Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft
File:                     BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft (raw, json)
Hash identifier:          6vFc1ey9UCx8WrMoqDOkwujnGh2Srw4XNCkz3FJu3kE=
Subject key identifier:   C3:7D:8F:A8:D2:6E:DA:51:62:3E:1A:BC:52:A0:C6:BB:97:E0:EC:EB
Authority key identifier: BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
Certificate issuer:       /CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
Certificate serial:       1719088C720D4EA50329FC0D2D85A1CF1704B511
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft
Manifest number:          18
Signing time:             Fri 28 Feb 2025 03:47:28 +0000
Manifest this update:     Fri 28 Feb 2025 03:42:28 +0000
Manifest next update:     Sat 01 Mar 2025 04:03:28 +0000
Files and hashes:         1: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: RNeN2RyvWrzORyjJcOdqaCjXTGyChhFIgS7g0DeHkHY=)
                          2: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: joCtQ8QWuV/kS9vjxMvuKSqwizppQS6cDGs5ezlVLH0=)
                          3: 326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (hash: Ahb7jSQzD02m+l5Huwj04pp4P7jOkGjSvihPKhxaWXc=)
                          4: BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.crl (hash: ez2eti7+DNCqvC9RaZaJ9su7BxRuWt+Tr7seE0ApPWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:19:08:8c:72:0d:4e:a5:03:29:fc:0d:2d:85:a1:cf:17:04:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
        Validity
            Not Before: Feb 28 03:42:28 2025 GMT
            Not After : Mar  1 04:03:28 2025 GMT
        Subject: CN=C37D8FA8D26EDA51623E1ABC52A0C6BB97E0ECEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:8d:d3:6e:fa:6e:99:59:64:c8:59:57:e5:
                    f4:6e:4c:88:62:8f:67:d4:aa:fe:89:79:36:7e:e9:
                    e5:52:11:dd:be:f2:32:a8:17:77:be:29:d7:17:f3:
                    52:18:a1:a5:f1:02:bb:86:2a:f8:03:0f:16:12:76:
                    e8:e6:53:92:7f:a4:28:cf:c3:1e:80:fa:55:08:2f:
                    2d:b2:7e:61:8d:ab:8a:2e:5e:68:1e:4f:af:1a:85:
                    d7:30:7d:05:eb:ed:50:8b:30:7f:df:a2:f0:73:49:
                    fd:cd:5a:03:61:6a:15:37:69:f2:a2:c1:e0:cb:cc:
                    44:36:f9:31:e3:63:c9:9d:c5:12:b8:bf:44:2e:ac:
                    08:40:01:0e:52:c4:71:4c:f6:cd:87:90:fe:a9:7e:
                    06:b9:af:56:88:35:64:dc:0f:b3:56:1c:dc:be:6e:
                    c0:b2:97:5a:6d:22:68:c2:41:c6:0f:32:37:c1:ec:
                    f9:6f:d3:c2:37:ad:7b:55:2c:b6:a8:1e:87:05:43:
                    8d:16:43:c4:15:7c:13:e3:93:2d:fe:59:91:ea:ae:
                    3e:a0:86:07:52:e0:5b:99:10:fb:40:28:d7:ae:f8:
                    b0:75:76:7e:d8:d6:1e:df:67:13:0c:e7:42:2c:ef:
                    38:a1:f6:28:50:14:aa:e2:22:cf:0f:b8:1a:bc:67:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:8F:A8:D2:6E:DA:51:62:3E:1A:BC:52:A0:C6:BB:97:E0:EC:EB
            X509v3 Authority Key Identifier:
                keyid:BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:bf:fd:3f:99:fa:7e:de:28:b9:8f:f5:2f:8d:9c:69:b4:
         f8:f3:71:55:30:f0:e8:e2:e5:88:8c:77:e3:78:b6:1c:9b:a7:
         e1:87:9a:d6:46:7e:4e:7b:cb:06:4c:7b:15:9d:8d:6c:3f:f6:
         d0:fd:cc:b9:35:16:db:9f:8d:fa:83:38:37:44:1a:a6:46:dd:
         45:e1:ed:01:40:5d:eb:3c:98:e9:50:6a:f2:f6:2f:95:4b:b6:
         5a:1d:1d:76:1e:89:7a:6e:ef:ec:62:39:8d:50:82:a5:fa:04:
         df:0a:2a:22:4d:ce:7e:29:e0:98:d5:cf:04:62:84:67:2e:8e:
         c9:ac:ae:fd:0a:d5:e4:57:a1:9d:80:7a:4d:f1:a1:31:96:9e:
         ea:bb:c2:9b:45:a5:02:d4:ba:24:f5:25:4d:3c:70:23:21:45:
         81:a0:53:ba:2f:a3:ce:5f:8c:35:7e:8e:7f:7d:dc:21:4a:77:
         d3:16:b8:0e:8b:da:bf:f4:6c:2c:9f:b7:d6:22:3a:b5:58:17:
         96:a6:13:72:2f:53:cc:86:69:6c:b1:fe:d3:e1:b9:33:4b:7b:
         b8:d0:e9:af:e9:3e:e4:91:8f:fb:0a:f7:69:f1:d8:9c:90:d4:
         7c:dd:75:e9:2e:b9:6e:16:8c:b6:39:b6:cd:76:13:ed:01:1d:
         e7:3e:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----