Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          4MctHmf90n2SikENJg5+7xcv9IDlGQQp22xffAbG4hg=
Subject key identifier:   89:1D:4D:8D:44:CD:39:42:2B:4C:8A:5B:A1:BB:AB:25:1B:11:7D:E8
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       0195E0468805F97C2C1F9F301053FBBE7539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          0FEF
Signing time:             Sat 29 Mar 2025 05:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:13 +0000
Files and hashes:         1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: SinTrbHTZ9RBbXh0Z25WFAePy8m3V7Yhav/zsEzShvM=)
                          2: LK4TWd3KSu93MW0gFtmcBWt8flw.roa (hash: nqDel+YdRE6L57XNCBc1XqYVOxjyDCGN0EdIBVWAyjg=)
                          3: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=)
                          4: bVgiVwMAsGWMPapJSzgEX6Yv0OY.roa (hash: C9Nnu0E7D7ONKXVHS6awWhiPClqqVq9n0QLmZzo6AXM=)
                          5: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=)
                          6: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:88:05:f9:7c:2c:1f:9f:30:10:53:fb:be:75:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Mar 29 05:01:13 2025 GMT
            Not After : Mar 30 05:01:13 2025 GMT
        Subject: CN=891d4d8d44cd39422b4c8a5ba1bbab251b117de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:8e:fa:fe:c7:6f:22:cd:21:8a:eb:eb:13:
                    b8:3b:47:aa:ae:e6:47:ba:27:4a:75:2a:5e:f9:5f:
                    e4:86:f9:ac:b1:34:00:4a:7b:83:e5:d2:76:09:4d:
                    76:28:a4:16:74:25:5b:b9:30:31:e4:f6:2f:be:a5:
                    86:80:d6:a7:0a:1a:cd:e6:4c:5f:05:5b:19:8e:f5:
                    72:7a:aa:ba:ef:e0:cb:82:88:71:75:b2:35:3d:72:
                    49:5c:42:05:1d:30:0c:c7:8e:82:51:cc:cf:9e:67:
                    fe:cb:b5:18:cd:29:3d:ab:b8:69:40:18:83:8b:5c:
                    24:91:97:a1:c7:48:61:2e:52:20:f5:2b:e8:be:c4:
                    a4:f8:9f:fb:0b:34:1b:a0:dd:86:04:89:07:0e:f3:
                    60:11:18:a9:b4:6c:52:5c:47:3f:cd:67:4f:e6:11:
                    1e:44:7d:71:1a:55:63:54:ad:1e:65:2a:6e:c9:bf:
                    e8:19:47:bf:f2:ce:de:0c:5c:80:52:71:9b:72:ee:
                    4a:a8:e1:b4:3d:17:47:b4:67:6a:e7:c0:71:06:92:
                    66:02:ac:c4:94:6f:43:7e:a4:fe:4a:19:f1:f1:b4:
                    a9:e5:ae:31:03:1e:cd:c9:2e:f1:a2:b2:d7:99:3b:
                    3c:ee:0c:b9:ff:7a:63:c7:b5:b5:8c:7a:4c:c7:19:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1D:4D:8D:44:CD:39:42:2B:4C:8A:5B:A1:BB:AB:25:1B:11:7D:E8
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:20:46:02:be:8d:ab:44:84:b1:ed:fc:95:c7:2c:cf:df:
         6e:d4:81:94:96:e1:4f:d2:ec:43:87:42:3a:76:cb:3e:98:2a:
         b7:bd:43:8e:ca:28:7a:4e:26:d7:b2:af:d7:88:25:32:07:c0:
         c1:99:67:48:dd:38:a6:d7:9f:0c:7f:b4:7f:d6:60:bb:b6:97:
         f4:37:41:47:01:b0:cf:f2:da:92:93:f1:2f:6a:46:63:0a:f0:
         d9:93:4b:75:34:eb:21:ae:ba:21:7a:11:cb:12:fe:77:ab:36:
         41:8a:51:d7:9f:3b:08:0e:06:af:cc:84:0b:35:9d:0c:f8:70:
         10:fe:9c:82:79:1e:90:d6:96:dd:71:4f:7a:5c:6e:1f:fc:db:
         ea:97:76:40:63:58:6d:29:51:d5:70:29:f9:a3:b5:36:ca:19:
         81:93:92:b0:2f:55:36:07:41:1b:af:51:bb:cb:7e:d5:1d:9c:
         30:34:6d:5f:68:54:c6:31:4c:35:0b:d7:8b:26:b2:31:5f:3f:
         40:e1:29:ac:14:8e:f2:23:cd:a5:ef:6c:2b:cc:92:eb:00:69:
         c1:64:51:17:31:bb:30:f2:b0:2f:ae:da:13:2b:01:6c:e3:6c:
         f3:59:86:a5:dd:91:50:82:0c:9d:e8:cc:9f:8d:1a:8f:90:4d:
         6f:10:0a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----