Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft
File:                     BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft (raw, json)
Hash identifier:          /z+AC+dLMhRtjMyZ05VII2eizLUFFd3F++VtxP8Ir6Y=
Subject key identifier:   BE:AF:7B:CB:C0:1E:AE:4F:72:F0:58:DF:BB:E4:5A:B5:20:66:E3:3E
Authority key identifier: BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D
Certificate issuer:       /CN=BB5C68696BDEF6289D58B3C0958E37E0DA23930D
Certificate serial:       4854E0E9D40F1B2B4B10CD3E2B4D388784A3A7E9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft
Manifest number:          42
Signing time:             Sun 28 Jul 2024 23:55:19 +0000
Manifest this update:     Sun 28 Jul 2024 23:50:19 +0000
Manifest next update:     Tue 30 Jul 2024 01:12:19 +0000
Files and hashes:         1: BB5C68696BDEF6289D58B3C0958E37E0DA23930D.crl (hash: QdWrFhVABxi8Pe+VC3Y3WtHr894GxClOylw7m3X9riM=)
                          2: 326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa (hash: kTsgSKbRiL4aYX5SJXPuLKVktTLoWke+1YY/18wC8Yo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:e0:e9:d4:0f:1b:2b:4b:10:cd:3e:2b:4d:38:87:84:a3:a7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB5C68696BDEF6289D58B3C0958E37E0DA23930D
        Validity
            Not Before: Jul 28 23:50:19 2024 GMT
            Not After : Jul 30 01:12:19 2024 GMT
        Subject: CN=BEAF7BCBC01EAE4F72F058DFBBE45AB52066E33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:19:df:76:14:bd:1f:5f:3d:78:04:92:1e:
                    03:bb:5c:8f:54:69:c7:75:c7:54:61:27:b6:de:3c:
                    98:25:6f:1e:eb:6e:46:f9:a8:62:ee:91:44:0f:9b:
                    9e:fe:c0:bb:dc:b7:97:11:15:a7:02:fe:20:b0:4f:
                    c6:4c:fe:ec:25:65:e6:93:0e:21:cc:21:88:14:15:
                    f1:4a:26:41:71:d7:28:65:71:de:6b:3a:09:0d:c6:
                    6c:29:da:da:c7:d4:e0:a5:c5:bd:6c:30:6c:ac:66:
                    5f:8e:91:d5:39:e3:bc:82:e8:54:79:d3:93:53:fe:
                    69:41:9a:e0:0f:19:ad:35:1b:28:8f:e9:d9:39:90:
                    b8:e1:8e:e3:35:41:00:a0:29:46:97:56:ff:d6:e5:
                    76:29:23:f9:7c:99:1d:99:9d:7a:9f:d3:85:eb:0e:
                    54:87:6b:31:45:1e:af:e2:44:54:65:15:b0:d9:2e:
                    c3:f2:0c:33:65:b4:07:94:2b:8c:07:14:0b:ef:64:
                    82:6a:ef:f6:ca:6f:d1:92:c2:0a:52:c8:d3:67:a9:
                    4b:94:1b:43:1b:8c:66:24:82:df:58:a9:a2:78:13:
                    64:3a:6a:e2:5d:07:e0:0d:ea:4d:2a:a1:39:e9:bf:
                    19:f9:9a:38:21:12:9b:05:10:7a:39:ad:1a:2c:26:
                    68:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:7B:CB:C0:1E:AE:4F:72:F0:58:DF:BB:E4:5A:B5:20:66:E3:3E
            X509v3 Authority Key Identifier:
                keyid:BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:88:8a:b3:df:da:f9:6a:58:46:0b:87:97:b8:2a:63:27:e8:
         cd:9a:47:08:65:b7:37:3d:17:7d:8c:8c:8d:d7:ca:73:7f:48:
         c3:bc:83:65:8c:66:e2:b3:8d:10:94:bc:de:89:8e:73:08:7b:
         eb:49:02:d2:a1:18:73:c6:e0:d4:88:98:de:3c:c4:e0:aa:1d:
         3c:80:ae:ca:a7:56:df:07:a1:2e:00:69:4e:0b:e1:ef:8c:fb:
         c1:cc:09:87:ed:a9:64:5d:3f:48:06:4d:3f:98:d7:46:03:9a:
         f4:3a:f1:ce:cd:6a:7b:4e:f9:46:b8:8c:01:7c:6c:ac:4e:69:
         63:44:d0:25:a8:74:b0:41:59:7d:59:89:e4:b4:08:54:06:ca:
         98:4f:30:49:86:2b:56:38:36:f4:db:b9:80:68:49:c1:7e:2a:
         1b:80:84:47:5c:f1:ad:74:dc:16:f0:f5:65:38:23:8e:4c:ad:
         1d:bb:7e:ab:b8:b9:80:fb:4a:18:0f:55:e1:86:a8:b0:2c:f1:
         6b:8d:0f:08:dd:db:b8:96:4b:93:1a:97:73:bf:db:4e:6d:5b:
         45:e9:72:fd:5e:8b:33:b2:bd:69:bb:99:4b:4a:f9:19:d4:28:
         4f:60:6a:86:e9:60:60:67:3b:8a:8f:19:ad:47:b1:c2:30:b1:
         24:9b:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----