Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft
File:                     3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft (raw, json)
Hash identifier:          0zsatCzN+sRXqk1g/CyvctQOoRp+klBj2RSdOS9vjt8=
Subject key identifier:   08:AF:4F:FB:9E:B9:84:D7:6B:F4:23:BD:08:3B:BD:0B:99:7E:A7:57
Authority key identifier: DE:7E:14:32:1F:86:A4:6D:88:F1:17:71:AB:78:18:C6:BB:A8:C8:81
Certificate issuer:       /CN=de7e14321f86a46d88f11771ab7818c6bba8c881
Certificate serial:       018F2D97517473FB8C1118E080714F05E877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3n4UMh-GpG2I8Rdxq3gYxruoyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft
Manifest number:          0935
Signing time:             Tue 30 Apr 2024 06:00:42 +0000
Manifest this update:     Tue 30 Apr 2024 06:00:42 +0000
Manifest next update:     Wed 01 May 2024 06:00:42 +0000
Files and hashes:         1: 3n4UMh-GpG2I8Rdxq3gYxruoyIE.crl (hash: csrsGX95e44DqcJ56juXKJzpEgLi+DTEScEbPIYztiM=)
                          2: USqQ8XG89Yqk9IuDLJjFaDlmqeE.roa (hash: 9/sNUGETLhHg/aUAG68KMe04hW4qzB2MdqeEagvAE5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:97:51:74:73:fb:8c:11:18:e0:80:71:4f:05:e8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7e14321f86a46d88f11771ab7818c6bba8c881
        Validity
            Not Before: Apr 30 06:00:42 2024 GMT
            Not After : May  1 06:00:42 2024 GMT
        Subject: CN=08af4ffb9eb984d76bf423bd083bbd0b997ea757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:bb:f3:b5:a5:e0:da:b3:af:26:11:fd:d9:
                    01:99:dd:67:de:dc:69:a5:c5:de:1e:00:fc:b2:ab:
                    f8:d4:63:6f:50:67:cf:e5:8d:33:0b:ef:37:58:98:
                    d3:73:7c:3e:9f:4d:71:00:dc:11:97:aa:3b:f4:30:
                    0d:2b:a5:8d:7d:84:c9:91:e7:00:e0:66:9b:0f:27:
                    fb:ab:06:8e:63:48:6f:d9:3d:05:87:a7:dd:7a:c2:
                    81:10:43:4c:4f:c0:68:20:ed:a6:a4:84:b8:53:3f:
                    92:66:42:c0:5b:2d:dc:f6:2e:5e:30:3b:d6:8c:87:
                    57:33:e1:cf:d6:f5:43:a2:0a:df:fc:31:0a:0b:b4:
                    72:63:90:77:e2:81:c8:52:93:e3:ef:b0:68:81:24:
                    78:a1:29:a8:ba:82:c0:c4:95:2e:09:37:8e:e8:58:
                    e6:1a:20:f5:f0:02:6f:55:9c:67:ab:01:1e:a8:ca:
                    f2:f2:e1:30:b6:46:48:1d:46:fe:b1:6b:59:f1:fd:
                    51:7f:cb:7a:78:d2:fb:e1:25:d7:73:13:be:16:f9:
                    27:cd:95:63:69:00:d2:d3:74:6f:47:01:eb:72:70:
                    86:96:9b:9e:c4:89:7b:95:11:58:3f:bd:41:8f:2c:
                    d8:5a:54:f8:bd:a4:2e:a1:36:55:73:74:5e:9e:19:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AF:4F:FB:9E:B9:84:D7:6B:F4:23:BD:08:3B:BD:0B:99:7E:A7:57
            X509v3 Authority Key Identifier:
                keyid:DE:7E:14:32:1F:86:A4:6D:88:F1:17:71:AB:78:18:C6:BB:A8:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3n4UMh-GpG2I8Rdxq3gYxruoyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:8c:2c:98:f9:86:95:71:6e:b2:af:07:5e:a2:c9:cb:fb:
         5e:a3:6b:9f:fc:1c:c5:e0:00:f0:40:6a:ff:e6:b8:ae:c5:c5:
         39:8c:1b:d4:64:df:85:a1:7a:cc:04:b9:a7:45:59:1a:78:0d:
         83:af:90:99:c3:3f:cf:10:d6:3e:62:ac:8c:58:d2:17:eb:bf:
         49:9c:0c:fd:3d:79:01:26:83:84:95:9e:c0:54:35:4b:c5:2f:
         bf:65:5c:9a:f5:5c:af:2f:7a:fd:bc:b6:e3:4f:48:6a:8c:84:
         fc:d7:a0:e1:cb:be:fc:2b:fe:66:e4:26:d5:66:fd:aa:5a:c2:
         31:f4:7b:68:89:92:7d:12:a3:74:41:2a:10:94:45:a8:9b:98:
         c2:14:27:7b:76:82:b9:91:a1:8e:96:2f:d9:a7:42:03:a0:43:
         57:f3:1b:ec:81:dc:55:02:1e:63:25:6c:6a:e0:d7:db:e1:5f:
         10:fd:4e:e2:8f:9e:bc:64:bc:60:c8:30:00:5f:9b:03:8d:c0:
         a3:c0:b4:ac:86:5b:92:4c:cf:48:20:5f:9a:96:f0:e6:5f:f4:
         e4:1e:d2:33:99:75:25:cb:61:b5:80:e3:8d:bf:fe:ad:ca:5e:
         1c:fd:49:f9:06:8d:5e:5e:e9:cf:df:e7:a7:2b:1a:14:72:40:
         fc:d4:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:59 2024 by rpki-client on console-fra.rpki-client.org