Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft
File:                     103734D89B107354F2D009D6E780AAC0BCE606C0.mft (raw, json)
Hash identifier:          Tvxw7YKC8QPw+QNS4fSHZH59NlKlzXN61tlqfFodi70=
Subject key identifier:   E2:B2:0C:08:21:04:9C:5C:08:E5:22:47:A9:AD:81:98:12:6B:27:29
Authority key identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
Certificate issuer:       /CN=103734D89B107354F2D009D6E780AAC0BCE606C0
Certificate serial:       760DE32C6F894B5C9CC8B462C1B5F7B3C5939087
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft
Manifest number:          0297
Signing time:             Thu 03 Oct 2024 12:51:14 +0000
Manifest this update:     Thu 03 Oct 2024 12:46:14 +0000
Manifest next update:     Fri 04 Oct 2024 14:05:14 +0000
Files and hashes:         1: 326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa (hash: 1cAwkJuiU5GKLbRZxWvRh4rpV/XlkX375IHR1NbBazY=)
                          2: 103734D89B107354F2D009D6E780AAC0BCE606C0.crl (hash: +nWZUgdf80zOkC/HLsQRnMc4/jiD8hWMn1F0v3hlHGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0d:e3:2c:6f:89:4b:5c:9c:c8:b4:62:c1:b5:f7:b3:c5:93:90:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103734D89B107354F2D009D6E780AAC0BCE606C0
        Validity
            Not Before: Oct  3 12:46:14 2024 GMT
            Not After : Oct  4 14:05:14 2024 GMT
        Subject: CN=E2B20C0821049C5C08E52247A9AD8198126B2729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:50:37:b2:d6:74:2a:dd:70:85:0e:4f:02:
                    7b:46:c4:86:fb:97:61:d6:e8:25:ab:9d:31:8c:d4:
                    ad:25:a6:f7:dd:da:99:e9:7d:91:c3:91:86:29:69:
                    12:94:7b:b6:90:3d:21:33:bd:c8:d5:d3:95:15:d0:
                    33:75:3e:18:cd:b9:99:7e:80:5c:20:5e:e6:ca:3e:
                    07:16:75:0f:27:f5:1a:5a:08:3e:e3:be:70:4c:10:
                    31:0c:c7:83:14:63:3f:be:7a:5f:d2:b4:3a:a3:35:
                    2e:bd:30:30:46:a6:59:4d:77:33:29:9e:f1:00:39:
                    07:8f:8f:72:ae:29:19:76:bc:b5:59:c7:08:94:cf:
                    68:f4:f1:8f:ef:12:a6:ca:ae:d2:0b:af:db:f1:16:
                    95:f4:6d:64:8b:19:eb:48:0c:93:b5:4f:c4:03:8e:
                    2c:e9:37:c4:87:58:18:1e:59:74:10:0f:ac:11:78:
                    89:0b:ab:71:d8:33:13:8f:06:4f:66:90:a9:f3:38:
                    25:da:2a:62:f0:8b:97:09:95:dd:73:91:9a:4d:bc:
                    3c:16:8b:70:ab:09:0c:a8:45:87:94:39:c9:96:45:
                    3a:27:94:bb:75:55:15:4f:fd:52:69:8f:5a:ac:5a:
                    c2:07:73:01:c8:b9:e9:47:16:b4:4b:36:5f:52:92:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B2:0C:08:21:04:9C:5C:08:E5:22:47:A9:AD:81:98:12:6B:27:29
            X509v3 Authority Key Identifier:
                keyid:10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:08:04:53:9f:08:9b:97:ef:19:f2:6c:bf:d6:b0:99:d6:b7:
         35:4f:fb:31:75:0b:dc:96:fd:ea:56:09:e7:92:65:c4:70:40:
         3f:49:2e:a0:79:00:a5:c3:f9:33:27:d3:85:bf:1a:1b:6b:7e:
         e4:95:6f:1d:95:63:e3:5d:dd:5b:3b:88:35:1a:f7:a3:05:0a:
         09:2b:c5:c7:4d:18:e7:99:32:0e:fe:0b:10:e0:52:49:d2:cf:
         d4:cb:9f:c7:b9:a0:08:cd:12:a5:91:00:61:be:c8:1f:cf:b6:
         fc:d9:0b:78:5f:08:8f:5c:76:4a:23:bd:5a:fb:02:67:b9:36:
         e5:75:45:31:31:91:aa:63:27:94:6d:38:4e:ea:f4:c7:70:7b:
         b3:34:69:ac:56:a7:c8:17:f7:77:09:1e:63:af:2f:68:cc:ce:
         9e:61:5d:3b:c5:4a:ee:15:80:83:b7:03:25:76:8f:18:7b:95:
         b9:50:e2:dc:f1:cb:a2:9b:ca:b2:c9:34:87:5d:c6:31:07:6a:
         92:e7:8f:b6:6d:c4:60:f5:87:26:e1:93:b0:cb:94:35:a0:21:
         4e:43:c8:b0:69:a8:f3:e9:5c:d6:b4:be:30:5c:a7:6a:26:c9:
         f4:1b:d7:45:65:8e:92:27:44:d2:f8:c5:67:c2:58:e1:d9:5d:
         41:42:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:28:35 2024 by rpki-client on console-ams.rpki-client.org