Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.mft
File:                     OVAwNhWspuX29bVpHHwsjcpfI00.mft (raw, json)
Hash identifier:          708VhIjBF+ZVl7SOzIGNfxMI/40UKJwLCugG7XTvqFg=
Subject key identifier:   66:3C:91:46:56:45:D4:BF:BF:5F:2C:97:21:7E:05:80:68:EB:C5:2D
Authority key identifier: 39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
Certificate issuer:       /CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Certificate serial:       018FF148D2D309D1B96DADDDFD287FFEC15D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.mft
Manifest number:          11B2
Signing time:             Fri 07 Jun 2024 06:00:32 +0000
Manifest this update:     Fri 07 Jun 2024 06:00:32 +0000
Manifest next update:     Sat 08 Jun 2024 06:00:32 +0000
Files and hashes:         1: 976H3ZxeBlj4HLXPygIp3Icoka4.roa (hash: atcLM8pAdaorYbVKsUVrv4g3UA+MF2Mxd//buaakjPI=)
                          2: OVAwNhWspuX29bVpHHwsjcpfI00.crl (hash: EN82KLMuTJnrOnyP0+FeAdXlcehe3br62slH3HJyit8=)
                          3: S387aWDkfFt48htpm8QR4GuqGWk.roa (hash: +t8M+afgXGMsMKSeGQf/E/0pQgLXqc+qBs5gwR0xCqE=)
                          4: _9RCnWS_jxDCMj9d7dQC2yVuOXw.roa (hash: ekWLW2ujHypkcQNj/vaehvnHuWyOJ+8OMaD36x+TF+M=)
                          5: k-nuwK-F95AFujZnAFrvKZK1mwc.roa (hash: G/0ROXHfv9sHSwi05OgpwZ7Y9ZEUyH1d9Zxje5rQQdg=)
                          6: r97tKQr7JjbyCHWHUFqOxhuR3KM.roa (hash: SgSu0UkV3mU+GdquaM0MRD4Q+rxh1diMxvd4zSGG46k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f1:48:d2:d3:09:d1:b9:6d:ad:dd:fd:28:7f:fe:c1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
        Validity
            Not Before: Jun  7 06:00:32 2024 GMT
            Not After : Jun  8 06:00:32 2024 GMT
        Subject: CN=663c91465645d4bfbf5f2c97217e058068ebc52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:fc:a0:25:7b:bd:24:38:f9:e2:b2:b6:e2:
                    4c:d8:41:4b:e7:ef:d5:75:33:c7:b5:1d:f6:c7:41:
                    72:58:68:96:ed:94:5a:32:ef:08:a0:2b:5c:0c:bb:
                    8e:ca:0e:33:5b:e2:bf:12:1e:c9:ec:eb:5d:03:f1:
                    20:04:fe:a6:09:93:bc:dd:92:79:2e:2a:e0:b0:7a:
                    a1:86:31:aa:db:d3:f1:c5:f0:b7:f6:59:7d:d4:eb:
                    c6:04:4e:82:01:0f:6d:b1:48:4b:05:ef:5e:97:48:
                    24:c0:26:31:de:0e:5b:b4:13:d1:ad:a1:98:80:7b:
                    33:ca:c1:55:ff:e6:9e:09:14:67:45:29:6d:e7:81:
                    24:8f:0b:56:b0:bd:c4:e5:3c:d0:11:a6:e7:61:06:
                    33:80:18:8d:0d:d5:c2:45:b8:95:66:a7:d6:1f:8f:
                    48:10:44:33:ce:9b:c0:ee:c0:bb:e6:90:23:00:29:
                    f5:ee:d3:31:80:e4:46:37:ba:f8:b4:4b:e6:ab:80:
                    81:42:ff:cf:c6:33:aa:ba:eb:ab:41:7a:59:80:a0:
                    4a:dc:72:9c:f6:e5:05:69:3a:58:91:54:0f:70:37:
                    4d:33:83:e8:d8:95:6b:16:d4:a3:71:df:5f:8f:d5:
                    5d:eb:ac:ef:eb:08:db:a5:a9:99:6d:6a:dc:38:fd:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3C:91:46:56:45:D4:BF:BF:5F:2C:97:21:7E:05:80:68:EB:C5:2D
            X509v3 Authority Key Identifier:
                keyid:39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:95:23:74:49:b3:b2:47:cc:a1:2f:d8:90:52:ae:cc:5e:f5:
         ff:f2:ce:78:5b:b1:0f:b1:30:1c:45:c8:a9:39:c9:5a:f6:b5:
         16:f1:0b:9a:9c:8b:cc:f9:56:00:3b:01:e6:63:36:98:07:08:
         ee:5a:cd:82:b8:96:a3:69:b5:b4:0d:58:84:df:46:48:99:01:
         04:ba:f5:12:a0:7c:99:47:7e:1a:df:38:17:87:f2:90:b1:93:
         a7:13:87:5f:49:78:0a:0b:71:2a:d3:67:a0:f0:dc:44:a0:37:
         31:ac:60:3f:f9:31:5b:ea:9a:ef:f2:fa:08:c9:a8:47:e0:2e:
         0a:e9:98:9d:56:3a:f3:5f:46:fe:b6:2c:a9:eb:3d:c3:4c:17:
         32:b5:62:ea:d0:dc:37:be:9c:e8:f7:5b:85:63:76:59:dc:ce:
         82:b6:0f:f0:1b:ff:13:3f:53:98:ba:77:7f:82:aa:30:67:19:
         cd:49:f0:40:1e:0b:34:16:51:97:8c:f9:2f:86:07:92:ef:7e:
         61:fc:b3:b7:17:2b:ca:2a:fc:4d:56:c6:52:f0:39:2e:4d:49:
         ab:4f:63:dc:81:2b:fa:08:ef:3d:90:e1:82:e5:83:08:e4:64:
         95:41:9b:77:03:5e:16:09:de:96:7c:58:ca:46:ca:08:11:67:
         46:8a:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 10:21:46 2024 by rpki-client on console-fra.rpki-client.org