Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
File:                     BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft (raw, json)
Hash identifier:          bbvZhGhqKvM8sodwbrF5zeo0Ll56O12pZ+VPiVPkEGY=
Subject key identifier:   00:54:CA:09:F0:85:5C:3D:DE:01:20:93:C7:DD:DE:67:C0:10:DA:DA
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       0B4E695BFA162DE0AD73C05983B8C1CA7C969560
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
Manifest number:          02E0
Signing time:             Tue 15 Apr 2025 03:38:17 +0000
Manifest this update:     Tue 15 Apr 2025 03:33:17 +0000
Manifest next update:     Wed 16 Apr 2025 07:18:17 +0000
Files and hashes:         1: BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl (hash: ZLjtze5xWKjAaDEVl1y3toN1VPnBMHzqHLwmIKXRneI=)
                          2: 323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa (hash: KKKzf5iQWJYVU1EdiqKNk8a6R6x9jCS17Vv6+VU6AY0=)
                          3: 323630323a666131313a34303a3a2f34342d3434203d3e203135333533.roa (hash: eIBilJQVaFMnF3YH1+bXqBPXe0D/xPHHmMBxzWqKBjk=)
                          4: 323630323a666131313a3a2f33362d3336203d3e203135333533.roa (hash: Z9F3ab4G1qs/JTQ/8SSUoIRJGCnBEHdwpATgGAJjrzU=)
                          5: 323630323a666131313a3a2f33362d3438203d3e203135333533.roa (hash: Voltvvk2DZhQO5XuChWhr0+qI6bfXBW8URGAlTuaBRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4e:69:5b:fa:16:2d:e0:ad:73:c0:59:83:b8:c1:ca:7c:96:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Apr 15 03:33:17 2025 GMT
            Not After : Apr 16 07:18:17 2025 GMT
        Subject: CN=0054CA09F0855C3DDE012093C7DDDE67C010DADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:3d:50:5e:32:a0:5d:5b:9a:2a:26:68:07:
                    94:dc:99:87:1b:b0:ac:20:ac:d6:e2:1b:fe:2a:24:
                    87:95:8a:3b:f8:d0:63:84:d3:89:c4:b0:b0:37:1c:
                    cb:dd:f3:56:7b:76:45:fc:5a:ee:88:d4:27:ca:74:
                    db:b8:de:3d:94:d8:3b:c0:e3:4c:a2:f7:54:c9:f0:
                    ac:02:4c:1c:d7:ae:76:09:c0:90:21:22:dd:59:97:
                    45:22:20:8a:35:69:5a:ab:6e:96:34:a7:b9:06:87:
                    13:da:5c:0e:cc:7b:ac:53:b1:6e:a9:3b:95:0f:f8:
                    2b:98:fe:03:46:99:8a:2b:92:31:0a:83:fe:1f:09:
                    c2:b6:e1:60:53:53:6a:54:18:c1:21:80:b3:23:d6:
                    75:1f:b1:82:b1:61:83:52:91:7d:cd:4c:41:f7:55:
                    37:e3:70:1e:83:2f:0d:7f:e3:9e:32:a9:79:47:44:
                    0f:c8:60:f9:96:70:a4:c6:71:84:9a:f1:a7:ac:6f:
