Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft
File:                     B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft (raw, json)
Hash identifier:          Mi1jKHKl/cKLE8kiea62ibuGYZ7ug4godrNUluPDJZg=
Subject key identifier:   52:B7:B4:16:1C:FC:3F:80:65:CE:80:BD:4A:80:D0:C5:D2:49:7B:94
Authority key identifier: B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA
Certificate issuer:       /CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
Certificate serial:       5C5B8687921DEA8B8A1D4480E2DEC4BE96E5E1D8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft
Manifest number:          34
Signing time:             Mon 02 Sep 2024 10:51:54 +0000
Manifest this update:     Mon 02 Sep 2024 10:46:54 +0000
Manifest next update:     Tue 03 Sep 2024 13:36:54 +0000
Files and hashes:         1: 326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa (hash: rx6IUKhJahLbRAuJ+9gUsNn7bR5o5GyqNdUE075PAPU=)
                          2: B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.crl (hash: LRU7ZshA57oGj/RWMdTmJGRIyQ4vnofb5LUF+6rgq8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5b:86:87:92:1d:ea:8b:8a:1d:44:80:e2:de:c4:be:96:e5:e1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
        Validity
            Not Before: Sep  2 10:46:54 2024 GMT
            Not After : Sep  3 13:36:54 2024 GMT
        Subject: CN=52B7B4161CFC3F8065CE80BD4A80D0C5D2497B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:73:64:c8:7a:a9:6f:3e:70:0b:a5:f7:9b:
                    11:1b:84:8e:c0:0f:d6:f0:79:67:df:c5:2d:b8:e7:
                    7d:50:ba:a5:ef:fd:8b:0b:d0:1a:32:8a:92:30:24:
                    39:57:d7:29:28:5a:20:e6:72:ba:c6:eb:4e:ab:74:
                    3f:1f:8a:66:5e:93:80:99:42:19:d4:14:d0:6f:a3:
                    5b:75:a4:f3:89:d8:a1:21:a2:de:3a:9b:59:cd:62:
                    4e:52:2c:1f:6a:ee:7e:bf:ed:cb:20:14:43:5c:7c:
                    63:ef:92:6f:7e:1c:65:79:8b:1a:6b:50:37:42:aa:
                    6e:7e:1c:99:2c:ff:10:ce:23:23:83:3b:92:de:2d:
                    42:4f:56:e8:9b:1f:e0:bb:ac:d7:2c:e5:03:8b:7d:
                    41:27:08:93:03:68:d3:63:78:ee:ed:bb:53:56:f5:
                    27:bc:27:98:ef:66:1b:b2:fb:9f:0e:eb:c5:06:d2:
                    22:d7:95:c1:74:eb:e8:da:53:89:32:b7:e3:f7:8c:
                    eb:16:2d:24:1d:df:79:48:12:e8:56:e3:7c:b1:85:
                    ae:4e:ea:05:51:7e:c3:9d:a6:db:49:ee:89:cf:20:
                    dc:65:a4:2c:64:d2:e1:5e:3b:ec:eb:27:c4:74:36:
                    c7:ac:3c:cf:75:27:a2:1b:98:eb:19:05:8e:d5:09:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B7:B4:16:1C:FC:3F:80:65:CE:80:BD:4A:80:D0:C5:D2:49:7B:94
            X509v3 Authority Key Identifier:
                keyid:B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:36:91:1e:ea:8c:ec:9b:3d:a1:07:07:05:a2:f5:43:d4:
         c5:21:e9:52:05:01:e6:11:de:22:53:be:06:01:9f:e0:92:5a:
         7b:ab:3d:b8:49:b0:49:34:04:27:50:f2:f5:d7:44:6e:51:bb:
         5a:8c:54:54:3e:6a:2b:77:8c:cc:92:b9:b7:2f:ed:e9:38:6b:
         5c:8b:68:03:bd:56:9b:6e:ea:73:4b:c4:0b:98:11:ca:72:49:
         db:75:43:c2:4c:33:80:96:b2:6a:df:4a:d4:ab:fc:18:de:4b:
         e0:20:79:3b:11:89:05:d4:29:85:22:63:ea:7d:81:9f:02:fe:
         03:cf:a9:0a:21:f0:34:64:3d:c1:ff:92:db:89:10:99:69:00:
         12:b5:d8:f2:36:9c:09:c2:25:96:f5:a2:fb:a6:d7:ce:a6:78:
         60:4b:75:a6:43:ff:85:ca:07:0e:d3:f8:3e:f1:36:c8:f4:d7:
         9d:8d:13:e3:bf:74:5b:5e:21:0a:b1:23:f5:0b:9b:a3:77:57:
         92:87:0e:c3:a1:7c:53:f1:be:a6:1a:80:01:35:a3:5c:25:6f:
         72:4c:e8:52:d7:c8:d7:10:de:20:6d:65:a0:52:ac:14:24:ee:
         08:68:20:f6:4e:74:71:b1:cf:f0:85:58:0f:71:6f:7e:6d:76:
         1b:ce:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:27:56 2024 by rpki-client on console.sobornost.net