Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.mft
File:                     5V3Z2kKnxQvXaJuI1Am1dsrKTQE.mft (raw, json)
Hash identifier:          /kdoNlVn04ClR8fpBCWj87rk8oGsHGC7GhxmvpqecTg=
Subject key identifier:   53:67:86:0E:C6:37:0F:CB:B9:F7:AC:D9:D2:31:F6:AD:D9:25:27:CC
Authority key identifier: E5:5D:D9:DA:42:A7:C5:0B:D7:68:9B:88:D4:09:B5:76:CA:CA:4D:01
Certificate issuer:       /CN=e55dd9da42a7c50bd7689b88d409b576caca4d01
Certificate serial:       018B5C684C81216F9DF76B1394A0286C5DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.mft
Manifest number:          0C
Signing time:             Mon 23 Oct 2023 12:00:20 +0000
Manifest this update:     Mon 23 Oct 2023 12:00:20 +0000
Manifest next update:     Tue 24 Oct 2023 12:00:20 +0000
Files and hashes:         1: 5V3Z2kKnxQvXaJuI1Am1dsrKTQE.crl (hash: eevsEv3nPceBRwt/JU/HIdrCuF7P7UL1Sv5rzhV0XRc=)
                          2: HidJG2fCtzADFs-2SVBwlDZMuQE.roa (hash: UBtj9KaN33BcEBx6gxtv+vVuZLur1qKMyGUIW6vFELU=)
                          3: tMg4QDS7DA9PoJ29RBGunVTYeQA.roa (hash: AByCPBZmv+DRmL3uNofZ6KIfMVT3b8g3+JURX5GGqTE=)
                          4: u8KaJlE8E5lYi0hcdOFoonMFNYI.roa (hash: ES67h7IC/2efO/F903Szm4UQ3wke/xm3r1/rYNfdPog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5c:68:4c:81:21:6f:9d:f7:6b:13:94:a0:28:6c:5d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55dd9da42a7c50bd7689b88d409b576caca4d01
        Validity
            Not Before: Oct 23 12:00:20 2023 GMT
            Not After : Oct 24 12:00:20 2023 GMT
        Subject: CN=5367860ec6370fcbb9f7acd9d231f6add92527cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:d5:5d:65:8f:37:ec:22:ce:09:ca:fc:44:
                    3e:c2:de:26:14:1d:92:ad:9d:72:fe:05:af:a3:55:
                    58:54:db:8e:d7:8e:e7:a9:d8:01:85:68:b3:2f:bb:
                    fc:ba:6e:95:0d:6e:e8:7b:06:4b:fe:08:4e:98:f8:
                    e3:6f:86:ef:3e:20:8e:69:a9:eb:03:a4:f8:1e:43:
                    90:f9:98:ee:e0:49:0d:1a:e1:7f:7c:c0:91:4d:c6:
                    43:4a:bc:9b:bd:d2:85:dd:91:09:6c:49:fe:94:e9:
                    ca:67:f6:86:68:9b:9f:e7:85:48:b4:f7:06:d2:f8:
                    81:20:ab:a8:7e:16:d5:80:c0:30:fd:bc:4b:7e:4b:
                    7f:90:68:4e:8d:5f:d5:9c:a3:3d:ea:31:aa:d3:5f:
                    e7:6a:39:81:a6:37:fa:20:fc:40:7b:33:0b:db:c8:
                    69:b1:98:ed:79:d1:f8:4f:8a:58:8f:1c:2e:e1:cf:
                    95:e5:07:0d:80:74:50:53:35:11:a4:46:a8:be:4e:
                    ad:5c:ae:42:de:c7:c5:07:1d:07:23:1b:a1:47:ef:
                    e8:50:df:a3:fe:a0:a3:83:57:f4:e3:96:fd:09:52:
                    75:42:34:27:38:40:21:c6:44:af:44:da:1b:76:85:
                    4a:7d:ac:e0:bb:1d:bc:c9:2e:83:9f:fb:f0:3b:aa:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:67:86:0E:C6:37:0F:CB:B9:F7:AC:D9:D2:31:F6:AD:D9:25:27:CC
