Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft
File:                     sy8BX2ojRTRcs9ryMMJcj64CMFo.mft (raw, json)
Hash identifier:          olH5Bkqg7VwrVrekhuSKrUf8URCsuocBV92R0fptvac=
Subject key identifier:   34:47:A6:2C:0F:16:96:B3:70:BD:49:6E:8F:59:85:F2:13:ED:C4:43
Authority key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Certificate issuer:       /CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Certificate serial:       018F75E73315AC6C1316F26BB2D35EE56C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft
Manifest number:          05FC
Signing time:             Tue 14 May 2024 07:00:37 +0000
Manifest this update:     Tue 14 May 2024 07:00:37 +0000
Manifest next update:     Wed 15 May 2024 07:00:37 +0000
Files and hashes:         1: pNqxvbroZA2J5m889e6zD6q1HMk.roa (hash: UOBsP2Z+PEe2lfA8Hw8URe671/YrdGbjkWpM/X47UIY=)
                          2: sy8BX2ojRTRcs9ryMMJcj64CMFo.crl (hash: h1CkuYkpz8yo+2lDPP6SD+UpmmvEHSpr7p8SAat39H8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:75:e7:33:15:ac:6c:13:16:f2:6b:b2:d3:5e:e5:6c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
        Validity
            Not Before: May 14 07:00:37 2024 GMT
            Not After : May 15 07:00:37 2024 GMT
        Subject: CN=3447a62c0f1696b370bd496e8f5985f213edc443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:f8:1f:83:6b:36:e2:4d:2a:42:ee:b6:f5:
                    df:f4:ba:be:1f:f5:79:63:7b:62:77:51:b7:b8:9b:
                    97:d8:8f:9d:eb:a8:bf:28:64:60:fb:99:24:67:99:
                    c2:fb:61:99:d0:a5:4a:5c:ee:5f:77:35:a2:f1:21:
                    a0:f8:2d:29:ae:57:17:7d:07:75:f2:45:3b:49:52:
                    27:5c:c5:6d:41:19:43:eb:b7:ae:36:78:bc:a3:43:
                    ca:dd:ab:75:7f:d4:0a:f9:10:9c:2b:f7:5b:96:c6:
                    85:25:4f:bd:e4:98:c0:90:fc:59:e7:56:fc:06:1a:
                    62:6c:60:92:de:84:a7:82:71:94:03:62:dc:e2:e4:
                    6e:50:41:8f:34:a7:70:a7:a9:36:c2:6b:76:82:64:
                    04:50:17:35:60:b3:7f:56:a6:5b:fa:3c:53:15:50:
                    5e:4c:3a:96:fb:cb:4b:56:85:8e:51:b4:17:48:89:
                    72:22:7f:61:b3:6a:ed:6f:f9:97:41:60:97:45:74:
                    a9:9c:07:d0:1a:4e:e1:44:da:d6:13:14:e1:e0:9f:
                    89:7d:3e:4c:11:3f:27:af:34:4c:3d:9e:8f:47:18:
                    ca:c6:8c:3d:eb:9e:91:30:c8:be:75:65:0f:ae:9b:
                    d9:c4:c8:31:97:4d:4b:e0:74:de:59:b7:d1:e0:34:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:A6:2C:0F:16:96:B3:70:BD:49:6E:8F:59:85:F2:13:ED:C4:43
            X509v3 Authority Key Identifier:
                keyid:B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f5:2d:ee:a8:cf:2d:b3:c9:5b:61:05:fd:0b:47:1c:83:1c:
         77:67:90:22:a3:b6:fe:b1:f2:18:17:ea:a4:91:25:ee:4d:68:
         ba:04:a6:ec:d3:03:22:7b:90:0c:3c:a2:b6:f7:39:b1:58:38:
         13:fe:53:c6:be:e5:41:0c:cb:c1:c0:f3:09:00:24:6d:c0:71:
         0e:ef:d0:8f:0c:b9:fb:12:5e:48:5d:7a:1b:77:38:10:b0:2a:
         de:9d:df:48:6f:4c:b0:5a:5c:ce:67:28:c6:db:10:ad:38:c0:
         be:e8:bd:9b:f1:66:8e:e7:9f:c2:d6:c6:b1:10:f0:5a:bf:41:
         55:3a:55:a1:be:f3:44:38:af:81:d2:84:9e:be:2d:e9:ae:d0:
         16:26:24:53:d9:8c:69:9d:30:1f:97:21:6b:fa:27:bc:cf:e5:
         41:0e:24:de:ea:72:70:5f:ec:6f:6b:34:e5:b5:b4:bf:f9:c1:
         d7:47:95:5a:e4:8f:22:c4:47:31:8c:c4:63:a9:cb:3c:46:c4:
         2d:72:b0:c1:10:39:4a:19:39:c3:d5:67:15:12:24:85:1b:2a:
         a2:2a:7f:bc:8c:75:19:91:22:cf:f9:96:2f:98:b3:eb:5b:b9:
         19:01:4c:ca:de:59:05:6d:af:66:1f:13:2b:68:9a:69:78:59:
         13:2a:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:18:16 2024 by rpki-client on console-fra.rpki-client.org