Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft
File:                     BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft (raw, json)
Hash identifier:          d6p4HqysvVM/t5bxPjovLmqpsr8DM1TC1fP7tiihU2c=
Subject key identifier:   89:D7:46:C3:19:65:7F:F8:8D:42:BC:85:44:6A:7F:1E:09:BF:43:2F
Authority key identifier: BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
Certificate issuer:       /CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
Certificate serial:       0C208206644942D5A09E173F19F23E1101A51477
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft
Manifest number:          1F
Signing time:             Wed 05 Mar 2025 13:00:06 +0000
Manifest this update:     Wed 05 Mar 2025 12:55:06 +0000
Manifest next update:     Thu 06 Mar 2025 15:00:06 +0000
Files and hashes:         1: 326131343a373538313a396661303a3a2f34342d3434203d3e20323133343330.roa (hash: joCtQ8QWuV/kS9vjxMvuKSqwizppQS6cDGs5ezlVLH0=)
                          2: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (hash: RNeN2RyvWrzORyjJcOdqaCjXTGyChhFIgS7g0DeHkHY=)
                          3: BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.crl (hash: KnsscERkEixces9F0cYOrSJpcx0gWvcERDqHETNeSQ4=)
                          4: 326131343a373538313a396663303a3a2f34342d3434203d3e20323133343330.roa (hash: Ahb7jSQzD02m+l5Huwj04pp4P7jOkGjSvihPKhxaWXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:82:06:64:49:42:d5:a0:9e:17:3f:19:f2:3e:11:01:a5:14:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
        Validity
            Not Before: Mar  5 12:55:06 2025 GMT
            Not After : Mar  6 15:00:06 2025 GMT
        Subject: CN=89D746C319657FF88D42BC85446A7F1E09BF432F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:c9:65:2d:36:e5:c0:f8:1f:3f:51:c4:02:
                    5a:b6:a1:2c:b1:3a:90:00:21:8e:38:bf:57:d6:3d:
                    52:9d:4e:43:65:68:21:f9:2d:8f:84:13:42:91:d0:
                    61:76:de:e5:3a:a3:0e:c8:58:5a:42:d0:9e:16:8d:
                    a6:20:ed:a9:cf:db:e6:06:b3:17:e1:e7:44:7b:c8:
                    11:45:6f:b3:8a:b0:61:c8:58:33:0b:cb:70:65:fb:
                    bc:ce:37:80:0b:ce:e0:45:f2:87:c4:b8:84:79:a7:
                    ff:14:9c:18:23:a4:42:ea:ca:25:6f:a2:8c:9d:65:
                    eb:28:4d:9c:87:d6:93:e4:1b:cb:b3:6f:2c:56:7d:
                    38:a4:2e:a5:08:d6:4c:39:66:b4:02:49:aa:f0:77:
                    94:74:d2:5f:a1:42:bf:56:b5:5e:ed:0c:d9:d3:4d:
                    4e:49:34:0b:18:24:36:4d:e0:cd:06:f8:01:e9:ea:
                    d5:66:eb:3c:c3:f4:d8:c1:3f:a6:7f:36:b9:0f:cb:
                    e6:8b:0f:52:5e:23:fe:30:dd:ba:54:2e:ad:3c:e8:
                    29:83:a9:30:0d:39:ae:4a:26:27:3b:b5:2a:70:95:
                    6a:34:b8:01:22:92:c3:6f:1b:a8:7d:73:d6:f2:5b:
