Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/B740B0385C1DD0153280E0A3E6444B24F96FFF30.mft
File:                     B740B0385C1DD0153280E0A3E6444B24F96FFF30.mft (raw, json)
Hash identifier:          MAqe8Zn1FeBpW9sPszK5ki1abEWMu774OZf84Zr4IGI=
Subject key identifier:   56:1D:20:DB:FD:FC:D1:44:EF:BA:5E:6D:74:9D:A2:EE:F7:90:1D:32
Authority key identifier: B7:40:B0:38:5C:1D:D0:15:32:80:E0:A3:E6:44:4B:24:F9:6F:FF:30
Certificate issuer:       /CN=b740b0385c1dd0153280e0a3e6444b24f96fff30
Certificate serial:       4EF920E67BFE0F866C820B65A4C5E1EFB19EC9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0CwOFwd0BUygOCj5kRLJPlv_zA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/B740B0385C1DD0153280E0A3E6444B24F96FFF30.mft
Manifest number:          08
Signing time:             Tue 04 Apr 2023 22:35:58 +0000
Manifest this update:     Tue 04 Apr 2023 22:30:58 +0000
Manifest next update:     Wed 05 Apr 2023 23:25:58 +0000
Files and hashes:         1: B740B0385C1DD0153280E0A3E6444B24F96FFF30.crl (hash: 9fkR/ma5Ma+rSjTslmhG3WDcMhw3lBYbAm1fFuzMYa0=)
                          2: 34352e3134302e33362e302f32332d3234203d3e203536393133.roa (hash: W+Ttpr1mLyKEFXXQtWKJeHNJ1L1/WPIt8W4LiDp58Ps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:20:e6:7b:fe:0f:86:6c:82:0b:65:a4:c5:e1:ef:b1:9e:c9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b740b0385c1dd0153280e0a3e6444b24f96fff30
        Validity
            Not Before: Apr  4 22:30:58 2023 GMT
            Not After : Apr  5 23:25:58 2023 GMT
        Subject: CN=561D20DBFDFCD144EFBA5E6D749DA2EEF7901D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:2b:2b:19:bc:0e:db:cf:cc:ac:8f:d1:eb:
                    0f:d7:82:bf:9e:8f:2d:51:9a:90:19:f4:1a:52:23:
                    7a:56:9c:37:a8:2b:43:27:c5:4b:14:e5:4c:c6:c2:
                    e9:2d:20:76:f1:d0:2f:00:c2:6f:6f:aa:8c:08:b3:
                    1c:02:a5:36:6a:88:24:c7:b9:a6:2c:41:85:81:af:
                    70:fe:24:78:c8:68:0b:fb:d4:96:04:35:57:bb:dd:
                    2b:cd:6d:75:6f:db:a4:1e:14:df:da:50:f7:33:6e:
                    eb:22:40:59:31:97:a3:6a:b1:11:8d:86:97:b7:90:
                    6a:c9:86:1e:91:14:7f:e5:a6:9a:d6:e5:31:32:71:
                    9a:ff:3f:a3:92:45:34:9a:ff:be:0c:6c:34:56:12:
                    16:18:90:55:b0:90:52:48:c0:89:8e:77:5b:dd:c1:
                    c0:3f:b5:25:74:a6:e5:d1:8c:b3:cf:fe:7f:5e:97:
                    c0:1f:1f:59:bf:44:d0:46:de:4d:b9:8f:c2:e1:40:
                    be:ec:cf:cd:8c:12:e7:c9:25:36:1c:e4:2a:01:1e:
                    74:31:7d:e0:a7:fc:f3:44:18:aa:20:8d:b5:d3:42:
                    69:ba:af:5e:76:12:5a:c2:5a:58:cd:be:ea:6f:4f:
                    ee:28:54:9b:e8:5c:b8:b3:f0:8e:33:7c:b9:29:7d:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:20:DB:FD:FC:D1:44:EF:BA:5E:6D:74:9D:A2:EE:F7:90:1D:32
            X509v3 Authority Key Identifier:
                keyid:B7:40:B0:38:5C:1D:D0:15:32:80:E0:A3:E6:44:4B:24:F9:6F:FF:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/B740B0385C1DD0153280E0A3E6444B24F96FFF30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0CwOFwd0BUygOCj5kRLJPlv_zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/B740B0385C1DD0153280E0A3E6444B24F96FFF30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6d:3d:56:6e:b9:3d:df:e1:34:b6:e4:36:79:9e:77:a3:d7:
         88:b8:a4:bc:4b:e3:e0:da:11:33:75:b4:37:3a:7f:23:1a:d2:
         3d:de:5f:29:b2:ce:87:d2:bb:49:45:e8:1a:4c:42:d5:58:b2:
         0e:0e:a1:dc:15:71:24:15:b6:72:be:3d:b4:01:8f:50:a3:1f:
         00:09:48:1c:e2:aa:6c:af:d7:d5:54:b4:dd:b5:a6:49:88:4a:
         d9:56:76:96:f1:34:6e:21:ae:b0:e8:39:ba:68:8f:bc:33:c4:
         7b:89:6b:21:43:ee:a6:7e:7d:ee:6a:ef:f4:d7:50:f4:dd:9f:
         fd:cb:b5:88:35:49:46:fa:68:2b:9a:cb:b7:bc:2d:21:8d:e4:
         90:08:75:76:6a:da:09:4e:0d:af:60:dd:b9:76:bf:4f:c6:e2:
         cf:c5:d3:af:87:7d:a0:f4:a5:db:9b:ee:97:51:ee:96:e4:68:
         6e:b9:16:4b:db:0a:40:b6:e8:e8:c5:b3:87:43:ce:a9:de:d3:
         79:cc:64:a2:73:44:dd:cc:3b:03:c6:ab:70:ba:e4:8a:93:67:
         09:c6:4b:1b:0e:a4:24:c3:a1:9b:03:0e:db:0e:be:3b:4f:0a:
         13:e2:68:59:58:37:06:9e:bb:34:c2:8f:b2:02:8f:c1:38:62:
         4f:4c:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org