Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.mft
File:                     B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.mft (raw, json)
Hash identifier:          ym693nZYayv1ERn9+64A+JD5czAzUzdRB+yzwzIWJVE=
Subject key identifier:   09:FC:8F:D8:21:09:77:DA:87:5B:99:D6:1F:BB:41:AE:1B:FB:30:BF
Authority key identifier: B4:9B:4B:DB:8E:9A:70:A9:39:99:CE:2B:38:AC:C7:CA:29:AF:58:49
Certificate issuer:       /CN=B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849
Certificate serial:       6632F939FEFAE997BA3747DBE7329212FE2F040B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.mft
Manifest number:          0D
Signing time:             Wed 28 Aug 2024 02:36:04 +0000
Manifest this update:     Wed 28 Aug 2024 02:31:04 +0000
Manifest next update:     Thu 29 Aug 2024 06:28:04 +0000
Files and hashes:         1: B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.crl (hash: qf7nF78kTbvtvl6BDgEpIRmWj8a43G8EmSV1obYE3nA=)
                          2: 326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (hash: 9pw5dDiIk9PSY7QYWCMqwsBBRSvEn1H+kBpyFLs7pBg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:32:f9:39:fe:fa:e9:97:ba:37:47:db:e7:32:92:12:fe:2f:04:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849
        Validity
            Not Before: Aug 28 02:31:04 2024 GMT
            Not After : Aug 29 06:28:04 2024 GMT
        Subject: CN=09FC8FD8210977DA875B99D61FBB41AE1BFB30BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:41:c0:34:91:92:e5:b6:87:9a:7f:4d:32:
                    b5:3a:c8:b6:b3:48:3b:f9:cb:d7:f7:2a:27:4c:e6:
                    a7:5b:d7:32:f8:1d:7c:5e:b1:07:ac:10:ad:eb:82:
                    69:e7:b0:c8:c3:5e:30:61:f8:70:99:7f:b5:37:48:
                    0b:fd:1d:64:38:1a:87:d2:5a:5c:97:1a:12:f2:89:
                    d0:30:61:e9:c9:26:8e:9f:e6:c4:e8:60:27:59:8a:
                    7f:f6:e4:08:16:8e:f3:fa:43:a3:8d:1e:7b:23:fa:
                    f3:7e:e6:22:b1:60:dd:95:e9:32:14:f4:9b:42:39:
                    3d:ec:0d:dc:2d:4e:86:b3:b0:30:55:94:5b:c3:70:
                    13:67:66:41:14:31:a7:d9:dd:43:5c:4d:28:f1:29:
                    0f:2e:d9:86:6a:53:9a:eb:24:f4:e8:0d:67:3f:53:
                    14:ed:5e:c8:cc:96:65:07:12:1e:90:9b:82:b7:60:
                    63:02:33:0e:0f:80:50:41:66:2f:fe:5a:23:2b:c9:
                    46:8f:8d:a2:f6:67:01:86:5c:eb:18:30:b6:fc:6e:
                    cb:e6:e8:11:38:f4:9f:09:59:26:2f:0c:aa:94:f7:
                    56:ff:ed:4a:3d:92:91:71:ca:e9:29:4c:30:80:b6:
                    fb:49:dd:ba:6e:ce:bf:55:6e:10:ae:2f:cb:96:e9:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:8F:D8:21:09:77:DA:87:5B:99:D6:1F:BB:41:AE:1B:FB:30:BF
            X509v3 Authority Key Identifier:
