Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft
File:                     BD36051F9A727996CE309FAF4E5757E504EB2C46.mft (raw, json)
Hash identifier:          avTN960VAvIuT4Ic/F/r/VPf/kTxo68L1dHGt8+pIqI=
Subject key identifier:   53:4E:BF:D2:36:D8:DC:C4:C9:27:92:29:29:1A:61:11:88:5D:54:85
Authority key identifier: BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46
Certificate issuer:       /CN=BD36051F9A727996CE309FAF4E5757E504EB2C46
Certificate serial:       55ED3DD638FED674B0F966CC5F2DACA4DF9DDEE7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft
Manifest number:          2A
Signing time:             Wed 20 Nov 2024 12:27:46 +0000
Manifest this update:     Wed 20 Nov 2024 12:22:46 +0000
Manifest next update:     Thu 21 Nov 2024 14:06:46 +0000
Files and hashes:         1: 326130393a353463363a383030303a3a2f34372d3437203d3e20323134343531.roa (hash: e0au/5cGv1Pv+omA08EMMw/+Xqdlaj4f052UKrYUHYI=)
                          2: BD36051F9A727996CE309FAF4E5757E504EB2C46.crl (hash: WlVQAqtih0fc3kXFlO/oHMTD4Qb2S4W+ENOcOruY83M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ed:3d:d6:38:fe:d6:74:b0:f9:66:cc:5f:2d:ac:a4:df:9d:de:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD36051F9A727996CE309FAF4E5757E504EB2C46
        Validity
            Not Before: Nov 20 12:22:46 2024 GMT
            Not After : Nov 21 14:06:46 2024 GMT
        Subject: CN=534EBFD236D8DCC4C9279229291A6111885D5485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:34:f7:90:65:78:c9:e6:bb:47:b6:c3:f5:
                    d5:11:60:f6:de:6c:78:99:d9:75:d9:6f:cb:26:09:
                    d6:60:76:31:13:57:2f:80:f3:87:40:52:0f:99:e4:
                    56:e5:85:b0:5e:b5:b4:68:66:f0:4d:c6:34:e5:5c:
                    5d:48:93:7d:67:25:5f:f5:0b:5f:48:48:d9:61:21:
                    b3:d0:ca:d1:f8:aa:15:78:fe:37:da:73:ce:26:32:
                    d6:5a:34:08:c3:ca:90:d7:db:ca:46:51:7d:60:22:
                    81:0f:4f:69:74:99:2c:40:90:34:46:89:f6:13:89:
                    0a:3e:f5:f8:5c:b5:ff:96:fa:62:d5:29:74:79:26:
                    19:9b:27:26:6a:aa:64:f3:36:f5:ff:34:9d:f7:56:
                    12:ff:3b:fb:19:4d:b3:ff:cf:7a:4c:58:0b:98:f2:
                    15:f5:28:84:a2:f1:8f:cd:c8:e4:c7:e1:92:75:11:
                    09:79:89:04:42:4e:8f:d0:02:4b:ba:4e:c4:ad:d7:
                    f3:78:b4:ec:ef:52:28:ab:6b:56:8a:e3:79:67:f9:
                    63:a3:00:d8:c6:a8:8e:6a:ee:83:de:f7:64:18:a1:
                    7d:dd:5f:7e:ac:61:80:a6:72:e6:d2:44:fd:e3:d3:
                    c3:f9:42:85:2e:20:da:16:ce:13:e7:87:cf:91:c1:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:BF:D2:36:D8:DC:C4:C9:27:92:29:29:1A:61:11:88:5D:54:85
            X509v3 Authority Key Identifier:
                keyid:BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:d8:0d:76:b9:46:db:ff:af:4a:de:d6:d4:bf:5a:7c:98:
         2e:26:7d:a5:20:4c:3e:58:46:59:6b:95:a8:71:8c:18:a8:11:
         f6:e9:cf:1d:0e:9c:10:92:1f:69:56:b6:1b:0c:9f:91:1e:bf:
         5f:35:16:c3:9f:de:69:11:be:fd:7e:b2:56:6b:f9:d9:ff:1e:
         dc:84:9a:4a:95:ee:75:e8:d5:7a:9d:1e:fd:a9:af:9b:f6:90:
         b3:09:d1:b8:8e:62:74:14:4c:81:5f:88:e3:8d:d6:e2:85:7f:
         6d:7f:24:be:cd:69:c5:66:59:0f:59:1e:03:d5:f2:d6:d5:7d:
         c8:9a:d5:21:a8:72:dd:bb:b6:2c:8f:18:d8:47:68:a3:47:2a:
         ec:34:00:a7:58:df:4e:f1:bc:e2:ba:fe:19:7e:92:0c:46:d5:
         50:e9:77:4d:38:75:b2:ae:27:3e:c9:8a:22:e0:a3:95:f9:27:
         b9:6b:e3:59:8c:3b:29:ff:96:b9:2c:cd:c0:d0:78:4c:f1:e5:
         7b:31:a9:9f:10:87:db:1a:8d:2a:0a:ac:c6:27:31:ad:cf:42:
         65:30:1d:ce:bd:a4:d1:9a:3a:58:45:ab:c5:67:80:f4:59:4d:
         e6:0e:8e:31:1e:b2:97:c7:d4:14:6b:94:7e:3b:1e:a4:4c:d2:
         96:ef:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:26:55 2024 by rpki-client on console.sobornost.net