Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/5wiFPbRnjUN-xQkc5XfnFPmfKW8.mft
File:                     5wiFPbRnjUN-xQkc5XfnFPmfKW8.mft (raw, json)
Hash identifier:          BVFA/RNaNp/bh6zbSvYt08URcOb83kzixepdPS71Xk0=
Subject key identifier:   0C:60:B8:65:52:A8:14:EF:E7:27:34:BD:7C:AC:26:27:97:36:2E:85
Authority key identifier: E7:08:85:3D:B4:67:8D:43:7E:C5:09:1C:E5:77:E7:14:F9:9F:29:6F
Certificate issuer:       /CN=e708853db4678d437ec5091ce577e714f99f296f
Certificate serial:       0188E36D16FFC5998802C3CB62E0CD7B4F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wiFPbRnjUN-xQkc5XfnFPmfKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/5wiFPbRnjUN-xQkc5XfnFPmfKW8.mft
Manifest number:          0985
Signing time:             Thu 22 Jun 2023 14:05:57 +0000
Manifest this update:     Thu 22 Jun 2023 14:05:57 +0000
Manifest next update:     Fri 23 Jun 2023 14:05:57 +0000
Files and hashes:         1: 5wiFPbRnjUN-xQkc5XfnFPmfKW8.crl (hash: nC87FyfPdhQC5B0QXaw7V2DsciXO+AtSctDTJVvVI9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:6d:16:ff:c5:99:88:02:c3:cb:62:e0:cd:7b:4f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e708853db4678d437ec5091ce577e714f99f296f
        Validity
            Not Before: Jun 22 14:05:57 2023 GMT
            Not After : Jun 23 14:05:57 2023 GMT
        Subject: CN=0c60b86552a814efe72734bd7cac262797362e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:55:6f:05:85:49:f4:fd:22:26:be:1d:c9:96:
                    7c:94:e9:b5:ac:f9:d1:a1:a9:1b:c1:1b:82:a8:27:
                    ac:d1:97:6e:5e:8c:34:d8:16:38:3d:bc:e9:48:19:
                    87:ab:a8:ee:60:d6:f1:12:c7:d7:a4:4f:ca:1b:12:
                    36:cd:00:1c:57:ef:db:11:32:23:40:4a:7a:e1:a4:
                    14:f0:cc:e6:6e:8e:34:d1:0d:27:cf:33:39:15:97:
                    c7:4a:7d:e2:c8:6e:18:e1:d6:6c:91:d4:69:ec:94:
                    50:9d:0f:01:11:fc:20:88:ad:81:d4:1b:30:da:d5:
                    34:44:47:2f:56:9a:ab:53:fc:e0:c5:cc:e5:2e:d8:
                    43:79:6a:82:3f:62:50:a4:0f:c7:af:7b:b4:9d:1f:
                    30:81:30:9a:b8:e3:ed:8b:1d:0b:fa:2b:9a:c3:6b:
                    1e:fd:60:3d:8a:6b:09:98:71:d4:a0:58:3b:aa:58:
                    61:81:63:08:6f:5f:97:de:72:a5:9f:1d:c8:c8:56:
                    8c:43:ed:53:fd:d3:bd:84:35:73:cd:5e:a8:69:e2:
                    eb:bb:45:b8:a1:6a:a5:58:2f:cf:2e:18:fa:4a:b9:
                    ac:20:b5:be:89:64:7d:3e:f9:64:7b:81:c4:11:b0:
                    b1:1b:5d:5c:f1:d0:ae:65:c4:89:a4:27:5b:b7:02:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:B8:65:52:A8:14:EF:E7:27:34:BD:7C:AC:26:27:97:36:2E:85
            X509v3 Authority Key Identifier:
                keyid:E7:08:85:3D:B4:67:8D:43:7E:C5:09:1C:E5:77:E7:14:F9:9F:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wiFPbRnjUN-xQkc5XfnFPmfKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/5wiFPbRnjUN-xQkc5XfnFPmfKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/253d90-418f-4d5c-b78f-ba6e58075c79/1/5wiFPbRnjUN-xQkc5XfnFPmfKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1f:72:2b:90:c0:10:ae:14:b1:e7:dd:fa:42:81:3b:49:95:
         e5:40:7b:24:f6:91:3c:7c:32:71:9f:bd:41:eb:35:00:36:48:
         df:2d:3b:e4:1c:f9:6e:d9:ad:1c:9e:f5:2b:32:d4:9e:16:2f:
         e1:47:6a:2d:c1:7e:b2:44:32:83:ac:0e:96:95:24:b6:58:f7:
         25:01:2a:64:f2:6d:3a:85:d6:ea:26:10:8e:0f:ed:34:38:97:
         66:9d:21:e3:76:c0:ba:7a:09:a0:05:38:0d:93:de:70:20:2d:
         19:7c:b8:42:cb:ea:1c:d1:3b:7a:a7:ee:89:8a:67:94:7c:7d:
         67:e0:c3:18:07:93:7a:02:13:13:bd:1f:93:59:ce:ce:03:55:
         62:29:f2:d7:0a:4f:44:bc:b4:ba:95:76:5e:f9:8c:8e:fe:95:
         5e:95:ad:d0:23:b5:12:1f:a8:72:b0:ce:13:68:91:e0:86:9e:
         8d:20:f1:14:6d:8d:f4:8d:45:7a:87:99:d8:a0:10:e0:98:30:
         48:a2:c9:dd:e1:86:02:3b:85:c6:fb:81:ec:da:8c:79:26:f3:
         7d:2e:ef:65:73:e8:5c:c6:9a:3c:30:cf:bf:ca:96:ca:51:29:
         aa:db:19:75:a8:05:51:55:16:f0:6d:ce:bb:9f:35:26:32:d0:
         9f:34:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----