Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.mft
File:                     BAD36CDAF43498A668B553F581CCD281AC1A8CD7.mft (raw, json)
Hash identifier:          OqBs1c3bAbUihjreyRYCMkdsP0Sx/lIPRJl/5SRiGP0=
Subject key identifier:   8E:F8:8F:EB:5F:BA:4F:7E:8C:4B:F8:E9:BB:7F:9D:E3:C0:68:E5:B0
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Certificate issuer:       /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial:       5575196F1FC38B8814836BFD38964E720996798B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.mft
Manifest number:          01CD
Signing time:             Wed 24 Jan 2024 21:11:06 +0000
Manifest this update:     Wed 24 Jan 2024 21:06:06 +0000
Manifest next update:     Fri 26 Jan 2024 00:42:06 +0000
Files and hashes:         1: 3138352e3232392e3232312e302f32342d3234203d3e20383334.roa (hash: F4xkHrSbKL4hpnLPjUQT8BOODzecNrE6T6GFw47CjW8=)
                          2: 3138352e3231362e3130352e302f32342d3234203d3e20383334.roa (hash: uSIwo4ardQC+BfHfCa9rLFVZ3GmdJzmnZoje/U8P868=)
                          3: 352e3138312e3138322e302f32342d3234203d3e20383334.roa (hash: 0PvcDt9ggCTPCMJUoeuK+QUCX9SvdguNjqWTCLQGe1s=)
                          4: 3138352e3232392e3232332e302f32342d3234203d3e20383334.roa (hash: 75kN0AzlEmsqXzqYkE5pQpK8Zbbslpt0akKl5LTQGB8=)
                          5: 3138352e3232392e3232302e302f32342d3234203d3e20383334.roa (hash: 0DDjvboVLBjdfqm58OpM9C/ymmioBsqPfhB+XqlqyiI=)
                          6: 3138352e3137362e39322e302f32332d3233203d3e20383334.roa (hash: HxgBVmOt6VDaa1KW/jiEdUcDdT8+E0V9Q9Z/BRH/jn8=)
                          7: BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl (hash: m20fClH4flPgBWVICAfFY8fgG9HTnXc+h0Qp0JjrTvE=)
                          8: 3138352e3232392e3232322e302f32342d3234203d3e20383334.roa (hash: 1azWXjsNgc7DwK5STHOL8iTTevfVYP6NQpTNwLS4kR4=)
                          9: 352e3138312e3138302e302f32342d3234203d3e20383334.roa (hash: WiY+NeSsmjEnE/9EkhUlGS5dg2i5bo118+aXBBLFLZs=)
                          10: 3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa (hash: leYP6eIffIv6sa195NGMzd1xo8f102EN8FKDmaylfsw=)
                          11: 352e3138312e3138332e302f32342d3234203d3e20383334.roa (hash: Y5a0aovNvbK3PaO3Q+YAQBuoquxDRNO1xlpVS2k5mfE=)
                          12: 3138352e3231362e3130342e302f32332d3233203d3e20383334.roa (hash: JeY0PdBV6UN/wjEYKQic+7j6ElIKi0Hoct9uEEdhTE8=)
                          13: 352e3138312e3138312e302f32342d3234203d3e20383334.roa (hash: BOEv4ZH2fgyybuExfu8wCrcGL2TYJyGTC7JNFHrgd/w=)
                          14: 352e3138312e3138322e302f32332d3234203d3e20383334.roa (hash: iIowBagrNHtgN0Z0Rx8AJCCwz3k7O5C4LWtb+Fpj1JM=)
                          15: 3138352e3137362e39342e302f32332d3234203d3e20383334.roa (hash: duPw9FJlitCibNjUbSjqPwT7twHB7XmzkOQRLDOVlM8=)
