Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/5-smKRuemrWvyI7XbTr4GpB-X58.mft
File:                     5-smKRuemrWvyI7XbTr4GpB-X58.mft (raw, json)
Hash identifier:          NCDg0+Bw0eOd4JriwK9+UFgKX5cJnZJVWLhOP038PcI=
Subject key identifier:   37:66:C5:5D:EE:6E:E3:71:F7:10:82:A7:28:FA:CE:AE:72:BF:73:11
Authority key identifier: E7:EB:26:29:1B:9E:9A:B5:AF:C8:8E:D7:6D:3A:F8:1A:90:7E:5F:9F
Certificate issuer:       /CN=e7eb26291b9e9ab5afc88ed76d3af81a907e5f9f
Certificate serial:       018B68DB0DFBC8D755E9A53D979649853A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-smKRuemrWvyI7XbTr4GpB-X58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/5-smKRuemrWvyI7XbTr4GpB-X58.mft
Manifest number:          087F
Signing time:             Wed 25 Oct 2023 22:01:08 +0000
Manifest this update:     Wed 25 Oct 2023 22:01:08 +0000
Manifest next update:     Thu 26 Oct 2023 22:01:08 +0000
Files and hashes:         1: 5-smKRuemrWvyI7XbTr4GpB-X58.crl (hash: a1E/ymsYMg6JKZaV4fvONbTTBKtaMR3ogAvrJgK738U=)
                          2: cWSKoqgDuHOn08frxMdK36AxgZs.roa (hash: Za16vUKQ/IKOeJu/mDdh2uVejsfqXV/Mo8J+zoFLJA4=)
                          3: hcbcAxUCi-Ju5haFzQa64A8M08Y.roa (hash: w6sKWc7Zra1vAWhazauPAfTSOL99qVQpLRSv96rYV3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:68:db:0d:fb:c8:d7:55:e9:a5:3d:97:96:49:85:3a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7eb26291b9e9ab5afc88ed76d3af81a907e5f9f
        Validity
            Not Before: Oct 25 22:01:08 2023 GMT
            Not After : Oct 26 22:01:08 2023 GMT
        Subject: CN=3766c55dee6ee371f71082a728faceae72bf7311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:fa:8f:43:3e:22:9c:cb:4c:23:37:19:6a:
                    eb:7b:d3:1c:b0:cd:30:49:88:2b:2d:ff:95:8b:5d:
                    f2:44:d9:f5:e4:1c:4d:9e:61:ae:4d:f9:76:40:dc:
                    a2:d7:90:5e:7a:fa:7c:51:c0:13:1c:a0:12:07:d9:
                    6f:4e:83:b8:98:82:79:fb:d5:db:1f:bb:b3:60:10:
                    6e:e1:8b:e1:47:15:f1:c4:fc:f1:ef:ac:85:88:45:
                    de:a3:7e:c4:8e:43:ff:67:f5:0f:fb:f2:ff:1d:37:
                    4f:37:ac:80:f9:7f:78:e8:bc:f6:5d:4d:a5:5b:dd:
                    c8:6e:cd:75:8b:f3:4d:ca:05:2f:e6:13:24:4c:d3:
                    68:a0:94:b5:24:81:d8:a6:2f:ff:75:d8:79:3a:c6:
                    72:84:2f:86:4b:67:70:6a:d5:fd:29:0d:94:c7:c2:
                    9f:27:c4:15:95:a5:2b:18:f3:d6:d4:15:99:44:e2:
                    45:87:fa:d9:bf:01:b7:6b:63:00:c1:c7:74:3b:03:
                    bf:42:c3:79:71:1f:3b:5e:b5:ff:29:2c:ce:0e:f0:
                    80:57:18:7c:a2:1f:05:c7:71:45:3a:8f:d2:87:a3:
                    f9:2c:53:c4:31:0f:85:62:1a:24:92:1c:d9:0c:10:
                    46:75:77:ef:0c:72:d8:90:49:ae:ed:ca:8f:f9:54:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:66:C5:5D:EE:6E:E3:71:F7:10:82:A7:28:FA:CE:AE:72:BF:73:11
            X509v3 Authority Key Identifier:
                keyid:E7:EB:26:29:1B:9E:9A:B5:AF:C8:8E:D7:6D:3A:F8:1A:90:7E:5F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-smKRuemrWvyI7XbTr4GpB-X58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/5-smKRuemrWvyI7XbTr4GpB-X58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/5-smKRuemrWvyI7XbTr4GpB-X58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:68:42:a2:11:f5:48:f4:81:b8:9a:5b:e8:42:f5:e6:09:
         3f:8e:29:49:c9:c0:a2:91:72:94:e5:c4:cd:41:5b:d5:fd:d5:
         a8:10:77:55:f3:a7:e9:ac:99:14:8f:b8:0d:11:2e:ed:3d:ed:
         04:40:15:55:5b:c9:a8:4d:1d:4c:b7:69:70:9f:9e:e0:6b:a9:
         95:93:7b:26:c9:7d:d1:61:95:a0:9d:0a:32:0d:08:c9:22:81:
         5e:e5:03:0e:c7:c4:07:89:a6:96:7b:5b:88:72:1a:63:ad:c8:
         33:0b:7d:bd:d2:d1:b6:23:1c:6e:94:8b:64:d8:fa:d7:e1:87:
         db:74:87:b0:c5:44:14:29:92:89:4f:f7:1d:30:08:07:bc:66:
         b8:f9:36:14:26:59:75:49:26:0c:ca:d4:ef:f4:2c:56:db:ef:
         12:2c:5e:e8:fc:0d:49:be:ae:29:2a:9c:d2:65:60:a3:51:8c:
         55:6c:91:90:80:c8:af:83:69:3f:c5:43:05:86:68:9d:ae:35:
         64:38:f5:f6:a3:39:f0:e7:e4:9e:db:ae:2b:28:93:36:00:fe:
         cd:22:b5:53:ab:5d:61:43:a7:74:c4:c3:95:53:7d:5d:71:16:
         31:21:08:55:78:ec:3a:3e:58:f2:fd:07:88:a4:aa:b5:7b:45:
         f2:24:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----