Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft
File:                     BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft (raw, json)
Hash identifier:          8PSuk1otKtdrD1rsfY95hi+BqyWhun+L28jviSZNV/Q=
Subject key identifier:   40:2C:1B:E0:67:AC:E3:27:FF:17:4A:10:6D:CE:7A:96:F7:82:55:E9
Authority key identifier: BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D
Certificate issuer:       /CN=BB5C68696BDEF6289D58B3C0958E37E0DA23930D
Certificate serial:       277084F20D58DAA12A6041B9DD84D0E0A24308D4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft
Manifest number:          4E
Signing time:             Sun 04 Aug 2024 18:06:56 +0000
Manifest this update:     Sun 04 Aug 2024 18:01:56 +0000
Manifest next update:     Mon 05 Aug 2024 19:37:56 +0000
Files and hashes:         1: 326130613a363034343a616337343a3a2f34382d3438203d3e20323134373537.roa (hash: 1n/hGOvJCyflrRPlKIwlV0f5GUIgNdcm8lX0m7AqOE0=)
                          2: 326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa (hash: aWxqhxxndGUMidS/tGbVjlcm9detL+1h98wkn+gn838=)
                          3: 326130613a363034343a616337323a3a2f34382d3438203d3e20323134373537.roa (hash: EhZJpCj6Y1aKI6pdVbZHdOxqrEvVd7Vfzu/oNZo1Wmg=)
                          4: BB5C68696BDEF6289D58B3C0958E37E0DA23930D.crl (hash: lQ7WePyXDiAqAjwaHC4SUctE9o4p1qeEZ/JiLlkboPI=)
                          5: 326130613a363034343a616337303a3a2f34382d3438203d3e20323134373537.roa (hash: vo+ai8UeO5AKa/JLkfHrfucU1madsX39qWQ7UNxmEy8=)
                          6: 326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa (hash: ogLi/DF81xZqKQzZrtKq5MkKyHGeP0pEzhIXjnvNJs0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:70:84:f2:0d:58:da:a1:2a:60:41:b9:dd:84:d0:e0:a2:43:08:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB5C68696BDEF6289D58B3C0958E37E0DA23930D
        Validity
            Not Before: Aug  4 18:01:56 2024 GMT
            Not After : Aug  5 19:37:56 2024 GMT
        Subject: CN=402C1BE067ACE327FF174A106DCE7A96F78255E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:78:ff:5a:63:df:4b:5a:4c:73:fc:9b:d1:
                    39:46:80:f2:7b:4b:2d:60:a8:ad:9e:bf:de:07:80:
                    04:2f:d9:ad:6d:10:88:31:dd:ba:dc:3e:14:12:05:
                    f8:d8:7d:f8:69:0c:d3:b9:b6:88:26:cf:79:48:bf:
                    f7:61:c6:4b:aa:3e:de:be:bf:b7:13:53:34:2f:32:
                    dd:c1:5c:7e:98:48:dd:eb:aa:fd:82:08:8c:ca:8e:
                    d0:6d:47:9f:c9:71:85:aa:bd:34:af:93:c1:8c:04:
                    18:5a:61:e1:c9:37:e0:22:e3:2e:97:2c:a9:06:b0:
                    ac:a7:2a:f6:8c:8d:2f:1b:42:c7:fa:e4:fe:a3:aa:
                    62:c1:73:af:d8:68:67:67:e0:39:74:30:fd:bf:73:
                    ac:28:12:76:09:be:1b:86:a4:f3:a9:32:e3:d9:f3:
                    dd:c4:e5:11:55:ff:12:34:8b:4a:e1:8c:49:5e:6b:
                    4f:be:1a:93:8d:9f:70:a3:f6:d0:6a:7c:89:58:8c:
                    f3:96:35:e0:17:63:de:e4:c6:dd:56:4a:42:e8:96:
                    48:ce:3d:a0:f2:4e:2f:e7:93:91:0e:96:32:32:e5:
                    08:52:06:7a:ef:03:22:fc:65:16:76:67:a1:ce:66:
                    cd:c5:34:dc:13:f3:27:9a:e6:d6:bc:5a:37:ee:2c:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2C:1B:E0:67:AC:E3:27:FF:17:4A:10:6D:CE:7A:96:F7:82:55:E9
            X509v3 Authority Key Identifier:
                keyid:BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:0e:a9:ef:ec:d1:8a:16:a5:75:41:34:33:2b:7d:9d:ae:
         a1:32:e9:91:80:15:c1:b2:53:63:e9:0b:61:87:fb:b0:36:6c:
         59:26:92:17:1a:36:60:a0:86:90:56:f7:dc:d8:3e:c7:22:1d:
         f5:3a:bf:fb:11:67:7f:fe:28:1b:32:f5:e1:97:9b:44:de:ff:
         be:ad:e9:1a:40:e5:46:77:0b:04:bb:47:0e:82:19:1d:85:f9:
         a7:7b:f0:89:5a:76:06:6c:21:a1:10:60:ed:d4:43:6f:f6:24:
         c2:6d:44:79:c6:7f:8f:1e:e5:a1:1d:19:97:52:63:8d:4e:75:
         ed:fa:af:8b:e0:f6:31:56:dc:2c:b5:4e:6e:ce:b1:8f:69:d7:
         86:ff:e9:bb:19:de:02:cb:65:28:de:a7:4b:ca:3d:e0:54:3d:
         ab:cc:ed:64:af:95:5c:54:84:fa:ec:a2:b2:16:ee:88:c7:3c:
         00:fa:f4:56:07:59:4b:8f:f8:83:52:a3:8f:54:da:55:f1:06:
         4d:67:f6:b7:f3:25:ba:ec:9b:8e:d4:07:8b:77:b3:da:0f:82:
         e6:7a:24:af:65:80:60:3a:c5:e3:1a:dd:fd:64:eb:2e:2f:c7:
         c9:6e:eb:24:b1:9b:11:18:8c:5d:1e:24:ff:e2:6a:6d:e6:5a:
         39:f0:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:09 2024 by rpki-client on console-ams.rpki-client.org