Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/DYVOuBM8HATb0HPsu07j-hMCroY.mft
File:                     DYVOuBM8HATb0HPsu07j-hMCroY.mft (raw, json)
Hash identifier:          7ngOXfFN7I8wVeGesCN+Pa4QXKFDnqlk1dp+3T3RvkE=
Subject key identifier:   C1:5D:61:B1:C1:F4:53:5B:B3:92:F3:82:52:68:5A:02:39:D9:7E:CC
Authority key identifier: 0D:85:4E:B8:13:3C:1C:04:DB:D0:73:EC:BB:4E:E3:FA:13:02:AE:86
Certificate issuer:       /CN=0d854eb8133c1c04dbd073ecbb4ee3fa1302ae86
Certificate serial:       0289E6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYVOuBM8HATb0HPsu07j-hMCroY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/DYVOuBM8HATb0HPsu07j-hMCroY.mft
Manifest number:          035B
Signing time:             Fri 01 Apr 2022 11:21:43 +0000
Manifest this update:     Fri 01 Apr 2022 11:21:43 +0000
Manifest next update:     Sat 02 Apr 2022 11:21:43 +0000
Files and hashes:         1: BwM_65bjnWU5QZbLU7vx6GE6KRA.roa (hash: 84QxdrxeX1vmPIy5xCgx9iIsVeO1fbNrR1u2fhRkgKA=)
                          2: DYVOuBM8HATb0HPsu07j-hMCroY.crl (hash: O6LZLzS6TIre5pqarfbJczLYToOdNDo+/qUPoWc913c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42591966 (0x289e6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d854eb8133c1c04dbd073ecbb4ee3fa1302ae86
        Validity
            Not Before: Apr  1 11:21:43 2022 GMT
            Not After : Apr  2 11:21:43 2022 GMT
        Subject: CN=c15d61b1c1f4535bb392f38252685a0239d97ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2a:b6:e2:60:8b:b2:84:82:cf:78:83:4e:40:
                    85:72:cc:d4:f1:b2:a0:9b:92:13:3d:fb:68:1b:8d:
                    e8:a1:1c:80:ec:76:9c:ba:3a:be:7a:e2:bf:7f:4f:
                    44:28:e3:36:88:d0:2c:b2:55:09:0b:9f:5c:fa:f9:
                    70:d9:8b:ce:c3:b3:76:ef:d7:2a:b4:ae:14:15:82:
                    d0:16:c5:3f:d8:07:ba:94:ac:99:f4:4d:c4:92:0e:
                    45:b8:50:5d:99:65:fa:39:4a:10:15:e3:b5:70:98:
                    d5:2e:45:96:79:34:ac:9c:63:de:44:fb:19:2c:69:
                    06:31:33:72:f6:f0:9f:64:4c:e8:7f:f5:74:05:d2:
                    c3:04:e3:e3:14:5d:af:d6:f5:6a:cf:df:dd:e3:c1:
                    89:92:ee:77:cc:7f:04:e8:f2:d2:b2:66:2c:65:1a:
                    c4:15:29:ac:ff:4b:bb:84:fc:e8:e3:0e:a6:4e:32:
                    11:b9:b6:23:33:96:db:79:c3:85:05:1f:ad:4f:5a:
                    38:e9:2e:31:e2:cb:70:f7:b3:13:70:b0:83:2a:91:
                    c9:b1:98:bd:23:4c:88:b7:69:c8:dd:6c:a3:20:03:
                    0f:68:47:56:98:62:a1:bb:22:a9:68:22:2a:cf:cd:
                    4e:ed:88:8e:49:13:02:c5:31:ea:42:33:5e:55:d2:
                    e1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5D:61:B1:C1:F4:53:5B:B3:92:F3:82:52:68:5A:02:39:D9:7E:CC
            X509v3 Authority Key Identifier:
                keyid:0D:85:4E:B8:13:3C:1C:04:DB:D0:73:EC:BB:4E:E3:FA:13:02:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYVOuBM8HATb0HPsu07j-hMCroY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/DYVOuBM8HATb0HPsu07j-hMCroY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/DYVOuBM8HATb0HPsu07j-hMCroY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:3b:ec:cc:41:fd:1a:b3:52:2c:01:f6:8f:c3:fa:38:4c:
         8a:14:5f:c4:61:4a:5e:b3:28:a6:21:9a:91:ef:2b:05:e4:a7:
         f3:a3:49:e5:d5:f8:54:2e:ce:2d:61:67:bf:17:de:2c:5d:44:
         22:ea:ec:01:fd:a7:a8:1f:1c:49:ce:c3:81:f4:68:fe:d3:07:
         60:59:e4:a4:d7:a7:44:7e:c3:4d:2f:1b:6b:3e:60:aa:63:18:
         af:f7:1c:30:5e:81:17:ec:9a:a3:4c:49:07:91:f0:ce:f2:e9:
         4a:f9:69:06:76:2f:15:89:fd:3c:5b:cc:e8:8e:cc:c2:a4:a3:
         6b:2d:97:b1:7c:7e:29:a1:d3:b2:a4:1c:97:2b:22:bf:39:fd:
         e2:a4:c0:6a:f6:56:76:1f:44:5a:bd:73:88:15:64:7a:f6:fc:
         4e:ef:d3:fc:b1:2c:09:d3:bd:83:a4:48:cf:96:95:ad:fe:ed:
         fd:88:c3:f3:16:4a:5f:81:a3:86:0f:d1:03:2b:61:a2:ca:f4:
         85:14:f0:c1:dd:67:a6:ae:0f:14:a9:4b:78:19:a5:34:b7:33:
         72:e5:9b:46:61:5e:e6:ec:78:97:c6:ac:0f:b6:bf:f1:c3:6b:
         df:68:f0:d2:6d:b0:d3:c2:db:2d:f2:02:22:e1:83:14:42:4d:
         f7:9c:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:00 2024 by rpki-client on console-ams.rpki-client.org