Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File:                     LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier:          v2MQy4kcEpUg2Nn9AMhS6V5mqfjF5NCqVOyFzk0ohGE=
Subject key identifier:   C2:11:CF:63:97:D9:C5:CE:BE:53:A5:2E:50:6F:0E:5A:88:E3:08:1A
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer:       /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial:       0194BC3C5686666C37FDAAE6888C4C0E1594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number:          1004
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: IDXOsYUjPF2K5o_G_ek96aUdUfk.roa (hash: E9bra/kYUK1UB01DrugwZ/WDGQsZjYGhZIZLhrv+gOs=)
                          2: InAYg7kchm6hoE6SFVJqN5VO9jI.roa (hash: QxF7Lo3czD2q4Tr7NHUd/cpUnQ6rJyTxBt1Fv/I4tgU=)
                          3: Jlwx3OkqteG7TytH__A5IIms7uY.roa (hash: LvVJ+IGo9WZz2zY5/7uD9m+7ATZ7Bpz+TyIJBHLFfQ8=)
                          4: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: kHJ787evqaJWJTJRtD5Q3rggDV+I584WDRtGzuRCqYc=)
                          5: ZMBjeLkTj38m-a8gfXzcKkyT0ps.roa (hash: wtbsGN1ps5iHRBW+z3RJAAywZeFzg/YvncrZGMW5Yic=)
                          6: k4qXOW_NpDOIOHCLgRTHFZfFt5A.roa (hash: ch7ij5E9LUdhi3/tkx9pvbq8WxL6Rn0r2P+Vs1PthF0=)
                          7: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (hash: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:56:86:66:6c:37:fd:aa:e6:88:8c:4c:0e:15:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=c211cf6397d9c5cebe53a52e506f0e5a88e3081a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:64:c6:be:aa:b3:c9:98:41:c7:20:ca:74:
                    8a:a7:4e:43:8c:e2:bb:a0:ed:f4:7b:ea:ee:d8:65:
                    4e:67:4d:60:f8:4f:b1:2f:4a:75:c6:17:61:0e:de:
                    58:81:11:fa:53:14:d9:43:67:66:42:ff:7f:af:0a:
                    13:ed:73:c3:71:99:67:56:ce:43:96:37:2c:57:59:
                    00:de:7e:5d:28:80:ad:cd:ed:f1:a7:26:05:00:ad:
                    a8:93:6b:59:8b:dc:b0:be:77:7f:f0:d0:ad:8a:94:
                    f0:ee:05:f2:27:69:bf:1e:93:92:df:6f:9f:e7:15:
                    b0:ad:b5:93:ba:a1:94:94:b7:a2:bb:de:f4:48:03:
                    b5:a2:fd:1f:55:0a:a2:82:6e:3f:1d:fb:b7:53:0f:
                    7a:2b:0e:dd:5e:61:b3:66:78:ae:78:ef:c7:d1:2b:
                    e0:5f:45:5c:46:1b:c2:ba:f3:57:1c:cb:8c:c4:34:
                    e6:84:0a:bc:a5:5b:d3:dc:71:cf:63:df:3d:d6:d7:
                    7d:26:bd:22:08:e7:de:ad:0d:f7:49:05:a3:4f:b6:
                    8f:23:4d:d0:4d:49:cc:f4:3a:c6:2a:bf:d0:fd:fc:
                    60:94:5e:2c:68:4d:06:bd:a5:50:bf:fa:c6:d5:97:
                    de:3e:90:61:16:e5:b5:5c:7a:a4:38:b4:f0:ce:bd:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:CF:63:97:D9:C5:CE:BE:53:A5:2E:50:6F:0E:5A:88:E3:08:1A
            X509v3 Authority Key Identifier:
                keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:66:80:8c:1e:34:57:52:82:d6:22:97:16:8f:eb:b5:65:3f:
         e1:e6:bb:ad:b5:b7:c3:a8:3c:38:ca:96:c2:55:8a:fa:35:ff:
         4d:42:34:03:ff:e3:2b:4a:ae:90:e0:97:02:ce:96:51:22:81:
         57:28:ec:10:fd:a7:26:14:9b:54:8e:78:33:0c:42:b5:8a:c2:
         ac:1f:8d:43:17:62:28:f5:82:74:dc:8b:0c:55:6c:d1:b4:ee:
         32:ed:ce:e9:91:c1:37:4f:63:ec:39:ff:f4:bd:7c:11:c6:eb:
         61:a3:2e:f6:7c:37:48:84:0c:15:47:00:f0:af:ae:a3:3a:f9:
         44:c6:28:fe:04:c2:3c:f3:b5:e3:ec:98:a9:da:64:4a:fb:45:
         b2:ba:ef:e1:2a:6d:67:72:45:65:91:a4:e6:e6:96:b0:65:fc:
         be:a0:c9:c7:eb:ff:b8:55:7f:6c:9c:2a:4c:cc:07:1e:e6:08:
         0f:81:a5:f6:cb:85:be:bd:72:a0:65:94:eb:99:2b:08:d2:00:
         a1:11:2c:a7:9a:8f:6e:c2:13:64:d5:0b:fb:2c:70:ba:a6:06:
         da:bf:41:d0:40:41:3c:09:0e:29:69:99:4e:51:50:3e:5c:3a:
         f2:d4:40:40:c4:a8:c4:4b:c7:94:71:f7:f3:ca:b5:a9:7d:fb:
         f0:8c:e8:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFaGZmw3/armiIxMDhWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5
OTM0ZjgwHhcNMjUwMTMxMTIwMDU4WhcNMjUwMjAxMTIwMDU4WjAzMTEwLwYDVQQD
EyhjMjExY2Y2Mzk3ZDljNWNlYmU1M2E1MmU1MDZmMGU1YTg4ZTMwODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LVkxr6qs8mYQccgynSKp05DjOK7
oO30e+ru2GVOZ01g+E+xL0p1xhdhDt5YgRH6UxTZQ2dmQv9/rwoT7XPDcZlnVs5D
ljcsV1kA3n5dKICtze3xpyYFAK2ok2tZi9ywvnd/8NCtipTw7gXyJ2m/HpOS32+f
5xWwrbWTuqGUlLeiu970SAO1ov0fVQqigm4/Hfu3Uw96Kw7dXmGzZniueO/H0Svg
X0VcRhvCuvNXHMuMxDTmhAq8pVvT3HHPY9891td9Jr0iCOferQ33SQWjT7aPI03Q
TUnM9DrGKr/Q/fxglF4saE0GvaVQv/rG1ZfePpBhFuW1XHqkOLTwzr2oawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIRz2OX2cXOvlOlLlBvDlqI4wgaMB8GA1UdIwQY
MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt
M2FkNTJlOGI5NjI4LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4
LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWaAjB40
V1KC1iKXFo/rtWU/4ea7rbW3w6g8OMqWwlWK+jX/TUI0A//jK0qukOCXAs6WUSKB
VyjsEP2nJhSbVI54MwxCtYrCrB+NQxdiKPWCdNyLDFVs0bTuMu3O6ZHBN09j7Dn/
9L18EcbrYaMu9nw3SIQMFUcA8K+uozr5RMYo/gTCPPO14+yYqdpkSvtFsrrv4Spt
Z3JFZZGk5uaWsGX8vqDJx+v/uFV/bJwqTMwHHuYID4Gl9suFvr1yoGWU65krCNIA
oREsp5qPbsITZNUL+yxwuqYG2r9B0EBBPAkOKWmZTlFQPlw68tRAQMSoxEvHlHH3
88q1qX378IzobA==
-----END CERTIFICATE-----