Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/5C39713123C652E0F02B25389490F94F89DD818A.mft
File:                     5C39713123C652E0F02B25389490F94F89DD818A.mft (raw, json)
Hash identifier:          XqQR6sW2f+nyEi4oQvLojJf8zsSN59rhNSHmdeNd9Zk=
Subject key identifier:   83:8A:EA:02:5C:F7:B6:F6:A2:CF:57:05:CA:7F:D3:21:BB:56:27:B5
Authority key identifier: 5C:39:71:31:23:C6:52:E0:F0:2B:25:38:94:90:F9:4F:89:DD:81:8A
Certificate issuer:       /CN=5c39713123c652e0f02b25389490f94f89dd818a
Certificate serial:       3CDE13D761C33852F590B2E5C2A8B586257D93CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDlxMSPGUuDwKyU4lJD5T4ndgYo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/5C39713123C652E0F02B25389490F94F89DD818A.mft
Manifest number:          16
Signing time:             Sun 07 Jul 2024 17:57:04 +0000
Manifest this update:     Sun 07 Jul 2024 17:52:04 +0000
Manifest next update:     Mon 08 Jul 2024 20:23:04 +0000
Files and hashes:         1: 323030313a3766383a3133373a3a2f34382d3438203d3e20323032303736.roa (hash: 9QsaK7Yvo9N6AJs7uwaiDq9fU+/eCn19urK4cqPyPAE=)
                          2: AS202076.asa (hash: aJAw7UwW0IBo7MRDctSO5TJdJoTFkYIrxN+RYh6fPj0=)
                          3: 5C39713123C652E0F02B25389490F94F89DD818A.crl (hash: O04F7h7SbzmRTfNo2P4DHWzApE0XKZ/myPPwEOs9Iq8=)
                          4: 3138352e302e322e302f32342d3234203d3e20323032303736.roa (hash: VgJ0VR4uTFSSEH1raXnWvj/geIUbFZaYStpaXyAvGgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:de:13:d7:61:c3:38:52:f5:90:b2:e5:c2:a8:b5:86:25:7d:93:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c39713123c652e0f02b25389490f94f89dd818a
        Validity
            Not Before: Jul  7 17:52:04 2024 GMT
            Not After : Jul  8 20:23:04 2024 GMT
        Subject: CN=838AEA025CF7B6F6A2CF5705CA7FD321BB5627B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:cd:8a:85:18:f2:cf:f2:d0:38:0b:ba:13:
                    e5:b1:f5:b4:2f:38:87:27:4d:60:1d:b5:71:e6:b1:
                    dc:f5:e5:9b:9d:48:27:b4:3a:14:ba:b3:85:c9:36:
                    fa:0f:95:28:82:98:19:9e:1c:16:60:56:f9:85:44:
                    0a:05:6e:3e:80:5e:cf:42:41:02:79:0e:53:f5:b3:
                    91:d7:8d:3d:53:fa:83:a4:18:90:95:90:8f:6d:84:
                    8a:44:2e:90:8f:86:6b:5c:82:97:4b:7a:ea:c6:9c:
                    ee:78:dd:fd:28:e4:bb:9f:9e:09:f4:e6:a1:34:64:
                    2e:a9:94:98:92:e8:f4:fb:58:84:a5:b0:5f:25:27:
                    76:8b:18:9c:8a:2f:ae:b9:7d:6f:c4:18:3a:51:45:
                    92:e9:c5:98:b6:a2:6e:18:c0:aa:d1:4f:6c:f8:1d:
                    dc:d1:8e:6d:42:48:80:5d:ca:f4:72:a3:92:bd:d6:
                    32:0e:0d:76:e3:0c:a1:de:5c:87:a0:f6:e3:a1:2f:
                    e5:4d:bb:6d:d1:14:62:50:64:c4:7a:52:64:2e:bb:
                    68:5b:8a:c9:14:bd:0f:15:e3:7a:e3:fd:29:be:8e:
                    b3:b1:03:10:39:62:a4:ed:47:18:4d:86:2f:5c:3b:
                    d9:4e:50:35:16:07:57:91:7c:57:2f:42:e9:2e:94:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:EA:02:5C:F7:B6:F6:A2:CF:57:05:CA:7F:D3:21:BB:56:27:B5
            X509v3 Authority Key Identifier:
                keyid:5C:39:71:31:23:C6:52:E0:F0:2B:25:38:94:90:F9:4F:89:DD:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/5C39713123C652E0F02B25389490F94F89DD818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDlxMSPGUuDwKyU4lJD5T4ndgYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/5C39713123C652E0F02B25389490F94F89DD818A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:04:34:b5:aa:ba:89:ec:ef:10:bc:95:8e:02:81:de:87:60:
         48:82:49:ef:b2:8b:8f:91:0e:6b:7c:55:5f:ef:22:f8:c3:28:
         d6:2f:a9:5c:2f:bf:48:a5:18:6e:7b:b0:6a:e6:d4:89:ef:90:
         48:b5:85:46:f7:e3:79:8d:59:42:f0:22:98:37:87:1d:28:79:
         5d:03:c2:17:42:68:7f:2d:d8:f1:90:20:d5:61:1b:bc:7f:c9:
         d2:5a:fb:c4:28:cf:cf:b8:a0:b6:c1:8b:c7:cd:8f:01:2e:48:
         4c:a6:4b:9c:b9:7e:95:23:1c:bd:ff:be:df:b2:ba:d6:7d:e9:
         7c:07:ac:79:d4:99:ef:79:a9:27:85:fe:5c:2d:a5:cf:3e:8a:
         94:be:99:8d:46:28:86:a1:19:a3:66:b7:12:a5:e0:3e:2c:5a:
         58:c2:3a:c1:d2:25:ee:6a:47:98:44:1a:dd:36:be:11:31:67:
         19:ad:e2:bb:e1:de:f1:2d:f7:d4:4f:33:1e:5d:b5:21:f1:a9:
         fa:0a:19:5c:42:22:a3:dd:8c:dd:37:38:b4:27:b7:c7:8f:10:
         7e:bb:da:bc:83:7c:0d:4c:14:83:74:dc:91:60:e9:0f:b8:db:
         91:39:d7:e7:35:f6:9e:89:34:3f:d1:b8:a0:c8:5c:4f:60:59:
         da:0d:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:26 2024 by rpki-client on console-fra.rpki-client.org