Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/5cD7JWN0t9Q-IyyEjkLMez-D7SI.mft
File:                     5cD7JWN0t9Q-IyyEjkLMez-D7SI.mft (raw, json)
Hash identifier:          bZYaGaViGrd/Y8bO5s+fXWIyJavXCmCZcnk8nh41u+o=
Subject key identifier:   E2:32:48:85:72:54:F7:56:C6:7C:E9:C8:E0:D9:F9:98:9D:E9:33:F2
Authority key identifier: E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22
Certificate issuer:       /CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
Certificate serial:       018D867203C82FF55172F21C49568494D6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/5cD7JWN0t9Q-IyyEjkLMez-D7SI.mft
Manifest number:          0863
Signing time:             Thu 08 Feb 2024 02:00:35 +0000
Manifest this update:     Thu 08 Feb 2024 02:00:35 +0000
Manifest next update:     Fri 09 Feb 2024 02:00:35 +0000
Files and hashes:         1: 30rO3oS7fqVSxZ-mCM9t2_SPZws.roa (hash: CRlM448bYNNXn/Pd1wKfnUpZun1m0HyQCEUOO47/BY4=)
                          2: 5cD7JWN0t9Q-IyyEjkLMez-D7SI.crl (hash: edkj0JY1wVBQqIiuhYGl9w7yiberwLrRKP1UxFHorvw=)
                          3: MsKmRQXrVRDH2-IhEBu85lKWOtI.roa (hash: w8J6J3L+v+RyL82wfPOV/t9qYbkdvlxoHlcIFMn7m2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:86:72:03:c8:2f:f5:51:72:f2:1c:49:56:84:94:d6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
        Validity
            Not Before: Feb  8 02:00:35 2024 GMT
            Not After : Feb  9 02:00:35 2024 GMT
        Subject: CN=e23248857254f756c67ce9c8e0d9f9989de933f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:0c:f3:7c:4d:93:39:e0:e3:bc:9e:05:73:
                    0d:84:71:3c:cb:e4:cb:70:a8:e0:a1:52:f5:c8:78:
                    3b:57:20:ef:a5:cf:fd:55:97:a9:3b:67:e2:7a:78:
                    ce:8d:fc:e1:cc:1a:b8:29:54:9b:f5:74:eb:ec:6a:
                    c4:d7:bd:a3:8e:50:7f:a1:ed:4a:6d:14:b4:f9:80:
                    e3:01:7c:e0:0c:27:1f:8d:d9:e1:bc:3e:55:4f:82:
                    70:f5:44:f9:64:4c:7b:dc:fe:d6:49:48:b5:11:45:
                    12:2c:b0:62:11:d1:4f:61:0a:71:35:c8:3e:e5:6a:
                    73:ec:d2:12:7b:8a:54:d0:59:af:ed:37:c4:cd:90:
                    3c:e2:fe:84:b0:44:9b:c0:5a:3c:2e:32:3f:61:9c:
                    26:cd:3b:cd:52:f0:4a:6d:09:ae:5c:9b:6b:8e:66:
                    66:22:b0:3c:07:0f:88:76:66:45:aa:b8:44:83:7b:
                    38:7a:de:84:d5:23:2f:10:c9:97:47:de:96:70:4e:
                    8b:df:7d:68:ef:4d:23:ab:cc:a5:47:8c:bb:32:4e:
                    14:14:2d:19:54:76:63:b6:cf:a6:53:c9:bc:8a:58:
                    8e:c7:2a:36:63:58:2b:db:c9:52:4b:7c:77:d8:3b:
                    0f:c7:44:bc:e4:dc:3d:08:89:b4:e4:fd:02:06:1b:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:48:85:72:54:F7:56:C6:7C:E9:C8:E0:D9:F9:98:9D:E9:33:F2
            X509v3 Authority Key Identifier:
