Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.mft
File:                     5QH-CXiXc5xb-bJXMTp2l04kJVY.mft (raw, json)
Hash identifier:          KX7MZkch1rOu47hOIjpoiDnLJR3B9KEkun1P1BieVZ8=
Subject key identifier:   68:16:55:4F:7B:07:2C:64:31:4F:B1:64:2A:09:E5:D2:95:16:9D:D9
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Certificate issuer:       /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial:       018BFBA01DC6BA9EA889B5B2B4DE4A185BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.mft
Manifest number:          0848
Signing time:             Thu 23 Nov 2023 10:00:56 +0000
Manifest this update:     Thu 23 Nov 2023 10:00:56 +0000
Manifest next update:     Fri 24 Nov 2023 10:00:56 +0000
Files and hashes:         1: 5QH-CXiXc5xb-bJXMTp2l04kJVY.crl (hash: 08Kqrpjm5bjNt7i6/9/1beOjjNCgkq8sPYjuIxImywQ=)
                          2: _SF-0Yv815wBEebXw6t6UJeNsqI.roa (hash: dQ6kR7EYLQkoIiwxys1xJT9Zs0rMD2ILMjOltV7EI2I=)
                          3: dyWTHQ1Tr4hUO7pIXPaSF0PKo6I.roa (hash: zxwdJhgc/IroaiYpg5JdmTmBJhkmEqrTPfvLBccoRqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fb:a0:1d:c6:ba:9e:a8:89:b5:b2:b4:de:4a:18:5b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
        Validity
            Not Before: Nov 23 10:00:56 2023 GMT
            Not After : Nov 24 10:00:56 2023 GMT
        Subject: CN=6816554f7b072c64314fb1642a09e5d295169dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:48:76:b4:4f:25:fc:33:de:30:ef:0a:81:
                    48:3a:50:ac:57:a8:38:65:e2:dc:63:f2:ed:10:d8:
                    d8:73:39:48:f1:c7:4a:65:3a:86:c0:23:51:c1:55:
                    62:47:d3:95:b9:48:6f:5a:86:82:a0:ec:07:23:1f:
                    52:e0:2a:77:e5:fa:8a:fc:a0:a5:2f:f9:64:cc:73:
                    64:56:e3:52:d3:50:a4:12:95:31:91:d4:57:df:ec:
                    86:90:ef:7f:d1:cc:a7:1e:91:72:f5:86:94:50:eb:
                    82:fe:0a:5f:67:cc:49:eb:a9:20:04:88:b8:3c:66:
                    73:1f:8c:73:24:a9:68:41:c0:c5:d6:f0:e2:f6:ad:
                    2c:a6:79:6c:32:6d:cd:3a:ce:30:90:16:66:66:46:
                    1d:53:8c:8c:92:9f:77:e1:a3:90:7f:55:39:5a:45:
                    2d:0c:e4:45:dc:53:db:e8:c7:83:a2:2f:f0:34:cc:
                    85:b7:fd:49:81:b0:ea:a1:5b:d3:35:3e:9e:e5:f1:
                    77:36:1a:f8:70:d4:94:2f:66:a0:73:9a:fa:96:3e:
                    51:4a:89:72:23:2e:b8:6d:81:15:dd:47:fa:b8:92:
                    a8:98:80:29:d9:2b:b5:b0:5c:55:27:37:a9:5a:ec:
                    b0:db:73:5c:0e:1e:66:ec:b3:0d:2c:a4:0f:42:79:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:16:55:4F:7B:07:2C:64:31:4F:B1:64:2A:09:E5:D2:95:16:9D:D9
            X509v3 Authority Key Identifier:
                keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:33:31:ae:34:02:17:c3:19:51:b2:fb:0c:ac:7b:bb:b0:47:
         3d:1f:ad:1d:91:33:1e:37:0c:0a:3b:d5:a1:7d:a8:d2:21:dc:
         6c:45:38:56:d2:6f:b9:08:0c:9e:fb:96:3c:7c:d5:e8:50:ea:
         e3:2f:f1:1d:f9:36:28:e2:ed:fc:d0:e8:7e:bb:e3:ca:2e:45:
         16:e9:ed:49:df:05:e2:de:e2:41:39:46:7c:dd:7c:19:f0:38:
         03:64:1a:8d:da:75:b0:c0:dc:79:5a:26:bd:71:5c:71:93:15:
         27:f2:16:cb:2d:fa:fd:f8:2b:90:ef:cc:8c:ab:8a:3b:0b:ef:
         a6:d7:42:ea:4e:4f:db:e8:da:d2:b5:6e:ef:29:f0:6f:1c:e8:
         e4:d5:4f:a5:b3:25:62:fd:5a:6b:48:33:d6:a7:e7:fc:ee:1f:
         06:3f:1b:d7:a9:3c:73:97:9f:6e:a6:cf:a8:cc:54:9b:a9:e7:
         44:26:ba:26:eb:48:aa:b0:6b:0e:88:e2:00:a5:4a:96:8f:61:
         96:3a:e0:b2:2a:c5:1e:34:2a:94:e3:b6:f6:75:ae:b9:8e:70:
         0c:b2:66:44:9d:c2:92:a1:dc:a5:78:23:b0:ad:92:c2:1e:9e:
         1e:4a:3e:c4:e1:3e:7a:13:8b:36:12:7a:d3:b1:6f:3b:4e:51:
         5d:d9:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----