b8:e8:8a:47:1f:64:9e:
         c2:57:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----