Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft
File:                     27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft (raw, json)
Hash identifier:          bggNefbZKyPOwqzbhtv3uobZSsW+YMUuOaJl7seim1E=
Subject key identifier:   CD:98:7C:5D:82:0D:AE:0A:39:D7:F7:54:1D:D2:25:0B:FA:02:B9:88
Authority key identifier: 27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4
Certificate issuer:       /CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
Certificate serial:       2A84C05DECEF3CCE930171CAFBF23B72612DDE51
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft
Manifest number:          FB
Signing time:             Fri 07 Feb 2025 00:14:38 +0000
Manifest this update:     Fri 07 Feb 2025 00:09:38 +0000
Manifest next update:     Sat 08 Feb 2025 01:26:38 +0000
Files and hashes:         1: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: GViZfHMCVcNIucTv4+7C3lATwPTkTgeprUKS+i8yn+k=)
                          2: 27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl (hash: nhSVs01TdCXJoOsBSFJLVC9M8WGh411aRsV2+r47PNE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:84:c0:5d:ec:ef:3c:ce:93:01:71:ca:fb:f2:3b:72:61:2d:de:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
        Validity
            Not Before: Feb  7 00:09:38 2025 GMT
            Not After : Feb  8 01:26:38 2025 GMT
        Subject: CN=CD987C5D820DAE0A39D7F7541DD2250BFA02B988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:34:87:e7:f8:15:d8:20:97:86:28:0f:60:e9:
                    0d:c6:f8:af:47:50:4c:da:17:da:41:f1:7a:b2:fa:
                    cd:56:c2:17:90:16:c8:0f:ea:f5:40:11:a6:2e:32:
                    c8:9d:61:6e:70:f0:d9:00:4d:c9:74:7b:83:83:ac:
                    9f:cd:c6:37:fb:d2:a5:68:18:fe:03:2c:96:d9:1d:
                    2d:b0:a3:e1:52:76:8f:c8:fd:90:57:be:0e:f8:86:
                    a3:35:b0:62:73:40:44:e9:26:be:c8:ea:89:22:61:
                    d9:35:83:ed:f8:85:6e:08:e4:f0:5f:4d:5e:01:75:
                    10:b4:7a:54:58:98:c1:eb:6a:09:d3:24:66:e5:3a:
                    9e:3a:fa:f4:b3:17:8d:f2:4d:d1:83:82:5b:9e:4e:
                    ed:25:18:a4:85:0f:aa:be:d5:04:66:67:f3:d9:36:
                    f8:44:fe:61:97:44:d0:6a:52:1e:0b:4b:7c:8e:5f:
                    d5:b6:36:b7:60:bf:ed:e8:51:81:30:71:30:77:e5:
                    85:e0:19:75:91:74:40:bf:d9:2d:56:1b:0f:e4:c1:
                    95:d7:72:9b:69:46:47:b1:48:ec:df:1d:ba:a8:19:
                    84:cf:62:9e:9b:f6:b2:6f:6c:3f:a3:f3:48:30:d7:
                    a5:45:94:76:f6:9f:16:a2:4f:42:37:48:0a:04:6b:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:7C:5D:82:0D:AE:0A:39:D7:F7:54:1D:D2:25:0B:FA:02:B9:88
