Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/BCED96DA574B2BB25339B60BA5A09CC65FC97E69.mft
File:                     BCED96DA574B2BB25339B60BA5A09CC65FC97E69.mft (raw, json)
Hash identifier:          U4afvJlbS/NT52gNkHhMOlug3wdOgz1YCY5hJIM2K8E=
Subject key identifier:   05:DE:EC:16:82:D9:F7:60:61:EC:5E:5D:62:73:E4:58:50:2D:12:C0
Authority key identifier: BC:ED:96:DA:57:4B:2B:B2:53:39:B6:0B:A5:A0:9C:C6:5F:C9:7E:69
Certificate issuer:       /CN=d90d8aba2a072df282a2c7ab18af110c1c83b0687a1fec2815
Certificate serial:       0806EB914AB7285BAC99C43CB6425EF5C2F195FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a072df282a2c7ab18af110c1c83b0687a1fec2815.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/BCED96DA574B2BB25339B60BA5A09CC65FC97E69.mft
Manifest number:          03
Signing time:             Sat 07 Sep 2024 16:37:33 +0000
Manifest this update:     Sat 07 Sep 2024 16:32:33 +0000
Manifest next update:     Sun 08 Sep 2024 18:46:33 +0000
Files and hashes:         1: BCED96DA574B2BB25339B60BA5A09CC65FC97E69.crl (hash: OLOQuu8SWjXchBo2oCD/7jven35WTNCBuaszFd9GyIQ=)
                          2: 32332e3136342e3135322e302f32342d3234203d3e2030.roa (hash: D1P0QV/kMJZp07xsXQr+TJwwkRR70rRHxeAfM/R8kdY=)
                          3: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 9GrV+dGcZnDbo5/ju8PmgX+iYBJ87lAPy3Ro9EwZfQQ=)
                          4: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: tLZo723BbKwB0AaH4kUdM45wXXOS1ez6qG1x/syxQ4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:06:eb:91:4a:b7:28:5b:ac:99:c4:3c:b6:42:5e:f5:c2:f1:95:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a072df282a2c7ab18af110c1c83b0687a1fec2815
        Validity
            Not Before: Sep  7 16:32:33 2024 GMT
            Not After : Sep  8 18:46:33 2024 GMT
        Subject: CN=05DEEC1682D9F76061EC5E5D6273E458502D12C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:b5:cc:60:4d:8d:d1:c5:1e:4c:a7:f4:04:
                    22:a3:1a:b5:43:e9:3b:23:1d:ba:23:e7:66:22:4c:
                    a7:22:35:b1:f2:27:86:67:2a:d8:e8:2d:55:fc:ab:
                    1d:4b:3c:44:87:07:a4:b3:7f:88:6e:98:05:79:81:
                    e1:28:a9:fb:49:81:72:17:05:64:7a:6b:43:c7:45:
                    2b:82:9e:79:48:0f:0d:0c:08:34:46:5f:0a:de:55:
                    ca:eb:4e:0d:5a:10:9c:02:e6:cb:0f:c8:bc:0b:48:
                    55:10:3f:52:07:a3:1a:57:6d:e2:b7:d8:eb:9d:29:
                    a0:d5:8d:e0:6a:b2:2c:5e:a4:c2:c7:0c:49:0b:fb:
                    b4:f6:ca:71:23:db:df:67:34:b7:c7:7a:be:60:a5:
                    98:a6:c0:a4:4f:c3:56:ec:00:42:6e:f2:51:9c:62:
                    92:de:de:11:57:1f:08:ca:93:df:c3:51:c7:6b:44:
                    ff:7c:5f:58:ef:3f:09:96:d2:b3:a7:57:d2:7e:47:
                    55:5a:8e:2b:93:13:f5:32:90:af:16:93:25:77:87:
                    70:d9:b2:06:8f:ee:37:be:21:11:ba:40:cf:e9:93:
                    c8:b4:53:79:9a:9c:16:bb:84:be:63:8a:f6:93:1b:
                    b9:0f:02:8d:e8:8b:d5:b8:75:fb:46:4e:00:89:f3:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:EC:16:82:D9:F7:60:61:EC:5E:5D:62:73:E4:58:50:2D:12:C0
            X509v3 Authority Key Identifier:
                keyid:BC:ED:96:DA:57:4B:2B:B2:53:39:B6:0B:A5:A0:9C:C6:5F:C9:7E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/BCED96DA574B2BB25339B60BA5A09CC65FC97E69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a072df282a2c7ab18af110c1c83b0687a1fec2815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/BCED96DA574B2BB25339B60BA5A09CC65FC97E69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:76:3e:0a:1d:c6:bb:42:24:8e:2b:07:51:2e:72:97:5c:d4:
         de:5f:d8:23:4d:cd:2d:a7:4f:9b:93:90:dd:c9:ed:2b:57:3b:
         d2:99:ae:5f:c1:86:22:fa:81:7c:99:5c:78:b9:bb:74:9c:d7:
         3a:38:b6:a6:a7:b3:16:7a:dc:0a:b7:e3:23:0a:ac:1f:83:f4:
         32:55:72:44:9f:e9:a0:fb:14:38:5c:30:04:dc:f4:2d:7f:11:
         14:4f:b9:98:83:6b:f2:ee:8a:68:d4:94:93:2e:86:18:08:82:
         ff:fb:4f:e9:d4:00:ff:76:0c:30:7f:76:ec:50:72:59:cb:2c:
         e6:84:f9:04:f3:81:5d:a0:c2:fd:c6:df:22:6a:93:cb:a0:12:
         fe:a3:76:a9:86:5a:46:15:f9:d5:92:b7:b6:4e:31:1e:35:2b:
         2e:8b:94:74:6d:d9:b8:ac:55:a2:ae:33:ca:6d:64:42:5f:36:
         dc:ad:62:8f:fd:96:4c:0c:dd:be:27:d8:07:2f:6e:5e:4f:f7:
         45:ad:a1:c6:49:38:31:b4:06:ee:e6:36:8b:53:bd:67:74:e2:
         5b:1d:95:21:54:b5:7d:76:0c:b7:0d:96:4a:6b:bb:30:2d:a7:
         79:dc:d0:65:41:38:22:14:9d:20:cb:21:08:a6:5e:70:89:8f:
         46:ff:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org