Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File:                     2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier:          +uLL8oePqMaT2dFg6jZ5oMUGy2YIyjnEkXZSsVZMjRA=
Subject key identifier:   27:64:8B:96:A4:6D:60:6E:C8:9D:CC:3F:62:AA:E4:E9:35:42:55:4B
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer:       /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial:       0194BD854BA8668BBADCF1223AFBF55A751E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number:          143A
Signing time:             Fri 31 Jan 2025 18:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:16 +0000
Files and hashes:         1: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: o97v+cD1xq5jEc87jg0aA78oY8N9O5ihceMLzovBbRU=)
                          2: 4CXaOWE7bCIHgvJ-O-13lJjR0RQ.roa (hash: rbo/+MhSEiaustVyWcO7hHR/rz00PL3Z0Vq092G8r9I=)
                          3: 94dktPrePJ-RDuAQSxOcJsXmcC8.roa (hash: inLn06dvUW4ypQfw1flp+0VhiDfz1TXTmHsYboxrw8M=)
                          4: QwB_J4IBjr_kwpZ0DSZt7jLyFUw.roa (hash: xjQoVVO98cxf92eXukztlmvd0mAJHZVRoWG3GH3edIU=)
                          5: noQO1tLrNCKz3bIWnBbDMmvuYLg.roa (hash: hYTtEju7KkB6LYquIBvGjeZyYymRK8/pFRz4XyGZMT8=)
                          6: qWeBIgMT9yofaevmnsJv-k3J7gM.roa (hash: OVmNg3h2HayVISC+svzIkwU6u8HmPx4SN/OehOmAqgY=)
                          7: v5y-XO_c3BUL4I2vKl0yvM3sR48.roa (hash: job18wRUBRjomyukO0QxaFg1pEdwxYB+4rsX0iFAoJo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:4b:a8:66:8b:ba:dc:f1:22:3a:fb:f5:5a:75:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
        Validity
            Not Before: Jan 31 18:00:16 2025 GMT
            Not After : Feb  1 18:00:16 2025 GMT
        Subject: CN=27648b96a46d606ec89dcc3f62aae4e93542554b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:fc:0f:f8:df:fe:23:e9:01:a6:dd:95:4b:
                    30:06:6f:63:02:5d:aa:36:6b:56:c4:87:62:ff:4d:
                    46:92:12:ce:8b:2b:b2:85:99:49:03:d7:58:b9:ab:
                    18:47:bc:03:7f:01:03:7a:f5:4d:52:9f:01:7d:67:
                    e0:2e:54:50:9b:97:20:2e:02:e1:a0:32:8b:6d:ed:
                    a3:85:ce:d1:a8:92:50:7d:38:70:da:69:2c:d8:34:
                    6e:b9:80:80:d5:1a:ff:6f:63:40:b1:02:e4:54:c0:
                    88:17:77:2f:22:f9:dc:68:a5:22:52:9e:8c:9b:db:
                    3a:55:93:4e:9d:14:be:9f:2b:c0:63:c5:26:b2:9d:
                    59:59:d0:70:5a:57:35:32:00:23:34:c1:ce:73:88:
                    07:1d:bb:70:e4:92:b0:36:1e:56:93:68:22:48:2e:
                    71:f0:68:00:7c:38:15:c4:38:f8:2c:01:16:33:c4:
                    65:3f:28:0d:0f:4a:ef:7d:92:42:ef:16:4d:ab:ca:
                    47:5a:c9:cb:d1:78:80:27:af:3a:7d:6f:7c:87:56:
                    1d:77:80:84:c2:4e:6e:9c:70:0e:ec:45:1b:45:de:
                    fe:de:1b:66:83:5b:e6:6e:40:26:c5:3a:60:7e:8e:
                    9e:31:38:e3:23:aa:a6:91:4f:95:72:26:1d:c4:0e:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:8B:96:A4:6D:60:6E:C8:9D:CC:3F:62:AA:E4:E9:35:42:55:4B
            X509v3 Authority Key Identifier:
                keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:7a:f7:03:03:b6:a1:76:fb:19:37:dc:c4:7a:99:aa:d5:09:
         51:e7:67:95:f4:51:0f:09:06:5a:67:7c:89:b1:42:9b:ca:b5:
         1c:3f:a1:43:fc:f1:47:97:18:f9:a5:a3:4d:97:91:56:d9:2b:
         85:1d:7b:6e:ac:25:5c:39:e3:5a:d0:83:a8:e7:b1:85:ad:ae:
         0d:85:a4:26:82:78:ab:4b:0f:40:ab:e4:5a:8d:68:bb:2d:f8:
         b4:da:0f:2d:01:06:8c:61:bb:f4:0d:40:b3:b3:53:3b:f0:09:
         a6:50:5a:31:2e:6f:15:34:e4:55:1c:80:91:b4:0b:1f:ae:29:
         c2:45:8a:c9:27:18:28:48:9c:da:ed:11:0c:d7:46:0e:60:3d:
         36:1b:7d:c6:9a:06:ce:35:98:90:d8:93:a6:44:ec:8b:86:d5:
         3f:a8:9e:a0:23:66:95:6f:ba:31:16:f2:53:d5:02:13:97:26:
         5a:1a:c3:77:25:cc:97:1c:40:47:04:d9:89:53:6b:f8:0c:3e:
         72:7e:31:42:eb:ef:02:bb:5d:b4:69:c3:01:80:5f:94:d5:91:
         fa:26:38:e9:30:bf:c0:52:8b:e7:c2:7f:51:db:c5:1b:59:56:
         91:19:18:f9:18:01:b5:7e:8e:ac:ae:f2:8b:fb:05:bb:26:8b:
         30:e9:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----