Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft
File:                     8D57D440906265349F6DEF98557AC28D0381C47E.mft (raw, json)
Hash identifier:          s9mvLCgt7l+ycRNu4n9qMgNpoaRqxVdvU/WQjxS5RsM=
Subject key identifier:   14:04:F5:67:23:9C:8F:2D:1A:29:E9:21:6B:95:94:C2:52:34:45:EC
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       35F3EFC46C6297B5278660F87C68ADF3720ACC3D
Authority info access:    rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft
Manifest number:          0133
Signing time:             Thu 23 May 2024 17:34:29 +0000
Manifest this update:     Thu 23 May 2024 17:29:29 +0000
Manifest next update:     Fri 24 May 2024 20:01:29 +0000
Files and hashes:         1: 326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa (hash: fYkC3lHCOq6cQx3NpgJrrk+GVXkYfLPInrlbcOJFuCw=)
                          2: 8D57D440906265349F6DEF98557AC28D0381C47E.crl (hash: 139QyhCuu1M9C8aRhGxJg5kZS93s18xiZQ4mYGTLhOQ=)
                          3: 326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa (hash: 5uaD32rK9RzVuGhcsGRYKRhGpUD+JeeZNVWKVb4BOCw=)
                          4: 326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa (hash: zA3uCGIBAga+UBmCbQKaK3lPXC0dRZM0wP2qQpG3Fv4=)
                          5: 326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa (hash: xHvS7crXK/uCdPxRlMIjanb+1wARBWbx49OHi4hcRVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f3:ef:c4:6c:62:97:b5:27:86:60:f8:7c:68:ad:f3:72:0a:cc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: May 23 17:29:29 2024 GMT
            Not After : May 24 20:01:29 2024 GMT
        Subject: CN=1404F567239C8F2D1A29E9216B9594C2523445EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:28:e6:32:25:ee:36:e9:63:f7:b8:0e:11:
                    dd:05:a5:de:08:4f:1f:f7:04:fe:02:0b:ce:56:e6:
                    90:d2:d6:eb:5c:c8:33:0b:e5:5f:4d:4a:0b:1c:c4:
                    83:4a:6f:f8:03:32:7c:5b:c6:a2:7c:a7:19:f7:2d:
                    0f:0c:0c:71:07:4a:11:c0:06:50:5a:7e:0f:ba:33:
                    0b:b4:a9:25:65:c1:50:a9:cb:a0:77:da:62:07:ed:
                    4a:c3:76:d9:74:c4:3e:8a:70:bf:e0:e4:bd:7c:53:
                    d7:0c:7a:08:57:ec:2d:5c:93:bf:99:68:5e:a2:24:
                    15:91:f4:c3:91:aa:80:9e:d7:7f:bf:23:dc:05:4d:
                    b3:9a:dc:4e:33:82:6f:6e:03:2f:17:84:cd:fd:e9:
                    b2:d9:f6:59:74:c4:43:95:41:e3:02:ae:13:a2:a8:
                    6c:00:2e:fc:05:f8:29:55:f7:c5:10:49:46:e3:f5:
                    db:f9:b5:b7:40:2f:00:1c:69:04:f7:0a:13:81:cd:
                    e5:f2:8d:ed:68:33:95:9e:1f:20:bd:33:86:a9:38:
                    73:80:a9:60:ad:df:30:bc:a8:e1:e4:c1:a8:4d:76:
                    f4:bc:96:85:c3:72:d9:c8:1e:75:3b:19:40:78:eb:
                    a7:10:db:ce:e8:86:ee:20:5c:76:01:8a:5b:7d:d4:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:04:F5:67:23:9C:8F:2D:1A:29:E9:21:6B:95:94:C2:52:34:45:EC
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:8e:cd:c9:92:80:3d:b2:71:0c:56:4d:7f:84:b8:ed:ef:
         04:67:1a:21:d2:92:c2:c6:cf:ec:3b:78:3d:39:f7:d7:7d:d3:
         e3:c4:ab:8c:ea:96:05:87:0a:e3:1b:4f:2f:fb:12:03:19:80:
         0e:da:b3:bb:7c:f0:d2:7c:87:b6:96:25:07:ad:58:c0:8a:48:
         1a:ef:09:dc:8a:e2:24:a1:df:9c:09:f4:42:d8:cc:b6:51:5c:
         b5:f5:5b:f3:8c:ac:7e:ee:52:ba:42:b2:c1:91:80:b6:41:ad:
         bc:41:37:12:71:91:70:30:42:6d:ee:e1:de:b0:3c:d3:94:69:
         67:09:6a:f6:e3:89:8e:4e:6b:46:8f:71:15:33:64:8e:cf:05:
         71:b6:58:76:6d:a0:4c:ed:7a:fa:cb:10:ff:67:a4:8b:e2:21:
         e5:77:f9:82:10:65:0e:78:33:83:1e:98:e5:11:3e:0c:11:e0:
         2a:8b:6a:a2:0d:f3:29:58:94:00:0d:ec:0c:37:ae:64:2f:fc:
         5c:96:bf:f2:22:d6:aa:71:66:da:22:a7:aa:4a:84:29:14:2c:
         40:79:56:cb:6c:10:f9:26:27:de:c9:30:c5:18:97:2a:05:67:
         6e:da:2f:f6:1f:81:64:46:f0:39:b1:b0:b9:76:38:81:03:30:
         a0:7b:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 19:05:46 2024 by rpki-client on console-fra.rpki-client.org