Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.mft
File:                     5yhh0cnpCDXqlBbwWT0GPRSaU-I.mft (raw, json)
Hash identifier:          l2ZC//BnhmfPBb1kuewYlm2NPjYUowNlLM8O9fquyRk=
Subject key identifier:   FC:FD:07:61:B5:F7:E2:4C:93:8E:31:AE:AD:2E:45:1E:B4:F1:E2:0D
Authority key identifier: E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
Certificate issuer:       /CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Certificate serial:       018BEAACF8F778F958F1E96597823B645DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.mft
Manifest number:          0900
Signing time:             Mon 20 Nov 2023 03:01:26 +0000
Manifest this update:     Mon 20 Nov 2023 03:01:26 +0000
Manifest next update:     Tue 21 Nov 2023 03:01:26 +0000
Files and hashes:         1: 5yhh0cnpCDXqlBbwWT0GPRSaU-I.crl (hash: EyYEtbMs4l3sfaK/NDGpO8+lzxXfxaptD5jIi370AOI=)
                          2: vrduuRyg7VRT2lDKcfbIxlstgaI.roa (hash: XFBl6U/GNed+CixJ4vrcixOfhBzu85oiOEsaSVtdQ24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:ac:f8:f7:78:f9:58:f1:e9:65:97:82:3b:64:5d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e72861d1c9e90835ea9416f0593d063d149a53e2
        Validity
            Not Before: Nov 20 03:01:26 2023 GMT
            Not After : Nov 21 03:01:26 2023 GMT
        Subject: CN=fcfd0761b5f7e24c938e31aead2e451eb4f1e20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:07:70:6c:dc:75:3f:4e:4f:6f:c4:99:06:af:
                    61:f5:49:05:60:c0:f3:92:4a:82:bf:90:39:35:57:
                    29:f2:fc:3b:c4:d4:ce:ed:c3:5a:66:f5:58:77:f9:
                    62:a4:ad:b9:b3:69:c3:7a:01:b6:59:0d:b4:69:52:
                    f4:dc:cc:77:d7:43:8f:39:ea:90:59:89:6d:2f:41:
                    ae:c2:93:cb:de:ef:57:fe:6e:5c:be:11:fe:13:0d:
                    c4:c2:93:a2:46:79:5b:96:c4:d0:69:18:f9:fd:f1:
                    eb:d7:b8:af:38:2b:67:3d:30:83:d1:28:3e:9f:11:
                    3e:39:33:e5:fc:b2:37:73:88:cf:f7:1f:87:c6:c4:
                    7f:ee:78:06:fa:56:9b:fc:23:99:ba:60:b3:c4:13:
                    d2:92:eb:be:87:f1:bb:9a:be:df:34:0f:cc:de:ff:
                    fe:52:9b:cc:27:38:5c:7f:d2:9a:c5:4c:1b:59:3b:
                    78:31:9a:92:0e:12:fd:e9:b4:bf:11:fd:4b:3f:d0:
                    d5:4e:92:46:4f:2f:c0:a9:38:ad:21:74:46:47:2a:
                    0a:30:33:f8:77:a0:b0:09:83:a9:ad:7c:bf:f7:fe:
                    47:39:fb:36:31:d7:f3:7d:2c:d4:a2:18:3b:12:85:
                    cc:13:27:9f:56:96:f7:17:98:4a:66:16:5d:b9:aa:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:07:61:B5:F7:E2:4C:93:8E:31:AE:AD:2E:45:1E:B4:F1:E2:0D
            X509v3 Authority Key Identifier:
                keyid:E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:c4:11:eb:f0:e0:3c:45:60:af:a9:49:30:8b:12:c8:a2:
         13:1c:25:03:82:c1:9e:2f:5f:11:b0:01:d7:74:ff:96:90:0b:
         76:11:22:53:a1:a3:68:3c:d3:32:ef:88:38:24:80:62:c4:f4:
         78:0f:a2:34:b8:1d:bc:6e:a8:54:90:57:33:36:87:1b:f9:df:
         dc:c6:97:04:b3:3c:7d:0d:39:47:63:f8:ec:85:50:5c:c7:09:
         63:4d:cf:b0:70:83:66:98:d1:af:92:5d:3e:09:b5:d6:0d:99:
         46:26:23:cb:ce:1b:55:e5:cd:a6:75:4c:47:cc:be:34:11:33:
         98:bc:b3:3a:96:7c:0d:44:49:68:4f:54:52:e6:8b:99:44:25:
         82:99:e3:73:2e:b1:ce:47:24:18:ab:44:0d:29:9f:f2:70:fa:
         02:c5:35:13:9a:90:db:38:f5:86:e7:04:a3:31:93:7d:00:3c:
         fc:71:dc:0a:6e:d7:0d:91:f0:2c:74:00:cd:ec:30:5f:0f:f7:
         95:24:c9:3f:f0:3b:79:74:5c:f4:59:a0:64:be:c5:48:27:5d:
         6e:3b:ad:3d:d8:88:88:46:45:8e:36:16:bc:db:90:05:27:ae:
         ee:75:f7:03:33:09:53:65:97:08:d5:a3:38:4d:0b:d3:43:ed:
         9e:2f:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----