Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/5mXoB6mj47gAi3NQniRmWgNbIP0.mft
File:                     5mXoB6mj47gAi3NQniRmWgNbIP0.mft (raw, json)
Hash identifier:          zEJVIFXGdpLAh8+2qti7HM4F7rx1VXw71nwMQAcqSNQ=
Subject key identifier:   82:37:4B:78:FC:99:3D:96:60:CA:96:53:86:6D:5D:D2:5E:E3:5A:31
Authority key identifier: E6:65:E8:07:A9:A3:E3:B8:00:8B:73:50:9E:24:66:5A:03:5B:20:FD
Certificate issuer:       /CN=e665e807a9a3e3b8008b73509e24665a035b20fd
Certificate serial:       0185289EED6D7DD367B3D1F84491C111C79D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5mXoB6mj47gAi3NQniRmWgNbIP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/5mXoB6mj47gAi3NQniRmWgNbIP0.mft
Manifest number:          08D3
Signing time:             Mon 19 Dec 2022 04:23:02 +0000
Manifest this update:     Mon 19 Dec 2022 04:23:02 +0000
Manifest next update:     Tue 20 Dec 2022 04:23:02 +0000
Files and hashes:         1: 5mXoB6mj47gAi3NQniRmWgNbIP0.crl (hash: I2yOstKgFXviL9KwnSSaWSOFbzVGxXJSRo1bbuPSnfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:28:9e:ed:6d:7d:d3:67:b3:d1:f8:44:91:c1:11:c7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e665e807a9a3e3b8008b73509e24665a035b20fd
        Validity
            Not Before: Dec 19 04:23:02 2022 GMT
            Not After : Dec 20 04:23:02 2022 GMT
        Subject: CN=82374b78fc993d9660ca9653866d5dd25ee35a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:06:18:e1:bb:b8:a1:74:19:1a:63:4a:f6:
                    91:f2:5c:a3:d1:da:03:9d:2d:10:7b:13:6a:e0:29:
                    58:51:cb:31:60:55:0f:0b:61:8a:17:97:0a:b1:13:
                    c7:a4:13:e3:bd:d7:0c:ad:5a:cd:d8:f7:e3:ae:5c:
                    c3:8b:b3:9b:30:e9:ba:59:1e:2f:c4:7c:3f:f8:df:
                    5a:6a:7e:0a:da:20:0a:c3:cd:02:d4:aa:63:a1:1d:
                    a4:22:0a:1d:54:08:52:33:e7:f0:3d:2d:b5:78:1b:
                    18:1e:db:f9:f3:2b:b3:85:da:22:40:c4:96:b0:26:
                    34:49:2a:ba:8b:3c:37:cb:ba:01:ff:b2:08:aa:2d:
                    a6:bf:1c:e8:98:52:07:38:4a:f4:ac:db:37:1d:5d:
                    dc:09:97:42:51:60:16:d3:bc:48:e1:2f:01:ed:65:
                    7e:d0:6e:7d:34:13:75:80:cf:0e:13:1d:e0:d6:3a:
                    2a:ab:f4:72:7e:d1:a5:de:d5:55:36:23:99:da:41:
                    d3:2e:f9:f1:ff:1e:48:a4:de:30:63:ba:aa:5c:bb:
                    78:43:c0:b5:e3:a4:f3:7e:6e:16:4e:47:12:56:05:
                    0b:03:31:f8:7f:20:2c:ed:f9:7b:70:b1:f5:dc:1d:
                    9b:f9:be:14:a4:4f:c4:11:ba:c5:ef:4b:89:b0:83:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:4B:78:FC:99:3D:96:60:CA:96:53:86:6D:5D:D2:5E:E3:5A:31
            X509v3 Authority Key Identifier:
                keyid:E6:65:E8:07:A9:A3:E3:B8:00:8B:73:50:9E:24:66:5A:03:5B:20:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mXoB6mj47gAi3NQniRmWgNbIP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/5mXoB6mj47gAi3NQniRmWgNbIP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/5mXoB6mj47gAi3NQniRmWgNbIP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:88:12:ad:da:48:37:27:62:b9:77:81:de:1a:29:c1:70:
         97:b7:74:50:1f:70:0e:e3:10:0c:6e:6f:f6:66:28:c2:fb:41:
         9d:f9:0a:ab:00:c6:dd:da:0b:cd:9a:87:4b:2e:96:02:5d:2e:
         a0:05:0c:2a:1e:f8:50:2f:78:7c:08:78:3e:eb:4d:b4:90:4d:
         ee:e5:31:56:da:9f:67:83:19:8d:58:d7:44:ac:7d:e8:6b:72:
         02:99:48:d2:cd:ee:b6:a7:b3:4f:72:ee:c6:b9:be:1f:35:70:
         53:82:bc:d7:4d:36:48:8a:36:f4:b4:94:1b:68:e1:f0:c4:5c:
         33:37:7d:1d:1a:73:b1:6b:ac:d2:ca:c9:c6:94:05:3a:1f:2c:
         57:99:cb:94:c5:df:41:91:1c:8d:dd:7e:5a:0c:1d:fd:cf:97:
         98:01:5d:66:a6:97:68:ef:39:d5:95:d3:7d:48:2b:c7:4c:8c:
         8d:1f:e8:8c:de:b7:5c:23:95:9a:23:88:e7:db:42:ec:95:b0:
         3a:2e:75:e5:ae:2f:d4:97:0c:f3:e2:94:b4:c6:10:65:ba:ef:
         d5:00:0f:a8:9b:b4:a3:26:e8:e5:fd:f0:a2:9a:e0:1d:31:ec:
         16:e8:0a:e6:02:e8:4f:2c:68:af:ba:22:7e:bd:4d:c7:32:a6:
         92:9a:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----