Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft
File:                     15BCD75E02E085EB08A3D2F22C872972154D76C5.mft (raw, json)
Hash identifier:          N/CLBaKliFuk0w6RH22TjGScgItcg7Xg7JPkmbNUptY=
Subject key identifier:   F9:89:CC:4D:F7:C1:4C:D6:FE:F8:89:84:AC:79:93:03:4E:43:3B:15
Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5
Certificate issuer:       /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5
Certificate serial:       57C45A58005F5D1A55F33CFFFED18CC4D797E50B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft
Manifest number:          38
Signing time:             Sun 13 Apr 2025 12:40:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:35:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:27:39 +0000
Files and hashes:         1: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: d3iHJMweVF6LgmzJW5tJ0HjZ2o8ZywN7DAOmyK8JVYg=)
                          2: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: /p3XIXAwmgRDqk/MpUnnmCFnaCoN5spxmwT1xU2FNhc=)
                          3: 15BCD75E02E085EB08A3D2F22C872972154D76C5.crl (hash: S6eHB+1n2Zv0av2pNBywK/VUG+bQ5XC/jCTmtyOLe/w=)
                          4: 326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (hash: Nppx6T7C9uSX4M2F35MaPm3kfPyEttoHWkeXfEOv3pc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c4:5a:58:00:5f:5d:1a:55:f3:3c:ff:fe:d1:8c:c4:d7:97:e5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5
        Validity
            Not Before: Apr 13 12:35:39 2025 GMT
            Not After : Apr 14 13:27:39 2025 GMT
        Subject: CN=F989CC4DF7C14CD6FEF88984AC7993034E433B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a6:78:05:2d:5a:52:ec:87:b8:83:43:82:aa:
                    01:86:18:9d:3b:24:29:4f:36:05:c7:b0:45:3e:cb:
                    ec:d9:40:b0:d3:15:3d:cc:93:f7:b2:74:46:f4:5d:
                    d1:c7:5a:54:21:e7:5b:d5:78:24:3c:d1:e0:ff:30:
                    ba:74:46:b7:c3:d2:82:8c:d3:9b:5d:80:53:e2:4f:
                    0c:9b:b5:61:97:4d:89:81:62:0e:fb:29:05:60:c4:
                    1c:4d:fe:86:65:ba:9a:8a:d6:ab:40:36:3c:6f:43:
                    53:ec:7f:2e:da:89:9e:ae:98:15:8f:24:a8:77:89:
                    cd:66:7b:b7:33:81:af:94:c1:88:6d:df:b4:b6:77:
                    6b:e1:c4:bf:e5:16:e0:3d:cb:cc:c5:d9:45:45:e6:
                    ea:c7:38:83:a2:7b:66:d8:d4:68:39:e4:4e:c4:09:
                    8e:a8:a1:97:c1:17:51:12:51:10:19:19:8d:07:85:
                    ec:36:91:65:61:89:07:db:2d:e4:01:99:d6:04:a9:
                    d4:47:dd:4e:b8:31:8e:b0:16:fb:60:48:a7:ba:c0:
                    dd:b4:c1:81:ca:a1:9b:b6:81:64:3b:df:79:b3:0c:
                    90:23:5a:ec:34:9d:24:26:f7:0e:ca:03:59:b0:86:
                    96:30:43:ac:8e:b1:b2:1d:95:15:84:ab:37:29:89:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:89:CC:4D:F7:C1:4C:D6:FE:F8:89:84:AC:79:93:03:4E:43:3B:15
            X509v3 Authority Key Identifier:
                keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:31:d8:24:12:1a:38:f0:30:d5:ef:e8:3c:6f:7f:d1:33:
         da:6e:a6:70:49:03:67:80:49:c9:79:39:00:e1:19:f3:49:d0:
         1a:7c:35:25:a6:60:8d:b2:a0:11:50:02:2a:bd:f8:ff:0a:6e:
         fb:89:3b:00:14:51:8c:7f:61:7d:e4:95:23:29:8b:d8:ec:b8:
         59:c9:7d:9f:52:f6:bd:7e:78:20:02:aa:8e:bd:87:ca:dc:d2:
         f0:c1:94:6a:bf:df:08:b2:17:ab:08:82:10:ce:cb:8b:96:cb:
         fb:f7:b6:62:1a:b3:ec:63:0c:f7:6e:b0:19:25:ca:30:82:f3:
         bc:b1:59:af:8d:9e:25:7b:48:e8:fe:38:fc:d2:d4:62:12:b1:
         2d:01:61:fd:b6:cd:5a:fe:1b:1a:20:af:4f:87:18:97:75:cc:
         f9:e0:80:49:0a:36:55:69:9c:73:5e:bd:2f:b8:bb:7e:2e:4d:
         30:a8:3d:16:fa:66:99:d7:ea:92:ef:9c:55:52:71:ab:10:62:
         45:69:33:a3:ea:b2:b8:b5:a5:5d:56:ac:40:ce:0e:93:ac:f3:
         51:14:9d:7b:4a:82:ec:1e:56:8e:1d:9b:61:24:9e:53:ba:58:
         44:a0:25:1c:f6:af:ae:fc:3a:6e:21:db:a4:ec:20:6a:e2:b9:
         f8:5e:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----