Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/T-Y5ym37WS7dO9FgqsaPOlaKgNE.mft
File:                     T-Y5ym37WS7dO9FgqsaPOlaKgNE.mft (raw, json)
Hash identifier:          hAdLjJtuKTAamDw9nV+/QkOc+Wr31uzgI3Kwg2W7xVk=
Subject key identifier:   BE:5E:19:D2:04:A4:05:99:16:BB:1E:DC:CA:92:01:D6:FF:3D:F3:29
Authority key identifier: 4F:E6:39:CA:6D:FB:59:2E:DD:3B:D1:60:AA:C6:8F:3A:56:8A:80:D1
Certificate issuer:       /CN=4fe639ca6dfb592edd3bd160aac68f3a568a80d1
Certificate serial:       018EC585CD0EB113EF4936DB0FE2990DBD06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-Y5ym37WS7dO9FgqsaPOlaKgNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/T-Y5ym37WS7dO9FgqsaPOlaKgNE.mft
Manifest number:          03C5
Signing time:             Wed 10 Apr 2024 01:01:04 +0000
Manifest this update:     Wed 10 Apr 2024 01:01:04 +0000
Manifest next update:     Thu 11 Apr 2024 01:01:04 +0000
Files and hashes:         1: 7rpPdh-_hMra7pJ7Pq8IOA3T1fU.roa (hash: PvQFjPCLvGuhrhKD5EYuh48ZSrpl/bPSR2/Z1n0qNVA=)
                          2: T-Y5ym37WS7dO9FgqsaPOlaKgNE.crl (hash: NzM+9YL5oCyzjvQyoNygZFOhGjYF6U3iplq6nfiuyfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c5:85:cd:0e:b1:13:ef:49:36:db:0f:e2:99:0d:bd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fe639ca6dfb592edd3bd160aac68f3a568a80d1
        Validity
            Not Before: Apr 10 01:01:04 2024 GMT
            Not After : Apr 11 01:01:04 2024 GMT
        Subject: CN=be5e19d204a4059916bb1edcca9201d6ff3df329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:04:fd:b9:99:22:03:e2:cd:76:52:28:72:
                    54:f5:46:75:11:4c:5e:87:c9:d9:32:7c:38:dd:8f:
                    c0:ba:5c:ff:23:00:13:56:59:93:e7:c6:f9:c3:92:
                    19:84:56:36:aa:f8:fb:16:7f:39:8f:03:14:55:90:
                    73:d1:0f:22:ab:57:06:1a:ff:31:43:1c:c4:7c:fe:
                    d9:80:41:23:89:be:95:69:4b:15:39:06:1c:ae:7f:
                    3e:13:14:2d:32:fa:28:94:58:8f:ed:a3:7a:3c:99:
                    b2:3c:01:85:bd:a1:b4:7c:d1:08:2a:ae:d0:3f:41:
                    ec:41:eb:65:ed:b7:5b:f4:a8:33:02:8b:9c:59:68:
                    ff:32:e6:8b:e3:2e:7f:0d:8c:01:41:cf:66:22:7e:
                    2b:46:a8:07:a0:ed:25:15:5d:1a:eb:d3:62:47:0c:
                    ff:9b:32:a7:42:b4:2a:f7:36:b9:17:22:4b:4c:fd:
                    ee:7e:de:26:7d:63:34:4d:af:f8:67:ec:04:13:24:
                    be:96:68:2d:fb:57:fe:c1:df:e8:96:47:f6:33:93:
                    35:f7:34:98:c1:21:52:3c:70:35:19:7d:cf:fb:2e:
                    4a:5c:12:2f:60:4c:5a:5d:e1:bc:c7:51:09:ec:bf:
                    46:c0:2a:d4:bd:9c:f5:44:a8:24:c2:fa:f8:f6:06:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5E:19:D2:04:A4:05:99:16:BB:1E:DC:CA:92:01:D6:FF:3D:F3:29
            X509v3 Authority Key Identifier:
                keyid:4F:E6:39:CA:6D:FB:59:2E:DD:3B:D1:60:AA:C6:8F:3A:56:8A:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-Y5ym37WS7dO9FgqsaPOlaKgNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/T-Y5ym37WS7dO9FgqsaPOlaKgNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/T-Y5ym37WS7dO9FgqsaPOlaKgNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c8:79:63:59:9e:ad:93:ed:00:29:30:fa:22:64:b4:33:ab:
         eb:a5:0d:04:59:8f:b5:76:a9:a2:df:92:9b:4a:37:e4:b1:ea:
         b7:18:73:a3:fe:1d:0f:71:e1:38:9b:17:8b:3c:db:24:05:98:
         ba:65:47:0d:a7:c9:3c:3e:98:1a:59:d1:ed:5a:e6:3e:6d:4e:
         be:f4:c8:26:3d:48:a1:ca:09:9c:71:93:99:06:69:3f:25:ae:
         96:15:d6:29:4d:a9:50:72:ad:fe:96:9d:eb:f7:3a:81:3c:5d:
         95:bd:5c:83:27:db:f5:c7:8c:1a:76:a6:92:33:13:10:ed:10:
         7d:00:30:57:5f:bc:4a:8b:68:84:1e:5d:41:2b:cd:24:22:56:
         6a:d1:34:97:21:a6:b5:c4:5a:90:4a:9f:68:74:bc:0d:c9:78:
         0b:de:10:d7:e7:de:10:7c:ef:d0:10:ae:28:f3:ee:93:4f:cb:
         f7:28:02:dc:7d:0e:f0:d0:ce:a9:51:f0:5b:d9:22:12:07:87:
         84:a1:b9:27:b4:6f:0e:eb:52:94:ff:b0:9d:19:d1:5e:a4:7f:
         20:d5:49:4b:11:b3:07:5d:a6:48:f4:1a:b4:16:81:ed:47:84:
         03:42:0f:8c:c9:eb:e0:65:80:2a:e2:77:83:fc:e6:60:7f:a7:
         2e:b5:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:48 2024 by rpki-client on console-fra.rpki-client.org