                    aa:33:b2:69:51:f0:91:2b:90:54:6c:05:33:28:84:
                    5f:27:82:88:16:1c:15:d6:19:e9:57:bb:8f:4f:f6:
                    d0:29:00:4a:70:52:a6:8e:33:32:d3:d9:a1:9c:03:
                    4e:ad:fa:35:50:49:d7:e8:b4:31:f0:7b:98:1b:52:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:54:CA:09:F0:85:5C:3D:DE:01:20:93:C7:DD:DE:67:C0:10:DA:DA
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:33:ea:75:64:f6:e4:c6:05:ca:af:3f:27:c1:36:c9:ba:16:
         78:6e:c4:b5:c8:41:bc:d8:74:5e:1c:34:4b:50:88:d0:7f:13:
         ec:6a:ac:7b:f1:cd:69:97:00:59:0f:42:c9:fe:63:0d:89:d5:
         9c:d1:a3:69:28:67:b4:80:06:82:7f:53:71:33:17:22:1d:b7:
         50:b7:df:21:36:0d:53:c9:78:64:6b:80:ea:7d:33:b8:a4:3a:
         a0:d7:43:6e:b2:db:9c:d8:cc:73:ca:89:10:7b:25:d3:ce:3e:
         70:8e:1c:5e:24:3e:be:09:94:bf:8a:3c:7c:71:ed:4d:f6:49:
         60:cf:0f:24:e8:a9:bd:57:2d:64:84:f0:a5:11:ba:d6:8e:9a:
         99:a8:51:3c:5c:58:35:a1:ba:33:8e:d2:be:99:d3:e6:f7:ba:
         d2:cd:a4:f5:ff:03:cd:90:01:da:6b:10:93:d5:a4:86:5f:b9:
         a7:f8:bc:7a:0b:a0:80:56:ad:43:99:11:02:cb:e5:12:c8:b3:
         3c:8a:67:37:17:1a:00:03:0a:bb:0a:1f:01:f6:f7:d5:1d:5d:
         9a:17:e5:42:d7:71:6a:b3:ea:52:3a:d0:61:3e:b3:ca:8d:ff:
         57:08:09:ea:db:fd:6d:73:46:ce:f5:5b:65:47:f2:ba:68:25:
         d1:17:ed:01
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUC05pW/oWLeCtc8BZg7jBynyWlWAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjUwNDE1MDMzMzE3WhcNMjUwNDE2MDcxODE3
WjAzMTEwLwYDVQQDEygwMDU0Q0EwOUYwODU1QzNEREUwMTIwOTNDN0REREU2N0Mw
MTBEQURBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqc9UF4yoF1b
miomaAeU3JmHG7CsIKzW4hv+KiSHlYo7+NBjhNOJxLCwNxzL3fNWe3ZF/FruiNQn
ynTbuN49lNg7wONMovdUyfCsAkwc1652CcCQISLdWZdFIiCKNWlaq26WNKe5BocT
2lwOzHusU7FuqTuVD/grmP4DRpmKK5IxCoP+HwnCtuFgU1NqVBjBIYCzI9Z1H7GC
sWGDUpF9zUxB91U343Aegy8Nf+OeMql5R0QPyGD5lnCkxnGEmvGnrG+qM7JpUfCR
K5BUbAUzKIRfJ4KIFhwV1hnpV7uPT/bQKQBKcFKmjjMy09mhnANOrfo1UEnX6LQx
8HuYG1IqYQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFABUygnwhVw93gEgk8fd3mfA
ENraMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzYvQkIyNjJEMkQw
NkE1QkJGNEZGMjIyNjVDN0I0RjU1MUZGMDM3NDMzRC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGAz6nVk
9uTGBcqvPyfBNsm6FnhuxLXIQbzYdF4cNEtQiNB/E+xqrHvxzWmXAFkPQsn+Yw2J
1ZzRo2koZ7SABoJ/U3EzFyIdt1C33yE2DVPJeGRrgOp9M7ikOqDXQ26y25zYzHPK
iRB7JdPOPnCOHF4kPr4JlL+KPHxx7U32SWDPDyToqb1XLWSE8KURutaOmpmoUTxc
WDWhujOO0r6Z0+b3utLNpPX/A82QAdprEJPVpIZfuaf4vHoLoIBWrUOZEQLL5RLI
szyKZzcXGgADCrsKHwH299UdXZoX5ULXcWqz6lI60GE+s8qN/1cICerb/W1zRs71
W2VH8rpoJdEX7QE=
-----END CERTIFICATE-----