            X509v3 Authority Key Identifier:
                keyid:E5:5D:D9:DA:42:A7:C5:0B:D7:68:9B:88:D4:09:B5:76:CA:CA:4D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:e3:26:c6:db:2b:80:68:84:3a:0b:a0:36:75:30:6e:31:
         e4:31:af:01:bf:62:46:c9:59:8b:8d:c7:07:11:80:12:ca:95:
         4b:ed:25:05:12:83:32:9b:18:eb:75:76:08:20:fc:c2:f6:15:
         bf:f2:5b:e9:3d:76:a4:2e:87:d8:42:7e:c2:6d:57:99:20:f6:
         de:d9:66:3c:b6:8e:b5:e2:2b:ce:bd:53:22:98:f0:7f:d7:64:
         95:37:4e:da:8b:d2:f3:9f:38:4f:cc:c3:ec:83:d2:31:9f:b0:
         e5:44:d5:38:ac:f7:9a:8f:fb:62:04:be:34:c2:5c:24:dd:03:
         1a:d7:9b:27:13:72:8f:be:0c:09:ff:ad:23:61:47:df:4e:98:
         88:4b:a8:9e:06:95:fd:4a:54:e7:76:5b:00:ed:55:3d:a2:4b:
         70:d2:c0:03:9e:ff:e2:80:5e:3d:86:e9:48:26:ee:a6:e2:f1:
         8a:65:41:1a:66:bf:fc:ed:8f:55:c7:03:2a:5f:a0:5d:b9:5a:
         64:1b:5c:91:43:b1:26:92:fa:a2:8a:ea:77:32:2c:b0:a1:dd:
         e0:10:f4:91:a4:b9:18:2a:6b:9d:90:a9:c7:f6:66:43:ba:f5:
         45:2e:63:6b:7a:43:a3:1e:14:9f:c6:fb:21:bc:18:39:5f:a3:
         eb:b7:b3:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYtcaEyBIW+d92sTlKAobF3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NWRkOWRhNDJhN2M1MGJkNzY4OWI4OGQ0MDliNTc2Y2Fj
YTRkMDEwHhcNMjMxMDIzMTIwMDIwWhcNMjMxMDI0MTIwMDIwWjAzMTEwLwYDVQQD
Eyg1MzY3ODYwZWM2MzcwZmNiYjlmN2FjZDlkMjMxZjZhZGQ5MjUyN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMbVXWWPN+wizgnK/EQ+wt4mFB2S
rZ1y/gWvo1VYVNuO147nqdgBhWizL7v8um6VDW7oewZL/ghOmPjjb4bvPiCOaanr
A6T4HkOQ+Zju4EkNGuF/fMCRTcZDSrybvdKF3ZEJbEn+lOnKZ/aGaJuf54VItPcG
0viBIKuofhbVgMAw/bxLfkt/kGhOjV/VnKM96jGq01/najmBpjf6IPxAezML28hp
sZjtedH4T4pYjxwu4c+V5QcNgHRQUzURpEaovk6tXK5C3sfFBx0HIxuhR+/oUN+j
/qCjg1f045b9CVJ1QjQnOEAhxkSvRNobdoVKfazgux28yS6Dn/vwO6pteQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNnhg7GNw/Lufes2dIx9q3ZJSfMMB8GA1UdIwQY
MBaAFOVd2dpCp8UL12ibiNQJtXbKyk0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVYzWjJrS254UXZYYUp1STFBbTFkc3JLVFFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yN2RhZDItZTYxMS00ZjBjLTk0Zjct
ZWI3NmY4MTEwYzdmLzEvNVYzWjJrS254UXZYYUp1STFBbTFkc3JLVFFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yN2RhZDItZTYxMS00ZjBjLTk0ZjctZWI3NmY4MTEwYzdm
LzEvNVYzWjJrS254UXZYYUp1STFBbTFkc3JLVFFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYjjJsbb
K4BohDoLoDZ1MG4x5DGvAb9iRslZi43HBxGAEsqVS+0lBRKDMpsY63V2CCD8wvYV
v/Jb6T12pC6H2EJ+wm1XmSD23tlmPLaOteIrzr1TIpjwf9dklTdO2ovS8584T8zD
7IPSMZ+w5UTVOKz3mo/7YgS+NMJcJN0DGtebJxNyj74MCf+tI2FH306YiEuongaV
/UpU53ZbAO1VPaJLcNLAA57/4oBePYbpSCbupuLximVBGma//O2PVccDKl+gXbla
ZBtckUOxJpL6oorqdzIssKHd4BD0kaS5GCprnZCpx/ZmQ7r1RS5ja3pDox4Un8b7
IbwYOV+j67ezmg==
-----END CERTIFICATE-----