Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.mft
File:                     BA1E57809F341A79CDDA255B18E19FA068FA270F.mft (raw, json)
Hash identifier:          MjGb+8HVDhBymGcZF4HqF7S5udMKJr5R9ZIK44q+gFo=
Subject key identifier:   16:BE:3B:21:52:BD:14:9C:2C:EA:0F:23:F3:DF:7A:8F:6A:94:E8:EA
Authority key identifier: BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
Certificate issuer:       /CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Certificate serial:       361061C401451281ECAFF5E769F7BD6857934A02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.mft
Manifest number:          08
Signing time:             Wed 25 Dec 2024 03:56:00 +0000
Manifest this update:     Wed 25 Dec 2024 03:51:00 +0000
Manifest next update:     Thu 26 Dec 2024 06:42:00 +0000
Files and hashes:         1: BA1E57809F341A79CDDA255B18E19FA068FA270F.crl (hash: WMRWb5aQLT7ZaVcu9mshOOy04s76xhizWEzU9AITvlw=)
                          2: 326130613a363034343a613130303a3a2f34302d3430203d3e20323134373537.roa (hash: FQLszEk+//MABN1qa1n0DPaOu65Ih9Kjz5wUiVaH2kQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:10:61:c4:01:45:12:81:ec:af:f5:e7:69:f7:bd:68:57:93:4a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
        Validity
            Not Before: Dec 25 03:51:00 2024 GMT
            Not After : Dec 26 06:42:00 2024 GMT
        Subject: CN=16BE3B2152BD149C2CEA0F23F3DF7A8F6A94E8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:2e:18:6e:e0:b6:c3:67:b7:98:d7:d9:f2:
                    7b:c6:54:36:42:bf:f9:7a:95:07:11:57:e6:eb:6f:
                    e9:f6:b7:80:3c:f7:a0:61:eb:3a:a8:4d:a1:c7:e9:
                    cc:9f:7f:85:d2:c5:68:03:d2:d5:db:ea:e4:9e:82:
                    2c:12:1a:c1:63:bb:fd:f6:97:f6:07:9c:41:87:53:
                    4d:fe:53:52:bc:18:ff:33:38:38:31:3e:97:38:76:
                    a7:92:de:59:82:2b:76:75:1e:5a:c3:01:d7:b1:d1:
                    c9:50:16:10:23:52:31:ea:87:be:41:a9:5a:d4:6d:
                    59:42:34:c7:45:81:1b:13:92:8e:af:49:dd:79:b2:
                    14:f7:b3:e5:6a:20:52:3a:3c:93:6b:ea:ce:be:b7:
                    8f:b8:b6:2e:06:d4:ad:65:99:8d:04:13:d3:17:49:
                    0d:a3:9e:96:39:5b:d2:eb:17:71:a6:bf:7d:4e:3c:
                    1c:59:88:d6:df:c1:7e:c3:9d:4b:89:98:dc:87:7e:
                    5c:df:40:ee:98:91:57:1e:8d:1b:64:c2:83:2d:1f:
                    44:4f:09:ac:0a:9f:0f:c1:63:29:e2:a0:18:99:35:
                    fe:ff:8d:8d:7d:22:83:fa:9f:35:5e:33:78:24:5c:
                    d3:52:7a:b6:2f:0b:a8:29:95:3d:d4:4e:2e:ed:91:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:3B:21:52:BD:14:9C:2C:EA:0F:23:F3:DF:7A:8F:6A:94:E8:EA
            X509v3 Authority Key Identifier:
                keyid:BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:14:13:67:3e:12:49:57:76:ea:12:5a:0a:8a:cf:f8:7a:
         ce:1e:87:89:48:56:14:41:ab:b9:ad:1c:5b:0a:bf:4c:97:8c:
         91:95:fb:79:57:bd:42:b4:1b:1e:4f:06:90:fc:ba:fc:e9:1e:
         4f:1b:ff:4b:9c:62:53:13:1e:bc:dc:1f:4e:67:0f:06:da:69:
         b9:25:62:14:af:86:32:40:0e:8d:a9:02:b9:bf:7c:aa:9e:d7:
         19:15:8f:5c:18:8b:95:d5:22:31:a6:c9:4f:8a:9f:b0:50:33:
         8c:d7:73:9f:14:51:68:2e:51:bf:91:46:92:c8:c8:d2:fb:5f:
         1e:d8:72:36:74:11:09:42:f2:85:2c:b6:e1:7d:03:13:8e:9a:
         60:a2:d8:ed:a3:25:71:cb:2c:75:e7:22:cf:12:fa:d9:1a:e0:
         ec:42:12:bc:2d:9d:0e:14:46:01:0d:79:41:56:90:5f:c5:37:
         73:ca:43:e9:13:23:07:00:f6:43:9c:29:b9:12:83:50:56:76:
         a6:78:a9:46:3d:54:e8:53:1c:26:e3:57:ad:46:2b:9f:f9:db:
         a7:49:26:9d:e3:fc:7d:11:42:f0:87:a3:f1:47:d6:c9:77:85:
         8f:a9:a5:64:88:6f:ff:3a:3a:99:4c:61:d8:63:05:21:d9:aa:
         a0:ac:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:54 2024 by rpki-client on console.sobornost.net