Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File:                     25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier:          TRcsn9j9vljPvIRhpJy5P7Oy+dLDNXN5KUJcH3TuUPU=
Subject key identifier:   05:6B:D4:E0:C4:4F:C1:82:75:1A:D4:C1:DE:61:26:AB:8E:3A:3F:84
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer:       /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial:       3C0FE26D76499EA92F4C3D3F31010B75A8063D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number:          1E
Signing time:             Sun 13 Apr 2025 09:25:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:20:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:07:33 +0000
Files and hashes:         1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: L01sOGDB5SWKgP1eljwsCZ4IWIRBnGgtOo0ppalUPCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0f:e2:6d:76:49:9e:a9:2f:4c:3d:3f:31:01:0b:75:a8:06:3d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
        Validity
            Not Before: Apr 13 09:20:33 2025 GMT
            Not After : Apr 14 10:07:33 2025 GMT
        Subject: CN=056BD4E0C44FC182751AD4C1DE6126AB8E3A3F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:94:27:42:72:3b:d2:2e:12:4f:fd:21:a9:
                    b8:85:03:46:32:41:dd:44:ea:ee:9c:68:3e:5a:31:
                    86:fe:4e:05:44:c1:bb:97:57:26:81:94:4b:c0:fc:
                    04:a9:df:de:3f:ec:1a:d9:81:69:c8:60:72:9c:ce:
                    6e:72:85:6d:9c:77:00:b9:24:c6:eb:5f:96:f7:6d:
                    d4:63:f1:47:08:e9:bd:53:95:f1:7e:48:31:33:c3:
                    24:45:49:8c:10:cd:3e:a6:c7:29:a3:03:05:ca:d4:
                    ad:e8:dc:38:d7:3a:02:c9:26:8a:f2:0f:7d:86:e9:
                    79:7b:b2:83:ee:1a:29:81:3d:04:ad:ac:d6:6c:fe:
                    d5:19:a1:ff:86:09:b9:9c:a0:b9:bd:bd:57:9c:e1:
                    e1:f5:e6:b3:33:a8:c8:cb:89:20:a1:87:f7:36:c8:
                    71:50:07:2e:66:a0:73:72:da:50:53:7e:b7:87:be:
                    60:0c:40:98:96:d4:91:ae:76:b4:b4:56:ff:3c:76:
                    78:7a:8a:5a:ec:cf:bc:89:22:13:ac:77:50:6f:18:
                    90:9e:4d:c0:ce:79:cb:1f:e6:6f:1d:8c:08:24:1e:
                    49:ec:5a:a5:11:e0:9d:1c:7d:57:fc:31:7c:8e:ff:
                    bd:29:3f:82:4f:fe:b4:a7:72:11:0a:98:47:bb:85:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6B:D4:E0:C4:4F:C1:82:75:1A:D4:C1:DE:61:26:AB:8E:3A:3F:84
            X509v3 Authority Key Identifier:
                keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b4:93:81:16:61:7a:2a:6f:11:86:bb:aa:8a:75:ff:0f:9c:
         a9:5d:62:d6:45:3d:2d:f8:15:ca:a1:3e:d1:d5:26:9b:eb:cb:
         3f:92:7d:af:f3:b1:26:40:4f:21:69:67:16:9b:47:c7:1f:b2:
         77:92:c5:b8:cb:be:a4:ba:8c:66:d6:9a:3c:b2:18:86:d1:f3:
         8d:84:9a:c0:10:61:ef:fb:8c:40:4a:ed:5a:b4:1c:fc:4f:10:
         3a:ae:57:92:d9:79:13:47:d5:6c:17:97:95:68:61:82:03:2e:
         8d:f3:52:83:5b:45:55:dc:96:15:fe:db:d3:99:d5:e4:58:30:
         f1:1c:16:12:1f:80:75:92:b9:d7:8e:eb:3b:6d:a1:5a:42:f7:
         ca:ab:53:05:79:61:13:0f:4c:76:55:5f:76:bc:74:ad:e0:00:
         9c:65:e6:b1:7f:d9:cb:e6:10:3c:bd:5a:be:85:31:70:81:6c:
         38:59:e5:1b:73:b1:66:1f:34:5b:d1:93:c1:56:94:98:1a:fd:
         4c:98:b2:6b:64:3e:e0:4d:c2:f8:84:d4:07:bc:88:3c:38:2f:
         86:ba:a3:0e:ac:4d:a3:bd:e4:7e:f8:bd:f9:94:8c:b3:a5:76:
         03:97:b5:c8:1a:e5:ae:80:28:02:b0:fe:4e:d4:43:a8:9c:e5:
         46:7c:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----