Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft
File:                     5U3oM48Z9DqxsNL44SEttITZ6QQ.mft (raw, json)
Hash identifier:          LIuVlVu8bk2RiZn2EoSLS9wD6Q6w+hWGSw8WT2c/1OU=
Subject key identifier:   43:F7:87:EC:A3:52:88:70:07:E6:62:C7:BB:0B:C3:08:CB:2E:EE:EC
Authority key identifier: E5:4D:E8:33:8F:19:F4:3A:B1:B0:D2:F8:E1:21:2D:B4:84:D9:E9:04
Certificate issuer:       /CN=e54de8338f19f43ab1b0d2f8e1212db484d9e904
Certificate serial:       0190C881A0577487A7659FE56E370341B43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U3oM48Z9DqxsNL44SEttITZ6QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft
Manifest number:          90
Signing time:             Fri 19 Jul 2024 01:00:56 +0000
Manifest this update:     Fri 19 Jul 2024 01:00:56 +0000
Manifest next update:     Sat 20 Jul 2024 01:00:56 +0000
Files and hashes:         1: 5U3oM48Z9DqxsNL44SEttITZ6QQ.crl (hash: DOye6aETIWCQ3U+UaDU1Cw1qLOO6eqx/8+Xjw7Jr18U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c8:81:a0:57:74:87:a7:65:9f:e5:6e:37:03:41:b4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54de8338f19f43ab1b0d2f8e1212db484d9e904
        Validity
            Not Before: Jul 19 01:00:56 2024 GMT
            Not After : Jul 20 01:00:56 2024 GMT
        Subject: CN=43f787eca352887007e662c7bb0bc308cb2eeeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:ae:ac:6a:f7:04:7a:36:7f:15:8d:ac:06:
                    cf:49:69:c1:33:96:9d:97:62:c2:82:79:90:4f:8f:
                    98:b5:87:95:57:c2:c7:8b:b5:72:b9:31:0c:ea:42:
                    de:83:f0:bc:8f:cd:7b:aa:9c:ba:33:3f:f6:54:7b:
                    79:a1:26:68:88:c8:80:4e:91:82:23:cd:79:a8:22:
                    f3:12:cb:ee:14:42:f7:e8:6d:77:13:93:c3:0e:7c:
                    1c:4c:d4:8c:fd:bb:1e:b0:c8:31:c7:b3:f9:46:8c:
                    a5:74:c2:7e:29:c0:77:27:fd:e2:f5:e8:7e:96:41:
                    df:e0:93:d9:59:7c:91:93:b9:b8:3c:29:de:24:12:
                    7f:4a:d3:fa:51:da:6c:e6:7e:31:d7:4c:24:2a:15:
                    87:30:f5:e9:3d:47:51:f1:0c:12:26:16:22:82:51:
                    7d:98:92:d8:09:0d:bb:3c:58:ce:cf:75:a5:f9:01:
                    96:37:be:e4:61:e5:b3:f2:ce:a5:bd:78:f5:e3:1f:
                    2e:dd:d4:93:1c:7a:42:cc:a5:36:c4:06:92:53:fa:
                    2c:35:ff:46:4b:75:9d:4a:bf:52:76:f5:e7:5b:d0:
                    d5:87:49:e1:9b:45:b3:6b:4b:c3:73:10:e1:56:e4:
                    e6:c9:82:14:18:9c:80:77:12:88:ba:e1:94:55:8f:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F7:87:EC:A3:52:88:70:07:E6:62:C7:BB:0B:C3:08:CB:2E:EE:EC
            X509v3 Authority Key Identifier:
                keyid:E5:4D:E8:33:8F:19:F4:3A:B1:B0:D2:F8:E1:21:2D:B4:84:D9:E9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U3oM48Z9DqxsNL44SEttITZ6QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:78:03:bf:3e:ee:30:0d:3c:72:0e:71:84:6d:25:0d:53:57:
         00:31:23:62:7c:dc:2c:2c:99:48:5b:21:ed:ee:7d:9c:71:ca:
         23:23:22:49:fe:c1:d7:c5:56:3f:ad:a1:8f:f3:c1:02:01:b0:
         27:fe:fa:c2:11:77:46:f7:a3:b0:ee:69:08:7b:88:f8:9b:68:
         15:84:b3:3b:21:a1:eb:43:e5:11:fd:02:dc:1b:d1:e9:9b:ab:
         44:f5:72:62:17:20:2f:f3:2e:42:8e:81:d2:27:21:a0:85:d9:
         a7:dd:01:64:68:15:aa:72:80:f8:1e:c5:2d:2a:92:20:c4:ee:
         66:e3:1c:ea:fd:68:63:0e:94:69:37:b9:79:8f:9d:4a:27:49:
         61:60:1c:ed:dc:85:3c:91:90:60:de:be:7d:46:94:42:f4:28:
         a4:bd:94:fc:e9:46:78:d7:59:db:5a:02:79:fd:48:e8:a9:20:
         c4:46:1f:17:2e:ef:00:ea:6f:5d:70:da:1c:0d:29:05:94:81:
         ab:7e:12:fb:a8:53:11:62:c4:e2:9a:2a:ff:ca:d4:a4:22:b6:
         1b:7f:7a:28:d2:ec:07:b6:10:a6:fb:a2:5e:bd:20:05:8b:60:
         f2:2e:9d:ff:1b:5a:c7:6a:11:61:22:d5:85:ab:76:2b:f4:5d:
         e9:da:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----