Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.mft
File:                     Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.mft (raw, json)
Hash identifier:          p/Q3SSWCl/pClsIBuWd/11ORmUM+gMqWYW35IhDjT30=
Subject key identifier:   57:76:E4:07:FC:AA:5E:E0:63:D0:15:46:81:7C:4D:A5:94:1A:07:2E
Authority key identifier: 5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
Certificate issuer:       /CN=5e7e445904943e99830cb094988720fc977b1fbc
Certificate serial:       018F7BB48161345C15AE511DBD5E41A27156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.mft
Manifest number:          1172
Signing time:             Wed 15 May 2024 10:02:58 +0000
Manifest this update:     Wed 15 May 2024 10:02:58 +0000
Manifest next update:     Thu 16 May 2024 10:02:58 +0000
Files and hashes:         1: Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.crl (hash: M+VBEpn7sCpYiyHT9GvFhv61cLRlmRE+zRV/tZg1C1U=)
                          2: a8sC76PqZdLBiV0r0xPZeothzSU.roa (hash: J4euFR1wWuAgw4KAKB5xoRF4wUOMbZg62tNF8aakMrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b4:81:61:34:5c:15:ae:51:1d:bd:5e:41:a2:71:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7e445904943e99830cb094988720fc977b1fbc
        Validity
            Not Before: May 15 10:02:58 2024 GMT
            Not After : May 16 10:02:58 2024 GMT
        Subject: CN=5776e407fcaa5ee063d01546817c4da5941a072e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:59:47:20:aa:5f:3b:c9:81:64:c8:a7:8f:
                    25:7c:f6:c7:57:f8:46:cb:b1:58:65:3e:33:fc:06:
                    5b:65:32:92:cf:3c:b2:95:24:c0:42:2a:c8:c0:58:
                    f0:bb:49:33:de:54:79:54:26:ec:a2:9b:13:9c:5f:
                    57:47:07:96:71:ce:2c:fb:e1:b5:0f:e5:79:d9:f8:
                    c3:d0:99:15:70:fe:4f:b1:8a:c4:32:67:f1:8a:8a:
                    00:1b:c6:cf:4f:02:b1:99:e4:3f:47:3d:27:d1:44:
                    db:b8:23:30:10:51:1f:5a:1e:03:75:e4:62:36:85:
                    e6:90:25:52:57:3e:41:8c:39:b9:58:8d:4d:36:2d:
                    20:d0:ff:cf:58:3c:0a:3a:ee:be:e7:d5:78:f5:5c:
                    64:f8:66:74:0d:b6:4d:a1:80:64:9f:92:1a:c9:73:
                    4d:b2:8f:2e:09:7d:8f:d8:e5:90:51:04:a1:82:69:
                    9a:78:00:f6:85:3a:2b:e3:54:ea:56:99:24:e9:8d:
                    e3:7b:82:70:bc:f4:73:f8:5d:13:f9:ba:62:bc:01:
                    6c:52:7a:e0:c6:96:f0:3a:38:07:59:bf:83:7d:b2:
                    dd:4b:ee:9c:da:d9:22:5f:47:2e:2c:8d:ad:2b:fa:
                    26:3e:51:13:c7:47:4a:5b:62:61:52:40:fe:4a:87:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:76:E4:07:FC:AA:5E:E0:63:D0:15:46:81:7C:4D:A5:94:1A:07:2E
            X509v3 Authority Key Identifier:
                keyid:5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:81:21:52:ed:47:d3:3c:05:05:20:ed:93:db:a8:f2:f3:37:
         bf:e0:7a:c0:b9:2f:90:ce:24:ea:c2:72:85:81:be:40:79:ea:
         6a:d8:98:af:68:fb:50:c6:8d:99:08:46:b0:15:b9:41:dd:a4:
         9d:c8:51:8c:e6:21:72:a0:22:ba:21:21:5e:7c:21:d4:28:3c:
         67:67:16:5b:1b:40:4d:0d:1b:0c:2f:27:9f:36:63:b2:99:93:
         c4:c6:0d:0a:b4:23:f5:f6:9e:1d:0c:71:6f:4c:6e:10:a4:ac:
         70:5e:83:3f:84:04:9a:bb:28:08:1b:0b:cc:c9:9f:f0:87:fc:
         c7:ec:0c:15:9a:8c:de:8a:dc:f9:ad:0c:5c:42:22:80:7d:ff:
         12:f1:78:34:4e:38:57:52:2f:f7:e0:05:94:dc:07:2c:fc:c0:
         39:35:ee:69:34:45:31:ed:5d:a6:80:7d:73:3a:02:43:66:45:
         eb:53:13:3d:5e:90:7f:69:61:85:ec:e3:79:56:c4:f2:2f:74:
         27:f6:b7:11:ff:7e:de:fd:ba:c5:00:01:4b:bf:cf:33:3f:14:
         1f:6b:06:5c:3c:34:72:c0:4d:05:55:4c:de:63:64:ca:74:f3:
         f6:92:f7:70:fe:35:e1:10:8d:cc:26:c3:80:78:14:f6:64:bd:
         e2:2a:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----