                keyid:E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/5cD7JWN0t9Q-IyyEjkLMez-D7SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/5cD7JWN0t9Q-IyyEjkLMez-D7SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:a1:74:b7:6b:7a:8e:fd:1b:0f:bd:17:ad:19:f2:a4:fd:
         3f:43:2c:80:89:e7:2c:78:f7:89:21:d7:f4:95:ab:aa:2a:84:
         92:62:0f:27:b2:dd:ea:fe:62:8d:51:68:9e:c9:df:37:5f:3d:
         aa:a3:64:63:0e:67:5a:67:80:a8:41:b0:28:91:78:d8:dc:cb:
         4c:e2:c7:ad:72:82:d2:4c:dc:c2:68:ea:7b:32:91:1b:de:07:
         82:cb:70:3c:86:b4:0c:80:03:25:f2:a4:17:8a:34:c7:4a:c3:
         5d:15:12:66:2c:e5:c6:4f:f8:e4:ce:3a:64:42:ec:73:0a:56:
         3e:ef:ab:5c:0a:a7:a2:01:48:73:03:db:68:03:d4:73:83:fe:
         da:1f:71:cf:e2:48:5e:29:09:49:75:fd:cb:8d:12:61:53:5c:
         d4:ab:93:e3:4f:57:89:20:25:7a:24:85:b1:4b:8c:7a:a4:cd:
         fa:0c:af:a2:24:06:3e:df:8e:81:03:e2:6c:c5:80:5d:75:ec:
         6b:ed:06:c3:18:43:23:a7:c2:42:3f:0d:a8:94:d6:0d:a6:9e:
         28:f3:25:cc:37:2c:b7:9c:3e:da:4c:b6:91:e7:b6:93:96:44:
         0b:7d:35:e6:28:10:fb:09:a3:ba:15:a2:4f:3c:fc:5b:78:b2:
         53:8e:c4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2GcgPIL/VRcvIcSVaElNavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzBmYjI1NjM3NGI3ZDQzZTIzMmM4NDhlNDJjYzdiM2Y4
M2VkMjIwHhcNMjQwMjA4MDIwMDM1WhcNMjQwMjA5MDIwMDM1WjAzMTEwLwYDVQQD
EyhlMjMyNDg4NTcyNTRmNzU2YzY3Y2U5YzhlMGQ5Zjk5ODlkZTkzM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFYM83xNkzng47yeBXMNhHE8y+TL
cKjgoVL1yHg7VyDvpc/9VZepO2fienjOjfzhzBq4KVSb9XTr7GrE172jjlB/oe1K
bRS0+YDjAXzgDCcfjdnhvD5VT4Jw9UT5ZEx73P7WSUi1EUUSLLBiEdFPYQpxNcg+
5Wpz7NISe4pU0Fmv7TfEzZA84v6EsESbwFo8LjI/YZwmzTvNUvBKbQmuXJtrjmZm
IrA8Bw+IdmZFqrhEg3s4et6E1SMvEMmXR96WcE6L331o700jq8ylR4y7Mk4UFC0Z
VHZjts+mU8m8iliOxyo2Y1gr28lSS3x32DsPx0S85Nw9CIm05P0CBhslyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIySIVyVPdWxnzpyODZ+Zid6TPyMB8GA1UdIwQY
MBaAFOXA+yVjdLfUPiMshI5CzHs/g+0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNEN0pXTjB0OVEtSXl5RWprTE1lei1EN1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lZjcxOTItMmNkZi00YWMzLWFjMDQt
YTZjMGNlYWFhYzUyLzEvNWNEN0pXTjB0OVEtSXl5RWprTE1lei1EN1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9lZjcxOTItMmNkZi00YWMzLWFjMDQtYTZjMGNlYWFhYzUy
LzEvNWNEN0pXTjB0OVEtSXl5RWprTE1lei1EN1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme+hdLdr
eo79Gw+9F60Z8qT9P0MsgInnLHj3iSHX9JWrqiqEkmIPJ7Ld6v5ijVFonsnfN189
qqNkYw5nWmeAqEGwKJF42NzLTOLHrXKC0kzcwmjqezKRG94HgstwPIa0DIADJfKk
F4o0x0rDXRUSZizlxk/45M46ZELscwpWPu+rXAqnogFIcwPbaAPUc4P+2h9xz+JI
XikJSXX9y40SYVNc1KuT409XiSAleiSFsUuMeqTN+gyvoiQGPt+OgQPibMWAXXXs
a+0GwxhDI6fCQj8NqJTWDaaeKPMlzDcst5w+2ky2kee2k5ZEC3015igQ+wmjuhWi
Tzz8W3iyU47EzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-fra.rpki-client.org