Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
File:                     488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft (raw, json)
Hash identifier:          yhBOABqk/N7W0yjDiRBWtMfhg68d9V/MzvXkcbEltRs=
Subject key identifier:   85:BE:69:E6:42:D9:09:35:B1:FA:CC:5E:DB:E2:FC:C1:43:F8:E6:40
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Certificate issuer:       /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial:       599D238137416BC4C137AC5275697E55BF71E82F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
Manifest number:          01AF
Signing time:             Tue 24 Dec 2024 22:57:26 +0000
Manifest this update:     Tue 24 Dec 2024 22:52:26 +0000
Manifest next update:     Wed 25 Dec 2024 22:58:26 +0000
Files and hashes:         1: 326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa (hash: AfzgORGNBz+QXzbNFXc6g6iPrPpHM5f2+sQ8boLLtk8=)
                          2: 326130613a363034343a393030343a3a2f34382d3438203d3e20323135343433.roa (hash: N53r+fj2CPzmLYdetT5f7xYtYHnCPblA/IGh+xuvj+s=)
                          3: 326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa (hash: XpXMXD7WLvF9GioVgay+deJvR4n/11AkEGGwbKMgjqI=)
                          4: 326130613a363034343a393030373a3a2f34382d3438203d3e2030.roa (hash: zdoHRl9eAZv7jX3eavPcp2wW0eTr8w9Ub9N1fnI5ZzE=)
                          5: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl (hash: Pr4UhQaXcOkfLyQQ10nP8c9Oc1dA/1QdStRmT6vNd3U=)
                          6: 326130613a363034343a393036303a3a2f34342d3434203d3e20323135343339.roa (hash: pd2Lrnwn2H4VmAPI0n0iBYgBDsKpqvsJNjLpsnux5z0=)
                          7: 326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa (hash: 4s76+hjle7KOmr0oXZaew7Z44NKxKS5Gb9h6WpO2Mqk=)
                          8: 326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa (hash: ZmUx6T9QZCqdwLpnTe2pjNUl5+p3SFgFCFUVwxwmZA4=)
                          9: 326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa (hash: 8z/u3oMp7pRsAS7NaPJ16DpgAAP2eKfJs4XUiSJwoZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9d:23:81:37:41:6b:c4:c1:37:ac:52:75:69:7e:55:bf:71:e8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
        Validity
            Not Before: Dec 24 22:52:26 2024 GMT
            Not After : Dec 25 22:58:26 2024 GMT
        Subject: CN=85BE69E642D90935B1FACC5EDBE2FCC143F8E640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:05:98:9c:87:28:e3:f9:8c:0a:46:75:b8:
                    26:05:19:de:a3:7a:74:a7:a5:b5:1a:1c:c7:d9:20:
                    7c:18:c5:18:67:49:4e:8a:4a:78:37:53:95:a8:03:
                    7c:85:cb:95:fe:b2:5d:19:b7:05:a4:e3:f0:ed:15:
                    58:2e:f4:88:98:ed:9d:aa:1b:f5:3e:e7:3f:08:05:
                    b5:f3:bf:7b:3d:d5:75:9f:16:5b:54:65:7c:73:3b:
                    43:f4:2e:4d:ba:4e:f8:49:e6:b8:66:55:50:36:64:
                    8b:ab:c6:c9:e4:c9:26:f8:e8:a2:41:05:59:f5:99:
                    5e:dd:67:8d:ef:e1:e4:b4:ec:10:8a:83:fc:cc:0e:
                    9c:dc:c5:19:70:0c:7d:02:35:cb:b3:35:6f:6e:c6:
                    98:c8:f2:0a:00:e4:f3:14:0e:7f:19:15:b1:1f:11:
                    00:90:3e:73:f6:60:a1:ec:16:de:b6:39:06:c2:82:
                    70:db:29:21:28:c3:46:95:46:4d:f4:ae:fe:6b:35:
                    b1:b4:06:68:ab:67:5a:08:cb:e9:d4:f6:c3:58:64:
                    7d:e6:f1:c6:44:c2:6e:45:63:9b:fd:a2:79:f6:dd:
                    75:9c:39:aa:69:63:f8:c7:52:8a:4e:f5:d6:03:04:
                    88:6b:c9:49:9f:5d:30:4d:47:a1:6a:a3:c0:c6:00:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BE:69:E6:42:D9:09:35:B1:FA:CC:5E:DB:E2:FC:C1:43:F8:E6:40
            X509v3 Authority Key Identifier:
                keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:54:8f:e8:ce:84:bd:5b:93:e2:65:6f:25:a4:9f:84:16:06:
         62:7f:d5:e3:77:3b:c5:27:35:56:0d:ce:28:8b:1f:e5:d4:e8:
         15:e2:ed:3a:9f:40:2d:ed:3e:20:7c:5a:c2:b5:82:fa:76:1e:
         6b:6b:a6:c4:73:a4:a6:38:c6:bd:40:b3:dd:34:18:d5:c4:83:
         dc:51:fa:cd:5c:51:e9:d4:59:37:69:3d:66:b5:22:58:05:a7:
         80:44:2b:a1:72:dd:f6:eb:2b:ff:eb:de:37:d6:f0:25:bb:21:
         f4:2e:3e:54:49:24:b4:45:f7:20:d7:bd:a8:ad:0b:d3:c2:6c:
         27:b9:ef:da:fb:87:9a:5a:18:40:bf:48:78:92:c5:a9:c2:58:
         72:db:dd:16:65:d5:1f:60:c3:60:b0:c2:04:6b:23:44:41:88:
         1b:66:e7:a6:fd:90:4b:20:ae:4d:27:cd:25:1b:e4:21:a8:b9:
         d6:28:ad:36:53:b8:f2:41:ea:4a:99:e3:6d:4d:99:84:46:73:
         b8:1c:55:39:df:ce:1b:7e:68:c5:75:f6:bd:e9:3c:f4:2e:4c:
         dc:20:57:27:4c:9b:35:17:7d:29:f8:8e:cf:dd:81:c0:da:54:
         08:11:bf:5a:88:ee:6e:25:74:6a:5b:b2:89:e6:8b:6f:2d:98:
         e3:c9:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:59 2024 by rpki-client on console.sobornost.net