                keyid:B4:9B:4B:DB:8E:9A:70:A9:39:99:CE:2B:38:AC:C7:CA:29:AF:58:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:79:f6:d5:63:2b:7f:bd:55:d2:76:64:fd:92:ee:e3:69:
         f3:e1:ab:fb:bc:a4:25:a3:fd:40:e5:b7:bc:73:ee:2d:b2:af:
         35:a6:ec:75:36:24:39:f0:33:a1:3d:06:c9:41:60:06:54:c8:
         65:01:0d:d6:e9:3e:0e:cf:68:af:1a:85:90:81:c7:11:61:ea:
         2a:f5:82:c0:ae:06:a7:83:47:38:a5:e4:21:91:e8:bf:73:b3:
         b9:e6:d1:a0:42:61:f1:5c:8a:07:c5:e3:e3:8c:02:00:ed:73:
         ad:ee:b9:05:06:0a:89:43:87:e7:a3:7d:cf:91:51:a7:4b:1d:
         0a:d0:cd:74:19:0e:ad:cb:60:e6:29:8a:6b:3f:66:fc:39:23:
         9a:c5:7e:7f:df:55:62:2f:8c:0b:fe:95:fd:d6:19:37:c7:cc:
         30:0b:f1:c6:67:94:4e:55:a8:c1:b5:cc:94:1f:53:fa:77:47:
         09:b7:1e:28:d1:f7:d9:56:f8:2e:1e:65:eb:29:2d:c5:17:af:
         d2:75:f8:65:70:f4:7e:7f:95:3a:82:e3:ea:34:6a:6c:4b:aa:
         c0:18:1e:b3:76:a2:3d:81:7e:7a:77:84:58:28:c8:bf:f0:32:
         4a:ae:cf:a1:97:bd:b1:8b:32:c1:f9:cd:9a:08:2e:c6:12:43:
         c5:41:a3:4e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUZjL5Of766Ze6N0fb5zKSEv4vBAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5QjRCREI4RTlBNzBBOTM5OTlDRTJCMzhBQ0M3Q0Ey
OUFGNTg0OTAeFw0yNDA4MjgwMjMxMDRaFw0yNDA4MjkwNjI4MDRaMDMxMTAvBgNV
BAMTKDA5RkM4RkQ4MjEwOTc3REE4NzVCOTlENjFGQkI0MUFFMUJGQjMwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/0HANJGS5baHmn9NMrU6yLaz
SDv5y9f3KidM5qdb1zL4HXxesQesEK3rgmnnsMjDXjBh+HCZf7U3SAv9HWQ4GofS
WlyXGhLyidAwYenJJo6f5sToYCdZin/25AgWjvP6Q6ONHnsj+vN+5iKxYN2V6TIU
9JtCOT3sDdwtToazsDBVlFvDcBNnZkEUMafZ3UNcTSjxKQ8u2YZqU5rrJPToDWc/
UxTtXsjMlmUHEh6Qm4K3YGMCMw4PgFBBZi/+WiMryUaPjaL2ZwGGXOsYMLb8bsvm
6BE49J8JWSYvDKqU91b/7Uo9kpFxyukpTDCAtvtJ3bpuzr9VbhCuL8uW6YzJAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUCfyP2CEJd9qHW5nWH7tBrhv7ML8wHwYDVR0j
BBgwFoAUtJtL246acKk5mc4rOKzHyimvWEkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmRjZTU4Y2EtNTJjZi00MWVjLWIzZWItNzg0YTZkNjZj
YjA1LzAvQjQ5QjRCREI4RTlBNzBBOTM5OTlDRTJCMzhBQ0M3Q0EyOUFGNTg0OS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CNDlCNEJEQjhFOUE3MEE5Mzk5OUNFMkIz
OEFDQzdDQTI5QUY1ODQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZkY2U1OGNhLTUyY2YtNDFlYy1iM2ViLTc4NGE2ZDY2Y2IwNS8wL0I0OUI0QkRC
OEU5QTcwQTkzOTk5Q0UyQjM4QUNDN0NBMjlBRjU4NDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+J3n2
1WMrf71V0nZk/ZLu42nz4av7vKQlo/1A5be8c+4tsq81pux1NiQ58DOhPQbJQWAG
VMhlAQ3W6T4Oz2ivGoWQgccRYeoq9YLArgang0c4peQhkei/c7O55tGgQmHxXIoH
xePjjAIA7XOt7rkFBgqJQ4fno33PkVGnSx0K0M10GQ6ty2DmKYprP2b8OSOaxX5/
31ViL4wL/pX91hk3x8wwC/HGZ5ROVajBtcyUH1P6d0cJtx4o0ffZVvguHmXrKS3F
F6/SdfhlcPR+f5U6guPqNGpsS6rAGB6zdqI9gX56d4RYKMi/8DJKrs+hl72xizLB
+c2aCC7GEkPFQaNO
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:27 2025 by rpki-client