Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/5D3BF911E19D079EDDFB194ED158480130E355F0.mft
File:                     5D3BF911E19D079EDDFB194ED158480130E355F0.mft (raw, json)
Hash identifier:          8hxP0SRhKbjBstR5TxVYmidBL5Mqf39DsM5C9z/MLec=
Subject key identifier:   2E:A6:67:C4:AC:FB:30:D8:33:6A:59:A5:C4:6A:86:0B:53:DC:62:92
Authority key identifier: 5D:3B:F9:11:E1:9D:07:9E:DD:FB:19:4E:D1:58:48:01:30:E3:55:F0
Certificate issuer:       /CN=5D3BF911E19D079EDDFB194ED158480130E355F0
Certificate serial:       1465C3B94BE78886B642DC0E114FBA07B5A9CDE3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5D3BF911E19D079EDDFB194ED158480130E355F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/5D3BF911E19D079EDDFB194ED158480130E355F0.mft
Manifest number:          06
Signing time:             Mon 02 Sep 2024 12:50:53 +0000
Manifest this update:     Mon 02 Sep 2024 12:45:53 +0000
Manifest next update:     Tue 03 Sep 2024 15:18:53 +0000
Files and hashes:         1: 5D3BF911E19D079EDDFB194ED158480130E355F0.crl (hash: bwei+9TH7MY5aSI20kCkotL2waQpv73KMCQoNDMLFPY=)
                          2: 326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (hash: ye4Kr7UKWvH9Z7mQeWBaY7qlK1SHzOXMBhuTuTXrW9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:65:c3:b9:4b:e7:88:86:b6:42:dc:0e:11:4f:ba:07:b5:a9:cd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D3BF911E19D079EDDFB194ED158480130E355F0
        Validity
            Not Before: Sep  2 12:45:53 2024 GMT
            Not After : Sep  3 15:18:53 2024 GMT
        Subject: CN=2EA667C4ACFB30D8336A59A5C46A860B53DC6292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:30:e5:cc:a6:0f:6a:22:03:8f:a2:aa:2d:
                    6d:50:e3:3b:6b:fc:3a:42:58:b7:bc:4b:b1:01:bf:
                    c9:54:1b:6f:71:df:7e:bc:40:67:18:7a:ee:4c:21:
                    8d:27:69:02:f6:eb:11:2b:71:63:97:7d:8c:36:93:
                    92:83:4a:cf:50:2e:a2:b1:1c:d7:70:63:10:10:66:
                    fd:55:29:ee:12:b3:02:b8:0c:6d:70:46:25:49:e4:
                    2c:10:98:2f:84:4f:d9:71:d7:a9:4b:16:c4:79:fa:
                    4c:a2:e2:0b:5b:52:e4:3d:f3:36:65:ac:f4:e5:c6:
                    3d:7e:5e:3e:79:e2:dc:ad:e6:dc:50:22:0e:f5:70:
                    6d:20:35:86:a7:23:aa:44:cf:e3:eb:d3:41:0a:19:
                    a6:66:87:83:01:96:f0:b3:4a:e4:e7:de:5f:fd:bf:
                    36:c3:04:fe:98:dd:f5:21:31:28:60:e9:f8:0f:1d:
                    0f:38:66:df:7c:98:54:a2:21:2b:49:d8:f2:0f:82:
                    dc:ab:70:ff:5a:bc:3f:fc:74:c3:28:32:29:ab:93:
                    ec:38:67:fa:d0:42:7c:14:d4:3b:23:d1:f5:68:d9:
                    3e:be:a9:90:96:6b:70:b0:52:25:55:e6:66:ba:78:
                    43:1f:b6:71:9b:cc:12:78:80:8f:75:b3:c4:59:5f:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A6:67:C4:AC:FB:30:D8:33:6A:59:A5:C4:6A:86:0B:53:DC:62:92
            X509v3 Authority Key Identifier:
                keyid:5D:3B:F9:11:E1:9D:07:9E:DD:FB:19:4E:D1:58:48:01:30:E3:55:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/5D3BF911E19D079EDDFB194ED158480130E355F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5D3BF911E19D079EDDFB194ED158480130E355F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfd68121-0aaa-4b94-89b5-40c6eabdac26/0/5D3BF911E19D079EDDFB194ED158480130E355F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:be:2b:7e:b9:12:28:89:cb:57:f5:f6:50:7a:b8:7b:dc:2f:
         c6:7c:55:3f:a3:bd:80:a8:f9:79:df:c9:c8:db:2f:28:98:0f:
         c5:11:68:e2:af:7a:27:48:03:d1:59:df:3e:16:08:c0:9c:ba:
         e4:2c:f8:af:e3:c3:85:f0:60:95:4e:52:c4:8f:ad:ca:31:6e:
         eb:57:80:61:b4:a9:f6:5e:05:a1:52:48:13:70:21:10:b7:65:
         36:11:8b:95:5f:5c:c6:ce:d6:74:dc:54:a3:78:cc:fc:c8:d8:
         ca:4f:ce:54:5d:f6:f7:05:08:d5:7c:16:ab:45:31:d1:07:c4:
         c4:c4:a6:55:6c:39:9b:a1:0f:cf:d9:a7:21:1c:4d:45:e7:3f:
         d3:2b:8f:b9:69:51:57:13:f8:b3:fb:0d:f4:6e:8e:85:05:92:
         43:0f:6a:bb:ed:82:7f:00:27:79:a8:57:e3:1d:b6:f4:93:2b:
         95:33:a3:46:71:fa:10:df:29:b5:84:92:b8:5b:a2:69:9c:4e:
         ee:30:f8:10:ef:0e:3b:93:62:76:de:23:4c:4e:9a:a8:c5:83:
         91:5e:c0:88:43:ee:5d:fd:dc:f9:af:9f:71:27:1e:bd:32:e8:
         1a:8e:19:03:4b:c6:3d:75:4a:5e:97:52:59:96:8f:7a:21:3a:
         d1:b0:4a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:27:57 2024 by rpki-client on console.sobornost.net