Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          w9uvG3mMYo4G9orOzmDTI3e/aPtAUhwFdOacl69xDYo=
Subject key identifier:   EB:4C:29:69:40:2D:DD:C1:F8:1D:74:91:4D:8D:58:69:15:FD:E9:A2
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       01962F7492112AE40D20F6B1B2328EF51294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          1018
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: K9e7sfC3cZEwXNHzNUtkndr/Wx9mWE6i8Z+G7Rw2u9Y=)
                          2: LK4TWd3KSu93MW0gFtmcBWt8flw.roa (hash: nqDel+YdRE6L57XNCBc1XqYVOxjyDCGN0EdIBVWAyjg=)
                          3: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=)
                          4: bVgiVwMAsGWMPapJSzgEX6Yv0OY.roa (hash: C9Nnu0E7D7ONKXVHS6awWhiPClqqVq9n0QLmZzo6AXM=)
                          5: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=)
                          6: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:92:11:2a:e4:0d:20:f6:b1:b2:32:8e:f5:12:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=eb4c2969402dddc1f81d74914d8d586915fde9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:33:80:d2:a0:18:24:9a:ca:00:ca:30:2d:
                    58:4f:4d:e5:0d:f6:61:66:77:30:8a:68:f4:6a:60:
                    e1:f3:b7:fe:a2:59:26:a7:74:41:7b:aa:12:f5:c2:
                    b9:ef:e6:a4:0b:21:c3:ea:a0:6d:b5:90:a2:2a:4d:
                    72:e3:7f:e5:26:e9:59:85:d8:44:32:36:be:dc:68:
                    b8:16:37:b4:62:a4:9c:7e:12:a1:a9:55:3b:df:f5:
                    c0:11:af:83:54:a1:ba:70:e5:f2:34:be:cf:f9:e7:
                    5b:9f:ca:c0:e9:b0:a3:fd:ce:b9:8b:5f:e4:05:bc:
                    83:83:f9:1f:ae:9c:c7:32:53:f9:12:31:d5:49:d7:
                    10:87:b1:bf:8d:6b:cd:1b:c8:56:ce:b5:8c:2e:a2:
                    fd:f7:44:56:20:a8:fd:2a:c2:c1:9d:34:bc:70:96:
                    0f:6c:07:94:31:61:24:e4:bf:83:24:c5:1d:ea:08:
                    16:40:12:90:30:4d:da:e6:16:69:1c:a5:57:02:7b:
                    9a:55:23:97:a0:0f:b7:8b:75:16:e4:70:dd:96:36:
                    51:e3:51:d8:88:f7:79:6e:b7:c1:af:0c:f5:5e:3a:
                    a8:a9:da:8d:c0:5f:cd:d3:a8:00:b6:ba:be:6c:26:
                    52:18:94:42:76:95:36:c1:4b:2b:ff:76:5d:1d:ad:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:29:69:40:2D:DD:C1:F8:1D:74:91:4D:8D:58:69:15:FD:E9:A2
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:2a:9c:ab:48:62:73:6b:19:18:49:a9:29:27:d5:be:75:
         8e:3f:30:6d:7d:19:6a:24:d1:99:0d:da:ad:cf:89:df:d6:79:
         96:0e:1d:08:69:5a:20:2a:02:0e:ec:b1:b3:a3:15:2b:eb:b7:
         6f:dd:30:21:f6:1d:64:4d:f0:b7:77:fe:39:04:69:c2:8d:07:
         5b:58:2e:52:b7:bf:5f:0b:04:0a:22:da:fe:c6:99:72:97:84:
         98:9e:fb:ad:6e:64:fc:ac:7c:8f:a1:26:22:91:5e:df:65:4c:
         dd:7d:50:f9:fc:47:7f:c4:94:9e:de:8b:d5:35:3e:2a:26:2e:
         24:83:61:fe:d3:0c:71:18:5e:c9:14:bb:05:51:42:fc:a1:56:
         4a:96:6e:d0:04:fe:8e:99:75:b5:b5:29:78:02:38:e9:2b:02:
         ed:42:93:b7:16:60:da:ba:41:0d:62:b6:88:32:58:e9:a8:58:
         c6:e6:4f:ac:a6:ba:d9:0d:7f:aa:07:48:91:3f:a4:10:a2:2a:
         ac:02:90:db:3f:92:2a:aa:b4:9d:7a:ec:d3:02:6f:3e:54:0c:
         a5:6a:b3:31:86:a9:1e:76:6c:50:45:a2:41:36:b5:dc:9c:48:
         01:5f:80:d0:cf:07:0b:13:01:91:ad:17:7e:92:8e:6e:18:1b:
         e0:47:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----