Manifest

$ rpki-client -vvf repo1.rpki.qs.nu/repo/cynthia-ca1/0/4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.mft
File:                     4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.mft (raw, json)
Hash identifier:          f3RD/y4pJlziJL5VSkH1VPCxszsBSvf6LNYhkvf7Flo=
Subject key identifier:   EE:84:F2:DE:CD:62:DA:54:17:E3:D9:C0:F8:FE:1B:72:E8:C8:09:15
Authority key identifier: 45:87:AC:CB:DB:6B:C1:1F:2A:0A:1F:CB:3D:7D:AB:E2:27:8F:5D:E9
Certificate issuer:       /CN=4587accbdb6bc11f2a0a1fcb3d7dabe2278f5de9
Certificate serial:       41D9754BA51127361BEBC27DB12D5F47603DE98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYesy9trwR8qCh_LPX2r4iePXek.cer
Subject info access:      rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.mft
Manifest number:          027B
Signing time:             Tue 23 Aug 2022 05:10:00 +0000
Manifest this update:     Tue 23 Aug 2022 05:05:00 +0000
Manifest next update:     Wed 24 Aug 2022 05:10:00 +0000
Files and hashes:         1: 4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.crl (hash: 6pz4ndKjGYVzwZg5Rg+8Alt8A/8Rx1CQ0klsv/FmFx0=)
                          2: 323030313a3637633a313139303a3a2f34382d3438203d3e203537373832.roa (hash: 1apMGEVD6JW7Le7prTFzbhWKHls1cjc+O1QDAcmqAGs=)
                          3: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: jlR8QvxGKE4oFqVzZ+wfZvQByV0NzMlSHAnI1rbt8cc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d9:75:4b:a5:11:27:36:1b:eb:c2:7d:b1:2d:5f:47:60:3d:e9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4587accbdb6bc11f2a0a1fcb3d7dabe2278f5de9
        Validity
            Not Before: Aug 23 05:05:00 2022 GMT
            Not After : Aug 30 05:10:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:a6:6f:ad:a5:f0:46:70:fd:6d:18:4d:44:
                    81:8f:40:e3:02:28:73:9a:da:f7:b3:f2:9f:76:c6:
                    a3:fc:b2:d7:ce:e4:b7:30:a9:0f:4e:c6:dd:f5:5c:
                    05:c1:b9:a7:d9:3d:1d:c3:2b:5c:71:65:e5:c6:84:
                    5e:2d:4f:ed:64:55:ca:d2:85:ea:dc:d1:b7:0e:e6:
                    37:e9:6e:b9:3c:b9:0e:f3:3c:4f:d8:8c:87:77:b1:
                    7f:da:39:19:a3:fb:e0:d0:73:96:b7:cf:f1:67:ef:
                    bc:29:8c:b1:69:e8:5b:3b:51:1e:a6:39:8f:25:25:
                    c2:e4:10:ac:02:b3:7e:90:d4:91:a4:7d:92:ff:f7:
                    2e:65:a9:6d:37:28:67:79:3f:d3:c3:95:34:25:e5:
                    b5:e7:a5:ef:3e:78:64:7a:e5:45:c8:95:a1:96:c6:
                    8b:1d:9a:c6:65:23:ae:f7:d6:66:07:d5:20:51:8f:
                    32:22:8c:c2:bc:34:2a:d9:72:a4:10:88:5d:c6:e4:
                    03:c2:68:1d:7d:7d:23:89:fc:45:c8:13:16:e6:5a:
                    10:68:bc:dd:49:44:b7:c6:51:05:fc:82:b0:09:3d:
                    fe:1a:2c:16:75:c4:88:18:9f:35:b9:94:9c:6e:7c:
                    06:fb:71:51:c7:91:37:40:96:86:67:74:fa:aa:b4:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:F2:DE:CD:62:DA:54:17:E3:D9:C0:F8:FE:1B:72:E8:C8:09:15
            X509v3 Authority Key Identifier:
                keyid:45:87:AC:CB:DB:6B:C1:1F:2A:0A:1F:CB:3D:7D:AB:E2:27:8F:5D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYesy9trwR8qCh_LPX2r4iePXek.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:17:e9:af:85:d4:6e:23:d0:2b:66:e5:60:63:33:db:06:0a:
         b0:12:aa:c7:7e:af:c4:4a:e3:c5:4d:e5:51:62:23:55:11:0c:
         6b:cb:b7:2c:3d:de:9a:04:70:2b:f2:43:46:de:cb:b1:3b:1c:
         29:c9:64:49:6e:3f:c7:7c:46:44:1c:8c:12:1c:b9:30:7c:2d:
         a1:ac:96:20:58:da:8c:21:b9:fb:35:75:45:7c:d3:a4:4c:d9:
         95:cd:34:f5:92:47:3b:2b:34:a7:b5:fd:0a:12:37:84:5e:3e:
         b2:6d:29:c5:fd:da:10:99:68:07:f7:3c:49:82:5b:66:a6:69:
         19:1f:2f:b9:c7:16:ae:68:36:03:e7:f6:7d:fe:01:44:37:df:
         bd:98:7e:c3:81:68:fc:70:1f:96:63:c6:e8:57:6f:86:58:f8:
         f1:9a:af:a9:aa:23:0e:a7:2a:1d:65:2a:95:29:9b:34:93:e7:
         40:c9:28:10:00:7f:76:16:69:51:c5:93:39:a6:92:23:d8:98:
         03:79:3d:98:54:e3:f8:bb:de:af:d5:38:4a:93:3c:1c:55:3d:
         37:84:8b:9d:9f:a8:cc:ce:be:09:11:02:1f:56:dc:9a:38:15:
         d8:e9:54:c8:77:dd:13:d7:cd:4d:63:e2:94:66:f0:09:c4:c1:
         7f:a3:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org