Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/25297F0C4B0430F30A7878D51FB3B7AC11250092.mft
File:                     25297F0C4B0430F30A7878D51FB3B7AC11250092.mft (raw, json)
Hash identifier:          YTIFfaLcJuymnhyYNM3THlg6rPDhKEokKD3XUhHtO4s=
Subject key identifier:   C6:27:09:3A:44:32:78:DE:A1:AB:79:7B:E6:D9:E9:13:0D:93:CD:E9
Authority key identifier: 25:29:7F:0C:4B:04:30:F3:0A:78:78:D5:1F:B3:B7:AC:11:25:00:92
Certificate issuer:       /CN=25297f0c4b0430f30a7878d51fb3b7ac11250092
Certificate serial:       6E7E3E9652B1E6EAAD126667AF331E50E8687110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSl_DEsEMPMKeHjVH7O3rBElAJI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/25297F0C4B0430F30A7878D51FB3B7AC11250092.mft
Manifest number:          16
Signing time:             Sat 04 Nov 2023 22:54:26 +0000
Manifest this update:     Sat 04 Nov 2023 22:49:26 +0000
Manifest next update:     Sun 05 Nov 2023 23:41:26 +0000
Files and hashes:         1: 323030313a3766383a3134303a3a2f34382d3438203d3e203536373338.roa (hash: OwjEsQZ8BLKl8MFC+hOFBYPMEA4PMaZwR50xl+eGFLE=)
                          2: 25297F0C4B0430F30A7878D51FB3B7AC11250092.crl (hash: 1Bl6txZEuWbmvbcmKZjvpJrFp90Qtk2lYlPaeO0ktKw=)
                          3: 3138352e312e3134382e302f32342d3234203d3e203536373338.roa (hash: 4OS8BsVEDTHkhR9qzRPvIEQxEBBx9Ji7h6mowoIgUSk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7e:3e:96:52:b1:e6:ea:ad:12:66:67:af:33:1e:50:e8:68:71:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25297f0c4b0430f30a7878d51fb3b7ac11250092
        Validity
            Not Before: Nov  4 22:49:26 2023 GMT
            Not After : Nov  5 23:41:26 2023 GMT
        Subject: CN=C627093A443278DEA1AB797BE6D9E9130D93CDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:8c:3a:23:95:e0:14:d4:49:42:98:25:2e:
                    a7:ad:ef:31:f7:76:c5:f9:d5:59:97:a6:17:30:d2:
                    d6:d2:1a:c1:70:09:4e:ef:f5:fb:45:5f:da:04:93:
                    51:61:c6:76:ef:d6:41:77:a9:42:b7:0d:87:f5:f3:
                    47:f3:6c:6b:20:fe:33:fd:13:be:d4:e9:6a:73:68:
                    5e:37:66:6a:db:46:96:9e:38:bb:fc:76:d9:8b:ec:
                    b2:2f:ce:14:78:24:0e:68:40:d1:0e:63:ae:aa:bb:
                    29:0f:b9:65:70:24:f9:2c:70:14:be:d0:bd:75:c3:
                    b9:c0:0d:3e:04:97:ee:be:0d:d3:07:d1:2b:61:f4:
                    9f:20:64:26:fb:46:4b:79:4a:36:dc:ff:2a:d6:cc:
                    40:5a:64:f3:0d:c9:3d:04:cb:c9:25:bf:a3:9b:17:
                    7d:ce:2d:c0:86:e0:5e:5c:45:01:62:66:5e:07:c8:
                    9e:b6:c6:60:76:87:95:69:16:49:82:12:49:e6:53:
                    26:e1:d9:69:93:40:74:a8:aa:fb:60:4e:61:38:33:
                    74:64:61:1c:ab:c3:2c:8f:ed:33:1a:9b:53:52:5c:
                    5c:b5:10:e1:83:a3:f8:2b:51:89:9e:56:23:4d:10:
                    34:d5:66:88:87:fc:94:b4:ca:73:9c:b8:a7:fc:f6:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:09:3A:44:32:78:DE:A1:AB:79:7B:E6:D9:E9:13:0D:93:CD:E9
            X509v3 Authority Key Identifier:
                keyid:25:29:7F:0C:4B:04:30:F3:0A:78:78:D5:1F:B3:B7:AC:11:25:00:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/25297F0C4B0430F30A7878D51FB3B7AC11250092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSl_DEsEMPMKeHjVH7O3rBElAJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/25297F0C4B0430F30A7878D51FB3B7AC11250092.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:07:f9:3d:b2:87:c8:27:25:13:d7:d9:b3:d0:e5:01:85:
         f4:49:6a:47:a9:38:eb:3d:5b:65:d7:72:14:2f:c8:19:4e:f1:
         65:0b:15:b1:b3:5d:0d:60:c5:f3:30:a2:c0:68:de:15:89:06:
         55:81:51:81:f3:2b:d2:b9:bc:7f:bf:3a:c1:d7:8f:be:70:0c:
         0f:60:4e:62:2e:13:08:d0:ce:fd:57:4f:a7:ad:f8:58:2c:aa:
         46:f1:b8:15:9a:d2:67:b4:45:9f:fe:7c:e4:f4:e8:d9:19:df:
         4a:5e:19:a9:f7:29:01:18:7b:73:6b:b5:4e:e7:74:fa:5e:92:
         85:4e:40:09:b1:cb:a8:4d:78:87:db:9f:cf:e5:67:30:7f:11:
         da:aa:8b:12:a3:66:59:ed:3e:60:10:79:f3:dc:c5:0f:32:d4:
         2d:7f:1b:79:24:d4:e3:d5:4c:08:b8:bd:ce:bb:be:cd:9a:62:
         8b:e8:a3:0a:88:42:cc:bc:27:04:df:bc:af:c3:fc:af:86:c3:
         f8:b5:25:bc:4d:7d:27:31:d5:73:a5:0d:70:d4:c1:e5:da:7a:
         c5:6a:f9:5b:0d:48:94:e1:57:2f:c5:81:52:15:a3:4d:e0:34:
         3b:e9:cd:15:da:58:cd:33:91:a4:25:1a:80:8d:04:4c:44:fe:
         0a:eb:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----