Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/BDAC35496B03F1C607C29EF4B6A1E3B474555813.mft
File:                     BDAC35496B03F1C607C29EF4B6A1E3B474555813.mft (raw, json)
Hash identifier:          0DScS27Rc8HanBNO7/JCPlTrl22P/vMTcImXbYCMtSI=
Subject key identifier:   53:89:0E:B9:04:AF:3F:72:6E:03:CC:01:7B:FC:63:D4:61:62:4A:65
Authority key identifier: BD:AC:35:49:6B:03:F1:C6:07:C2:9E:F4:B6:A1:E3:B4:74:55:58:13
Certificate issuer:       /CN=bdac35496b03f1c607c29ef4b6a1e3b474555813
Certificate serial:       29A5AE169C7E695D7303746270492FB6C71D7263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vaw1SWsD8cYHwp70tqHjtHRVWBM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/BDAC35496B03F1C607C29EF4B6A1E3B474555813.mft
Manifest number:          01
Signing time:             Fri 06 Jun 2025 12:32:12 +0000
Manifest this update:     Fri 06 Jun 2025 12:27:12 +0000
Manifest next update:     Sat 07 Jun 2025 13:02:12 +0000
Files and hashes:         1: BDAC35496B03F1C607C29EF4B6A1E3B474555813.crl (hash: 17s7uhj0EgTmT4yZu3YHud8YkDY9S+LXn62cV5kFios=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a5:ae:16:9c:7e:69:5d:73:03:74:62:70:49:2f:b6:c7:1d:72:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdac35496b03f1c607c29ef4b6a1e3b474555813
        Validity
            Not Before: Jun  6 12:27:12 2025 GMT
            Not After : Jun  7 13:02:12 2025 GMT
        Subject: CN=53890EB904AF3F726E03CC017BFC63D461624A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b4:36:98:64:a9:d6:6e:4d:ff:46:e5:41:f5:
                    7d:e4:86:c4:cd:0b:99:af:65:e7:a1:6b:73:cf:67:
                    02:cf:27:76:33:ff:ac:0e:79:15:4c:f7:6c:50:c7:
                    99:f7:e9:eb:81:55:fe:e6:e6:89:0d:f5:d8:d6:94:
                    dc:2e:17:0c:f5:7d:94:f0:f2:51:a6:67:cf:a8:12:
                    c2:62:ac:59:6c:8a:1e:47:aa:ff:09:6f:b8:37:e6:
                    8c:d3:82:40:a4:90:8f:17:dd:70:a6:20:a2:78:19:
                    ad:ce:0d:d1:d4:ae:71:a2:76:72:7b:65:da:54:e8:
                    9c:bc:a6:c7:af:c5:68:19:99:5d:78:30:a4:ea:2e:
                    31:92:05:4b:ae:d0:80:c2:50:76:20:dc:16:af:f6:
                    8d:00:dc:99:a0:17:ee:84:3b:b6:ac:c4:40:de:0c:
                    0a:75:8d:9c:50:5e:4b:91:d7:e0:eb:a0:84:b5:f0:
                    73:53:51:be:84:b2:b6:f7:10:15:37:e8:4b:37:e7:
                    9a:50:80:a0:d2:e4:86:f1:90:62:35:f7:46:ab:d8:
                    d5:25:74:8b:2a:ba:2e:a1:81:f9:27:7f:05:7e:48:
                    fd:3d:6a:36:92:24:91:2e:96:52:3c:03:6c:73:f4:
                    66:ad:3b:f0:11:96:fc:cb:f3:48:e7:de:f4:74:e6:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:0E:B9:04:AF:3F:72:6E:03:CC:01:7B:FC:63:D4:61:62:4A:65
            X509v3 Authority Key Identifier:
                keyid:BD:AC:35:49:6B:03:F1:C6:07:C2:9E:F4:B6:A1:E3:B4:74:55:58:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/BDAC35496B03F1C607C29EF4B6A1E3B474555813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaw1SWsD8cYHwp70tqHjtHRVWBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b4cb7b0-4f77-442c-9948-a09105cc550b/0/BDAC35496B03F1C607C29EF4B6A1E3B474555813.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:36:7d:52:70:40:d5:09:8d:d6:37:94:d2:86:79:93:b2:
         ec:59:7e:ca:1d:2f:25:18:7e:67:4c:95:67:38:74:fd:3d:50:
         06:2e:40:c1:e5:cd:1f:07:ab:5c:49:23:76:50:fd:43:8a:6a:
         01:71:75:2a:de:58:6d:2c:5e:ef:4e:fc:93:f1:b2:6a:83:e4:
         7f:4f:c6:46:26:7f:e4:77:55:75:a5:36:f8:ba:c7:6b:fb:dc:
         a5:78:f7:89:98:8a:be:4e:5d:38:11:95:3e:e0:2a:cb:3f:b7:
         33:36:6a:aa:4b:84:84:fc:e9:b1:e5:e8:c7:40:70:cb:ef:53:
         dc:b5:08:fc:ce:39:06:75:cf:51:66:88:e9:29:d4:c2:65:06:
         81:c3:ee:52:4b:6c:07:b6:f9:84:fc:a0:84:5c:f5:2c:ee:c5:
         e1:5e:41:dc:47:42:a6:cb:b5:91:79:04:d2:b2:d7:63:cc:3f:
         4b:9d:4e:d3:fd:e7:99:c7:91:8e:2f:2f:49:89:bd:3e:48:e3:
         40:09:ca:1c:b4:a7:cb:74:fd:a0:08:5e:d3:6f:17:d1:1f:ec:
         11:fc:86:5d:27:09:87:8d:ec:42:a5:a9:1b:b2:39:55:f5:84:
         40:22:b8:15:77:60:fe:8e:93:0b:fd:f8:56:c8:b7:73:98:0c:
         75:0c:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:41 2025 by rpki-client