            X509v3 Authority Key Identifier:
                keyid:27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:7c:00:81:ff:fb:74:d4:d1:8b:a8:0f:b3:97:d4:c7:06:
         c3:4c:3d:bb:45:0a:6a:d3:7e:ca:f4:36:4a:8c:ac:70:77:11:
         4e:5d:11:5a:71:75:d1:f7:14:c2:66:da:bc:18:80:9d:31:00:
         6d:02:b9:9f:9b:1d:ec:6d:80:ce:f1:e9:85:a9:1b:96:4c:b8:
         60:96:ba:2c:bd:9f:1a:2d:a8:aa:c8:7d:d8:14:59:0e:90:5d:
         44:88:2e:0a:12:47:56:c3:c8:53:0e:95:22:ef:ce:dc:71:85:
         70:27:7e:99:0f:3a:e2:7a:0a:ce:3d:8c:49:29:c8:b9:82:6c:
         d1:6c:c5:a7:25:82:a9:67:09:7d:88:35:8d:56:00:70:48:12:
         cb:cd:25:4e:d9:89:c9:95:7e:91:5f:dc:b5:ba:28:5a:61:59:
         da:e3:9c:ae:9d:eb:9e:93:b0:01:40:95:d7:cc:75:71:0e:7c:
         92:1a:cf:54:b4:83:a9:74:78:cb:98:44:db:86:f3:52:77:64:
         8b:11:9a:92:68:33:fe:4c:52:82:c0:f6:3e:2c:f9:a7:0f:77:
         21:31:47:e0:65:16:a1:3f:38:2f:50:f5:2a:40:2f:4e:58:5b:
         ab:a2:91:eb:61:7c:ed:de:81:36:cc:8b:17:d9:e5:9c:8b:c7:
         a4:de:80:90
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKoTAXezvPM6TAXHK+/I7cmEt3lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdFMERCMEU4NERGM0RCQUY3NzU1MjQzRTExNEZEQkRB
NTI0RkZENDAeFw0yNTAyMDcwMDA5MzhaFw0yNTAyMDgwMTI2MzhaMDMxMTAvBgNV
BAMTKENEOTg3QzVEODIwREFFMEEzOUQ3Rjc1NDFERDIyNTBCRkEwMkI5ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhNIfn+BXYIJeGKA9g6Q3G+K9H
UEzaF9pB8Xqy+s1WwheQFsgP6vVAEaYuMsidYW5w8NkATcl0e4ODrJ/Nxjf70qVo
GP4DLJbZHS2wo+FSdo/I/ZBXvg74hqM1sGJzQETpJr7I6okiYdk1g+34hW4I5PBf
TV4BdRC0elRYmMHragnTJGblOp46+vSzF43yTdGDglueTu0lGKSFD6q+1QRmZ/PZ
NvhE/mGXRNBqUh4LS3yOX9W2Nrdgv+3oUYEwcTB35YXgGXWRdEC/2S1WGw/kwZXX
cptpRkexSOzfHbqoGYTPYp6b9rJvbD+j80gw16VFlHb2nxaiT0I3SAoEa/OLAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUzZh8XYINrgo51/dUHdIlC/oCuYgwHwYDVR0j
BBgwFoAUJ+DbDoTfPbr3dVJD4RT9vaUk/9QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh
YzQ5LzIvMjdFMERCMEU4NERGM0RCQUY3NzU1MjQzRTExNEZEQkRBNTI0RkZENC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8yN0UwREIwRTg0REYzREJBRjc3NTUyNDNF
MTE0RkRCREE1MjRGRkQ0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8yLzI3RTBEQjBF
ODRERjNEQkFGNzc1NTI0M0UxMTRGREJEQTUyNEZGRDQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoXnwA
gf/7dNTRi6gPs5fUxwbDTD27RQpq037K9DZKjKxwdxFOXRFacXXR9xTCZtq8GICd
MQBtArmfmx3sbYDO8emFqRuWTLhglrosvZ8aLaiqyH3YFFkOkF1EiC4KEkdWw8hT
DpUi787ccYVwJ36ZDzriegrOPYxJKci5gmzRbMWnJYKpZwl9iDWNVgBwSBLLzSVO
2YnJlX6RX9y1uihaYVna45yuneuek7ABQJXXzHVxDnySGs9UtIOpdHjLmETbhvNS
d2SLEZqSaDP+TFKCwPY+LPmnD3chMUfgZRahPzgvUPUqQC9OWFuropHrYXzt3oE2
zIsX2eWci8ek3oCQ
-----END CERTIFICATE-----