Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft
File:                     BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft (raw, json)
Hash identifier:          /6+WVU3WZAknWM7sa4vMg5rc5WYyQsuRFFRopirc1lE=
Subject key identifier:   07:02:7E:9E:D3:04:6E:C6:57:2C:A7:31:27:68:CA:DB:93:A9:82:0B
Authority key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB
Certificate issuer:       /CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
Certificate serial:       2236C77270FD0F6736B2F2C1795E5185172118ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft
Manifest number:          0148
Signing time:             Thu 23 Jan 2025 06:36:39 +0000
Manifest this update:     Thu 23 Jan 2025 06:31:39 +0000
Manifest next update:     Fri 24 Jan 2025 06:36:39 +0000
Files and hashes:         1: 326130613a363034343a623062303a3a2f34342d3434203d3e20323135323136.roa (hash: hPbd4k29ivFHm5U0TITZAT0kaKm6DkOAv/scdulFqpo=)
                          2: BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl (hash: O9aqyx2XvC/ZfG1NohOUlo3iI0IG5gDUnrawfgfff8M=)
                          3: 326130613a363034343a623030303a3a2f34302d3430203d3e2030.roa (hash: WoEoodpHHPQjYZ1nurqcWGEgzZiv+31vPY0yRIsxoMQ=)
                          4: 326130613a363034343a623030303a3a2f34342d3434203d3e20323135323136.roa (hash: XSdZ/3ujw8VKYw+c6yv2T1vcl8TZmipaKYVRnlmd6mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:36:c7:72:70:fd:0f:67:36:b2:f2:c1:79:5e:51:85:17:21:18:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
        Validity
            Not Before: Jan 23 06:31:39 2025 GMT
            Not After : Jan 24 06:36:39 2025 GMT
        Subject: CN=07027E9ED3046EC6572CA7312768CADB93A9820B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:65:74:37:90:85:c8:6c:dc:49:e1:a7:3d:
                    8b:06:b2:1c:65:9d:20:78:b5:a3:2f:36:5d:71:5e:
                    16:ac:df:41:07:5e:b6:67:2f:58:c7:ef:c5:0f:e9:
                    bc:b7:1c:cd:e1:7c:e4:f0:d5:0a:7b:3e:f3:49:de:
                    e8:9d:b8:7c:a9:dc:1e:4a:66:b3:21:2e:b8:65:cf:
                    9c:85:63:f8:f7:5f:68:0b:28:56:f7:b4:cd:0c:83:
                    a7:2f:db:64:45:f4:1d:10:51:01:2f:3c:98:8e:c1:
                    9d:8a:1e:2d:eb:9f:ab:9a:aa:a0:a4:ba:3a:29:65:
                    b6:74:20:02:dc:99:e9:8c:ee:26:f7:8a:e3:8f:17:
                    99:bb:d7:df:1b:47:74:85:3d:d5:9f:ad:f0:ec:0c:
                    35:37:3a:23:05:49:67:c2:c1:af:8b:d5:f3:fe:96:
                    97:e0:51:e0:0b:15:76:4f:0f:9b:cd:e1:1a:9a:58:
                    a7:58:3c:aa:73:0a:06:66:14:90:bb:e3:e2:30:e1:
                    e2:77:3c:a3:3a:50:11:a5:27:b7:1b:82:05:e9:53:
                    e8:de:7a:84:c5:19:40:07:14:2e:45:66:9d:52:4d:
                    e6:6a:f4:8c:81:f9:0c:a5:8e:74:f7:e6:ff:96:69:
                    c8:34:70:d9:e5:57:8b:87:a5:a8:94:14:10:62:6b:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:02:7E:9E:D3:04:6E:C6:57:2C:A7:31:27:68:CA:DB:93:A9:82:0B
            X509v3 Authority Key Identifier:
                keyid:BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:ad:01:e7:e2:83:3a:ad:d1:62:de:cb:e6:db:43:ca:47:
         6f:ef:96:02:fd:bd:e1:c7:21:71:ef:57:76:85:5e:ff:92:3f:
         56:c8:5f:0e:36:96:b1:c8:e7:34:28:2b:2e:c7:39:a8:ef:e4:
         93:21:8e:45:9b:78:27:3d:07:58:c3:72:db:14:3b:02:ee:d5:
         36:1b:1f:76:6b:f6:5f:0a:4b:d9:fc:ae:7b:3a:48:3e:79:d7:
         c8:a8:43:34:c2:7b:45:68:84:01:28:f6:3c:38:69:fd:78:58:
         1b:3a:a8:c3:d7:cb:c6:e9:ee:52:ee:70:6b:2b:17:4f:90:3b:
         26:62:9d:34:aa:88:2e:db:d2:89:2d:71:f2:b8:19:77:b9:e5:
         c0:f3:22:2b:04:08:dc:da:50:38:ef:fc:59:a4:42:43:6e:ff:
         d6:53:7c:57:a7:ab:1b:b3:03:06:de:ef:d9:66:61:b0:ca:cb:
         1a:df:6e:0c:b0:95:f0:f4:3f:11:7f:2e:26:88:a0:0f:d6:4b:
         08:f2:4b:f9:9a:04:b5:8a:47:ef:8b:57:88:f5:2e:17:60:53:
         9f:e3:02:47:64:07:dd:bd:45:b3:fe:70:f7:4f:ad:36:2b:98:
         54:ca:b8:dd:c3:f8:1a:e1:36:68:ec:11:6e:99:d2:68:85:ba:
         e4:77:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:48 2025 by rpki-client on console.sobornost.net