Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft
File:                     BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft (raw, json)
Hash identifier:          +e6T0qnZwTdOK2jpVFInwQ+VjVVNlXqgE6r2nbyzH5g=
Subject key identifier:   CE:B6:9A:2D:3E:65:36:46:F7:8F:A1:16:D6:0D:F9:33:48:D8:51:35
Authority key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB
Certificate issuer:       /CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
Certificate serial:       56EDD4B3638C038BF9CBDF558C35028AD54BAD12
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft
Manifest number:          0153
Signing time:             Fri 31 Jan 2025 15:12:15 +0000
Manifest this update:     Fri 31 Jan 2025 15:07:15 +0000
Manifest next update:     Sat 01 Feb 2025 18:44:15 +0000
Files and hashes:         1: BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl (hash: L2FpI2sp3Eh0bP+Chz0iPQIEisY6OJzQmKrdwl3UIc4=)
                          2: 326130613a363034343a623030303a3a2f34342d3434203d3e20323135323136.roa (hash: XSdZ/3ujw8VKYw+c6yv2T1vcl8TZmipaKYVRnlmd6mk=)
                          3: 326130613a363034343a623030303a3a2f34302d3430203d3e2030.roa (hash: WoEoodpHHPQjYZ1nurqcWGEgzZiv+31vPY0yRIsxoMQ=)
                          4: 326130613a363034343a623062303a3a2f34342d3434203d3e20323135323136.roa (hash: hPbd4k29ivFHm5U0TITZAT0kaKm6DkOAv/scdulFqpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ed:d4:b3:63:8c:03:8b:f9:cb:df:55:8c:35:02:8a:d5:4b:ad:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
        Validity
            Not Before: Jan 31 15:07:15 2025 GMT
            Not After : Feb  1 18:44:15 2025 GMT
        Subject: CN=CEB69A2D3E653646F78FA116D60DF93348D85135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:0d:52:9b:85:f5:79:e9:e9:15:3f:64:26:
                    bf:5f:7f:ad:05:13:78:ae:f8:24:26:69:80:e2:76:
                    3f:89:57:7d:85:1a:96:e2:b8:f6:6e:4c:2d:15:0c:
                    4b:70:65:d5:9d:fe:f7:e3:86:69:b7:c1:1b:a6:f0:
                    98:89:0b:09:3b:28:fa:9b:b9:52:48:30:78:1a:8e:
                    ef:ce:c4:7f:af:75:cb:87:b8:75:49:a1:b3:d1:02:
                    a0:44:6f:6e:00:9e:e9:8f:81:39:65:50:fc:1f:55:
                    73:37:43:d3:07:f8:d6:4e:23:51:21:a3:2c:b1:d6:
                    62:7b:31:da:d9:4b:fd:7e:a6:9e:bd:bb:6d:43:b7:
                    0b:dc:1d:ba:b9:87:c5:09:23:a4:35:45:3b:52:17:
                    fc:c8:6c:1a:dd:4d:98:b7:5b:86:5d:75:a5:b1:58:
                    18:7d:27:8f:6f:9d:9f:9a:b7:c2:6e:7f:45:f1:d6:
                    2a:74:81:44:82:59:9a:24:11:06:1b:11:21:74:4a:
                    02:6c:87:b9:69:6d:4a:88:9d:f7:3e:bb:3a:7c:e9:
                    56:6d:06:8a:26:b0:5d:01:c6:05:51:d3:76:6b:49:
                    65:05:de:3d:2b:cc:66:e0:83:5e:51:ef:f8:e0:56:
                    6b:7c:9f:79:33:00:22:50:94:cc:ab:55:91:53:b5:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:9A:2D:3E:65:36:46:F7:8F:A1:16:D6:0D:F9:33:48:D8:51:35
            X509v3 Authority Key Identifier:
                keyid:BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:71:a3:bd:56:ed:cb:9d:8a:aa:33:f5:87:cd:d2:3d:b1:8e:
         6e:3c:26:4b:50:ec:16:38:0c:f7:76:ac:ad:0e:f0:34:7d:4a:
         60:57:ee:9d:b6:42:94:60:d5:c5:fd:c7:c2:3f:fe:5e:4f:6d:
         b7:4e:12:e3:24:44:88:59:62:0c:16:c7:c6:25:90:9b:8d:75:
         9d:35:ba:d0:c0:4c:19:73:f2:af:4e:55:f6:ef:01:0d:05:e5:
         73:15:47:30:6b:77:26:e3:74:2c:b7:bd:d4:8f:ab:cb:8a:49:
         4c:6f:fe:94:74:7f:35:2c:88:bb:51:c2:5e:7a:03:8c:7c:af:
         78:4a:65:28:f3:4d:fa:ec:b6:34:22:db:f0:fc:25:43:c2:bc:
         f4:8a:65:a9:29:e0:63:f3:c5:e9:c5:76:6c:96:2a:21:8c:8d:
         0e:19:f1:f8:43:3f:a6:12:d6:35:8c:95:65:57:fe:0e:0b:db:
         d9:f8:47:10:36:01:aa:71:db:89:54:c0:a3:48:60:6d:00:c6:
         6f:ad:49:23:58:63:58:37:7c:1e:e3:65:aa:52:9f:8d:c8:d3:
         14:26:33:b9:cc:52:2f:d7:57:45:1c:9f:54:eb:34:b4:50:1d:
         9f:1f:30:f5:ab:a2:09:d5:6b:2b:93:6b:5d:a6:e4:cc:22:5c:
         b0:79:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----