                          16: 3138352e3137362e39332e302f32342d3234203d3e20383334.roa (hash: OQoOxJRdnWuJ59uM8MCvaHiPv4B5l7tTwmoTjwA3Rlc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:19:6f:1f:c3:8b:88:14:83:6b:fd:38:96:4e:72:09:96:79:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
        Validity
            Not Before: Jan 24 21:06:06 2024 GMT
            Not After : Jan 26 00:42:06 2024 GMT
        Subject: CN=8EF88FEB5FBA4F7E8C4BF8E9BB7F9DE3C068E5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:34:e4:39:09:27:e2:a6:2b:fd:65:ad:d2:
                    72:0c:4b:27:9b:af:e0:1b:73:35:43:ec:72:8d:26:
                    38:f8:4f:91:25:c6:f8:84:58:b5:a4:6d:66:45:ae:
                    48:ea:4b:a7:db:35:e1:29:6e:10:52:f1:95:ba:e4:
                    b1:c0:de:68:6e:27:eb:a4:71:69:10:49:02:60:69:
                    cc:eb:12:db:68:6b:4f:24:f3:1d:86:bf:ce:b2:74:
                    3e:ed:fd:6c:82:7d:61:98:2b:f5:e7:e5:93:b2:f9:
                    9e:f7:2e:b7:9d:46:38:5b:04:0b:e7:a4:49:85:09:
                    d6:be:95:f1:55:68:aa:48:f4:28:61:01:b4:0b:56:
                    ca:7c:39:2b:ea:9a:f4:49:c6:9e:4a:f2:72:20:0f:
                    51:9e:34:dc:39:bf:dc:60:04:4c:86:48:db:19:d7:
                    20:05:2f:78:83:9f:c8:a4:c1:22:7e:91:ca:8a:17:
                    58:85:ec:37:fd:b2:dc:db:8f:64:78:61:a2:be:a1:
                    fd:83:d0:ab:b0:68:99:05:2a:fa:65:96:36:ac:e3:
                    8c:11:12:55:10:49:93:90:53:55:59:9e:b7:2d:42:
                    64:0e:41:2b:b0:98:e9:13:62:59:ce:cc:69:2b:43:
                    f0:6d:8e:4f:13:0e:a0:c0:13:f8:92:e3:f8:b6:fc:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F8:8F:EB:5F:BA:4F:7E:8C:4B:F8:E9:BB:7F:9D:E3:C0:68:E5:B0
            X509v3 Authority Key Identifier:
                keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e4:99:22:55:ef:32:e0:d1:d2:d4:6d:60:74:d8:31:62:18:
         35:67:77:36:fa:c0:41:03:16:d5:51:ca:9a:88:16:66:33:fa:
         c8:97:5e:73:db:aa:55:a8:2e:d7:bd:a9:20:bf:e8:cc:4c:7e:
         72:b8:80:97:90:c6:56:36:37:5d:d4:ba:3e:60:b6:40:d8:1c:
         40:44:93:46:3a:cc:24:e0:0f:21:0e:49:cf:26:01:c5:d7:1c:
         11:d2:b1:62:c0:90:06:55:77:8f:77:84:da:42:20:fe:e2:58:
         27:62:5d:f2:f4:8f:52:63:fb:8a:13:85:40:e3:e1:62:53:fc:
         11:55:fd:99:c9:51:cc:aa:e1:57:d1:70:b8:73:43:30:b2:45:
         61:e3:c1:15:e1:9d:44:3e:55:be:66:f6:3a:2a:fd:3a:96:26:
         e3:31:1d:ec:85:85:0d:f5:c7:b8:4d:bd:7b:0b:13:75:63:83:
         d6:91:c7:c9:7c:ff:4d:30:f4:a0:d5:4e:bb:82:ec:15:6a:0a:
         13:fc:c7:46:a1:60:39:a2:4e:d2:0b:86:ca:95:b5:69:98:ea:
         70:b3:db:72:e1:c5:8f:39:40:e0:d9:0e:35:7d:f8:40:5c:9e:
         b6:dd:97:8c:87:a0:c9:ac:03:e5:87:91:3c:55:d1:7a:e8:8c:
         67:d8:f1:10
-----BEGIN CERTIFICATE-----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Generated at Thu Jan 25 20:49:02 2024 by rpki-client on console-fra.rpki-client.org