Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/5Sip6ao1ZHafyiVR49AtIx3HPO8.mft
File:                     5Sip6ao1ZHafyiVR49AtIx3HPO8.mft (raw, json)
Hash identifier:          91t8eX/y5hjKQyxRf8zlVFoDO7VD1l7VYKlpf7vV7fM=
Subject key identifier:   72:D0:C2:3F:FF:B0:08:EF:94:4A:A9:04:EF:C4:32:CD:7E:81:2D:4B
Authority key identifier: E5:28:A9:E9:AA:35:64:76:9F:CA:25:51:E3:D0:2D:23:1D:C7:3C:EF
Certificate issuer:       /CN=e528a9e9aa3564769fca2551e3d02d231dc73cef
Certificate serial:       018BC820DD1AE3ED5FA7E632C9EF4D3F81E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Sip6ao1ZHafyiVR49AtIx3HPO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/5Sip6ao1ZHafyiVR49AtIx3HPO8.mft
Manifest number:          078A
Signing time:             Mon 13 Nov 2023 10:01:18 +0000
Manifest this update:     Mon 13 Nov 2023 10:01:18 +0000
Manifest next update:     Tue 14 Nov 2023 10:01:18 +0000
Files and hashes:         1: 07aczdaf086z73LodXjr0wtNkcs.roa (hash: e5GcAEjLRxhKc8Tu2tV8S/d4e13LqjyxTk8oQbKWwdg=)
                          2: 5Sip6ao1ZHafyiVR49AtIx3HPO8.crl (hash: OQ3aywdXObitgnj3ANiE52UXGtgaylvJhA9mA/AqQ4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:20:dd:1a:e3:ed:5f:a7:e6:32:c9:ef:4d:3f:81:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e528a9e9aa3564769fca2551e3d02d231dc73cef
        Validity
            Not Before: Nov 13 10:01:18 2023 GMT
            Not After : Nov 14 10:01:18 2023 GMT
        Subject: CN=72d0c23fffb008ef944aa904efc432cd7e812d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:06:7c:b1:04:69:5d:ac:8c:16:e9:e4:d4:1d:
                    ef:11:da:9c:0b:ec:47:34:85:ef:88:42:8d:5c:d9:
                    a4:74:de:39:b2:c1:f4:80:7a:cf:67:9e:f9:c6:fc:
                    f1:7d:65:aa:fe:cf:23:b3:c5:e8:7e:1d:10:b5:b2:
                    57:5a:b0:e8:d1:21:43:b2:4a:a6:b6:2a:55:d1:46:
                    6c:d1:29:3e:7c:b0:c0:5b:77:22:df:97:38:31:24:
                    bc:2e:49:02:36:71:f8:3f:f0:98:83:f2:94:bc:8d:
                    f0:d2:98:9c:6b:31:4e:0a:38:2d:a7:fa:d5:a4:c3:
                    c7:b9:cd:dc:db:95:94:e8:85:63:d8:a4:8a:3e:a1:
                    af:64:d0:26:f5:1e:e1:20:a8:0b:5f:ac:52:4f:8b:
                    bc:17:51:08:c6:60:e7:8c:06:b7:51:ad:f6:0d:b2:
                    10:57:01:9f:f3:f3:e0:70:33:a5:9f:fe:d9:6f:e8:
                    9f:55:4d:a7:59:1c:5b:7e:df:89:86:35:69:64:b2:
                    a9:17:31:7c:79:eb:df:45:fd:e1:07:ec:39:c1:87:
                    f8:ce:05:6a:73:66:4b:dc:e7:2b:85:f3:a7:a7:f2:
                    b3:b7:4a:c9:b2:4a:43:12:db:bb:b1:01:c1:ba:26:
                    42:4a:0c:9f:c9:07:7f:14:a0:f7:37:0b:27:89:50:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:C2:3F:FF:B0:08:EF:94:4A:A9:04:EF:C4:32:CD:7E:81:2D:4B
            X509v3 Authority Key Identifier:
                keyid:E5:28:A9:E9:AA:35:64:76:9F:CA:25:51:E3:D0:2D:23:1D:C7:3C:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sip6ao1ZHafyiVR49AtIx3HPO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/5Sip6ao1ZHafyiVR49AtIx3HPO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/5Sip6ao1ZHafyiVR49AtIx3HPO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:87:1d:c0:16:37:2f:91:7e:32:57:dd:ba:fc:20:e3:87:
         5c:90:c7:9c:90:bb:f3:a2:b2:f6:a2:c0:1a:ca:06:65:a7:68:
         b8:16:60:23:26:ba:6f:63:46:1b:f1:6b:b2:33:82:d8:9b:6b:
         50:40:64:0a:23:95:da:f4:b2:e6:74:a7:f5:bf:6f:92:24:23:
         5e:ed:a7:1d:33:83:91:bb:ed:74:2d:85:32:13:e3:ac:ca:d8:
         c3:ae:09:9a:6a:26:05:21:da:e5:86:2c:cf:92:62:0f:d5:07:
         4b:d6:a0:07:27:d4:dd:9a:6b:29:25:76:4a:85:8d:d8:d0:8b:
         e0:0d:97:f9:c3:54:86:e3:13:19:3f:2f:8a:85:15:14:80:b7:
         f0:c2:e2:46:02:67:88:8f:b9:ea:26:0e:54:d5:79:f6:a6:ad:
         cb:60:3a:9c:f4:70:1c:b3:83:9b:66:66:b0:e4:dc:16:41:a4:
         ca:ce:10:a5:c9:5b:34:21:49:00:c0:b6:c3:ca:23:22:3a:a5:
         8c:c4:00:89:19:ee:c3:21:b2:5a:d0:61:8d:b7:23:1c:ff:5e:
         cb:16:bf:ef:b7:7e:eb:35:69:e1:cf:75:ed:b6:06:43:f9:b4:
         2e:8d:af:84:a1:7c:be:95:46:18:46:50:39:95:79:96:40:87:
         88:bc:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----