                    6a:57:3b:8c:b1:5f:44:f7:2d:83:1c:8b:00:c5:6a:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D7:46:C3:19:65:7F:F8:8D:42:BC:85:44:6A:7F:1E:09:BF:43:2F
            X509v3 Authority Key Identifier:
                keyid:BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:89:77:6c:e0:7a:b0:ea:0d:d7:c9:07:c2:52:80:78:2f:
         d6:4c:0f:0d:30:ae:43:2b:aa:7f:37:37:71:0f:15:b3:b8:18:
         e5:49:f8:cd:cc:f5:86:91:0e:e2:0a:cf:1f:2e:3e:c0:97:1b:
         93:bb:fd:e4:1a:41:34:d2:85:f6:2a:49:01:7f:a6:e5:20:3c:
         8a:fd:98:e8:d9:21:14:9d:89:ad:0c:d5:77:b0:a3:b8:87:42:
         e6:25:4b:d2:6c:7a:a3:cb:4e:54:06:c3:2b:8d:75:08:de:a7:
         da:89:58:3d:96:84:0f:95:d3:88:18:b7:24:27:b4:e6:50:f5:
         7d:2a:1e:05:44:0b:de:93:94:d2:64:0b:f1:30:47:40:ae:d6:
         a2:6c:4d:4d:84:e4:c5:89:94:ec:a5:76:d4:5d:39:62:f9:64:
         bf:01:89:d8:2f:e0:0f:c7:0d:77:bd:a9:ca:b5:0d:b2:b5:56:
         4d:df:a6:ee:d5:f8:3f:93:01:5a:a7:1f:5b:88:b3:cc:54:8d:
         57:97:1b:09:51:de:6e:37:89:02:c4:12:30:2a:ab:94:ed:14:
         7b:4a:e1:c1:a6:93:51:1e:e7:e7:c9:84:f9:9d:0a:6c:ce:96:
         aa:52:66:7c:ad:85:f8:0c:39:83:54:e0:1a:32:4f:2d:54:89:
         57:ac:9d:4c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUDCCCBmRJQtWgnhc/GfI+EQGlFHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RjE2OUIyNEYyOEZGN0ZGNDdGQzYwMkQyOTBDQkE3
QkRBQUJGNjAeFw0yNTAzMDUxMjU1MDZaFw0yNTAzMDYxNTAwMDZaMDMxMTAvBgNV
BAMTKDg5RDc0NkMzMTk2NTdGRjg4RDQyQkM4NTQ0NkE3RjFFMDlCRjQzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkW8llLTblwPgfP1HEAlq2oSyx
OpAAIY44v1fWPVKdTkNlaCH5LY+EE0KR0GF23uU6ow7IWFpC0J4WjaYg7anP2+YG
sxfh50R7yBFFb7OKsGHIWDMLy3Bl+7zON4ALzuBF8ofEuIR5p/8UnBgjpELqyiVv
ooydZesoTZyH1pPkG8uzbyxWfTikLqUI1kw5ZrQCSarwd5R00l+hQr9WtV7tDNnT
TU5JNAsYJDZN4M0G+AHp6tVm6zzD9NjBP6Z/NrkPy+aLD1JeI/4w3bpULq086CmD
qTANOa5KJic7tSpwlWo0uAEiksNvG6h9c9byW2pXO4yxX0T3LYMciwDFahTrAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUiddGwxllf/iNQryFRGp/Hgm/Qy8wHwYDVR0j
BBgwFoAUvY8WmyTyj/f/R/xgLSkMunvaq/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTdhYmE5ZTktZWVjOC00OTViLTllMjAtZDZiM2NjZWJk
ZTQ1LzEvQkQ4RjE2OUIyNEYyOEZGN0ZGNDdGQzYwMkQyOTBDQkE3QkRBQUJGNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CRDhGMTY5QjI0RjI4RkY3RkY0N0ZDNjAy
RDI5MENCQTdCREFBQkY2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk3YWJhOWU5LWVlYzgtNDk1Yi05ZTIwLWQ2YjNjY2ViZGU0NS8xL0JEOEYxNjlC
MjRGMjhGRjdGRjQ3RkM2MDJEMjkwQ0JBN0JEQUFCRjYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiqIl3
bOB6sOoN18kHwlKAeC/WTA8NMK5DK6p/NzdxDxWzuBjlSfjNzPWGkQ7iCs8fLj7A
lxuTu/3kGkE00oX2KkkBf6blIDyK/Zjo2SEUnYmtDNV3sKO4h0LmJUvSbHqjy05U
BsMrjXUI3qfaiVg9loQPldOIGLckJ7TmUPV9Kh4FRAvek5TSZAvxMEdArtaibE1N
hOTFiZTspXbUXTli+WS/AYnYL+APxw13vanKtQ2ytVZN36bu1fg/kwFapx9biLPM
VI1XlxsJUd5uN4kCxBIwKquU7RR7SuHBppNRHufnyYT5nQpszpaqUmZ8rYX4DDmD
VOAaMk8tVIlXrJ1M
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:26 2025 by rpki-client