Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/BE8A7AC02556C14368364036D5427F53187B6D9D.mft
File:                     BE8A7AC02556C14368364036D5427F53187B6D9D.mft (raw, json)
Hash identifier:          JhSb6ujOCCSt3IwshAUCTXbgrVwC51zGknqdXI8Riq4=
Subject key identifier:   CC:4F:24:7D:26:71:72:C1:4A:64:B0:D1:0E:C9:69:61:94:B5:85:D9
Authority key identifier: BE:8A:7A:C0:25:56:C1:43:68:36:40:36:D5:42:7F:53:18:7B:6D:9D
Certificate issuer:       /CN=BE8A7AC02556C14368364036D5427F53187B6D9D
Certificate serial:       355AC98031BB3DF682738DCDF437B3AED1292F60
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/BE8A7AC02556C14368364036D5427F53187B6D9D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/BE8A7AC02556C14368364036D5427F53187B6D9D.mft
Manifest number:          09
Signing time:             Wed 26 Jun 2024 09:52:54 +0000
Manifest this update:     Wed 26 Jun 2024 09:47:54 +0000
Manifest next update:     Thu 27 Jun 2024 12:16:54 +0000
Files and hashes:         1: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: ks9PAyAkU0g+iVOrfNwpF6jLe/OqvCyGeO4dUDQ7PgI=)
                          2: BE8A7AC02556C14368364036D5427F53187B6D9D.crl (hash: 1Z1sCDwtqVAHjc+64UN3jbW6PITj1OxpWIqD6eOUdR4=)
                          3: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: jko+nUSHCzc4DLRdgG5ct8IIrlTeoKonDjIjVoMZnUs=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5a:c9:80:31:bb:3d:f6:82:73:8d:cd:f4:37:b3:ae:d1:29:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE8A7AC02556C14368364036D5427F53187B6D9D
        Validity
            Not Before: Jun 26 09:47:54 2024 GMT
            Not After : Jun 27 12:16:54 2024 GMT
        Subject: CN=CC4F247D267172C14A64B0D10EC9696194B585D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:81:c3:21:3d:51:69:2b:18:20:d3:1f:b2:
                    7a:10:20:01:96:0b:f2:1c:c6:7c:30:cd:d3:54:4e:
                    8d:69:39:fe:16:e8:fe:c4:7d:43:74:5d:47:cc:93:
                    f5:fe:5a:2f:52:ee:b6:a2:da:f6:65:5a:59:5f:d7:
                    b4:77:1b:ed:9d:cb:4f:5c:e1:56:40:ec:6b:19:9e:
                    1f:bd:df:83:a4:97:79:17:b6:39:e6:af:8c:4f:4d:
                    ac:f1:47:09:53:59:66:65:02:5e:e5:1d:65:c1:c5:
                    8a:10:15:ac:9b:77:b4:48:4c:2d:17:a2:6d:7d:fd:
                    84:49:e5:9e:94:59:32:f3:98:d9:27:09:50:57:da:
                    82:03:75:96:01:89:cd:e5:d4:8a:27:97:9a:c3:3a:
                    ee:02:45:9d:d6:14:71:e8:82:dd:f6:55:f1:9d:08:
                    cd:7e:9f:bf:6c:11:01:30:de:4a:e5:1b:2c:83:ca:
                    ee:9e:5e:a5:a2:f1:c0:d2:53:0c:89:88:ed:98:cc:
                    66:a4:22:d6:79:b5:7b:3c:41:76:f4:8a:13:51:1d:
                    ad:44:ac:f9:11:74:41:9e:49:c6:e2:2b:32:34:30:
                    d1:cc:da:4f:65:ae:a9:4d:89:fd:44:2f:ae:98:06:
                    44:65:e2:7e:8a:a6:01:b4:78:d6:02:d5:0e:7f:c5:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4F:24:7D:26:71:72:C1:4A:64:B0:D1:0E:C9:69:61:94:B5:85:D9
            X509v3 Authority Key Identifier:
                keyid:BE:8A:7A:C0:25:56:C1:43:68:36:40:36:D5:42:7F:53:18:7B:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/BE8A7AC02556C14368364036D5427F53187B6D9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/BE8A7AC02556C14368364036D5427F53187B6D9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/BE8A7AC02556C14368364036D5427F53187B6D9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:e6:05:91:b7:62:0b:f6:17:8b:95:62:be:dd:e1:7c:1d:
         95:dc:5b:4b:96:71:c4:22:ae:3d:06:26:94:e6:87:5a:89:13:
         30:3e:04:b5:99:e4:16:51:65:c8:22:42:ed:49:c4:c0:06:ad:
         2c:dc:1a:b5:fd:e5:e4:d7:0e:53:dd:03:df:19:38:cb:16:73:
         a8:d6:4a:1b:94:67:62:fe:68:ec:1c:c3:e5:86:b0:f0:20:2b:
         41:dd:42:fb:8c:f3:36:8a:ff:24:c4:35:3d:23:1d:14:60:65:
         45:2a:4e:24:a6:d4:8d:0a:f3:bc:9b:fd:52:4b:e1:1a:f7:a4:
         c4:6d:e5:02:ae:e4:1c:06:df:85:54:3b:85:18:76:aa:c0:c3:
         c4:25:49:76:a8:3a:3e:12:1b:d7:79:76:15:df:cc:e8:c3:96:
         32:a1:1d:f2:3a:61:31:b3:0c:77:33:cf:e6:5b:e7:f6:95:c7:
         59:ee:48:ac:55:2c:69:9d:27:6f:da:0c:ac:cf:cb:1a:b3:01:
         27:79:78:cc:14:30:0f:0a:5e:80:0d:1b:5e:3d:79:4a:93:0b:
         54:83:69:f7:ab:d1:5b:54:87:bc:c3:fa:67:ff:00:7e:d7:b4:
         b5:89:4d:c3:6e:24:9b:ed:76:28:1d:01:d4:64:1c:df:11:25:
         59:7c:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----