Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File:                     BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier:          A2yLLgLM7I/PdIA1HZSqQ8G08jSlsHEcSOsPArxCByY=
Subject key identifier:   20:4D:83:46:81:75:77:2F:CC:C7:40:E1:AA:AE:84:17:F3:DA:46:D1
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer:       /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial:       03E58116F1D8704138C2BBB477F666EDD83A6869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number:          0242
Signing time:             Sun 13 Apr 2025 00:57:33 +0000
Manifest this update:     Sun 13 Apr 2025 00:52:33 +0000
Manifest next update:     Mon 14 Apr 2025 01:55:33 +0000
Files and hashes:         1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: SGODbAyBxwcghrtrdOQWg6Xb4TmCub6BHJjVC+c+82w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e5:81:16:f1:d8:70:41:38:c2:bb:b4:77:f6:66:ed:d8:3a:68:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
        Validity
            Not Before: Apr 13 00:52:33 2025 GMT
            Not After : Apr 14 01:55:33 2025 GMT
        Subject: CN=204D83468175772FCCC740E1AAAE8417F3DA46D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:82:3d:5f:c6:65:27:22:1b:31:2c:b9:dd:
                    c9:8f:f7:98:23:d3:4b:fb:62:ed:a5:d8:b7:b7:1f:
                    54:20:2c:6c:2b:09:bd:5a:a6:b4:f9:8d:ae:82:41:
                    11:5c:13:98:85:7b:5d:d8:38:77:d1:40:7c:ed:08:
                    0f:50:33:f8:30:24:87:fe:dd:3f:09:5e:fd:2f:ec:
                    90:8b:dc:c1:da:8e:4c:8c:9d:2d:9a:85:7f:b9:02:
                    7b:9e:4f:8b:c2:b5:6b:3e:fa:f1:1e:f7:82:b7:ab:
                    00:8c:00:fc:69:8b:70:dd:b1:71:2c:d0:42:2b:26:
                    64:c2:1f:19:16:1f:5d:c6:59:10:de:83:fc:36:90:
                    44:ac:8b:b2:57:12:7e:06:c3:90:5d:44:c1:78:87:
                    10:44:35:40:31:ec:66:86:77:ad:fa:d6:33:9e:a4:
                    5f:d8:49:02:8a:f1:66:37:17:5b:4a:2c:13:12:72:
                    34:fb:10:6f:38:12:72:e7:10:d0:20:c5:c7:85:a8:
                    a5:9b:ae:d2:e2:2d:99:83:d7:e6:64:c5:19:3b:97:
                    62:d2:1b:cc:4a:f6:aa:3b:68:46:62:17:03:91:bc:
                    09:85:04:50:20:86:34:3a:90:32:8b:a3:1c:e4:f1:
                    5d:b8:4f:ea:fe:d5:90:fb:c7:59:20:87:d8:8c:21:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:83:46:81:75:77:2F:CC:C7:40:E1:AA:AE:84:17:F3:DA:46:D1
            X509v3 Authority Key Identifier:
                keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:e5:24:49:96:8a:be:27:64:12:4c:c7:75:45:cd:cc:d6:
         e2:62:e7:1e:65:3f:c9:24:41:98:c4:e4:c2:c4:f2:fd:cf:d2:
         6a:16:c7:52:ac:94:ea:b5:68:6f:bc:d2:d0:4c:8f:76:9a:3e:
         78:bd:18:70:21:7e:92:96:29:9c:e7:dd:73:ea:26:21:7a:c2:
         28:ea:fb:1e:0e:c4:56:70:d3:f6:84:31:49:3d:42:98:78:2c:
         eb:90:96:b2:35:f4:dc:80:74:0d:bd:41:b1:66:7e:53:99:74:
         e8:74:4c:09:f3:a4:9a:8c:6c:91:da:40:93:e8:89:d3:4c:aa:
         e1:74:b6:84:55:9c:06:1d:79:b1:2a:80:fe:13:21:05:c2:34:
         1c:7b:7f:0c:eb:f4:95:5b:1c:7b:a4:70:e9:5e:42:9e:6b:1f:
         45:c6:84:47:c2:fb:01:9f:84:c8:3a:5d:3b:71:ff:fb:81:fb:
         4d:57:a3:fd:56:d7:5a:63:af:69:bb:3b:0e:7a:fa:fa:6f:66:
         a5:77:98:2f:56:26:31:c5:2e:1e:d9:1c:dc:3d:cc:dd:5a:ab:
         49:14:c8:7c:c5:1c:b0:dc:03:96:8f:c7:32:a2:74:21:f6:77:
         8d:11:b2:05:66:2a:05:35:b1:4c:5b:c3:90:11:b7:71:f0:2b:
         77:ce:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----