Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          hXbDCYALvaMzkBlcKvjirKtCnMm3Urnfer4T5PLcoHI=
Subject key identifier:   14:66:F2:41:BD:95:49:C6:EF:17:FC:3E:FF:55:4C:52:82:83:A5:81
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       44922C7115C2F676528AB632490AC41250BB3337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          019C
Signing time:             Sat 12 Apr 2025 23:35:51 +0000
Manifest this update:     Sat 12 Apr 2025 23:30:51 +0000
Manifest next update:     Mon 14 Apr 2025 01:50:51 +0000
Files and hashes:         1: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: yVsp6ElsGtJ2U+YM180/ji78XJ6tt3jY0KcoPQ8gNq0=)
                          2: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=)
                          3: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=)
                          4: AS207487.asa (hash: sa+x9Ovn0VFP3PZWY4L934Znux06H1Z/gFrTHays+wc=)
                          5: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:92:2c:71:15:c2:f6:76:52:8a:b6:32:49:0a:c4:12:50:bb:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Apr 12 23:30:51 2025 GMT
            Not After : Apr 14 01:50:51 2025 GMT
        Subject: CN=1466F241BD9549C6EF17FC3EFF554C528283A581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:0e:ec:39:ff:59:15:d9:d5:e2:6c:a4:72:
                    94:51:5c:cf:be:25:7d:cb:62:9e:96:27:ab:4e:83:
                    c1:74:12:37:fb:b9:ce:de:59:03:49:fd:33:60:0a:
                    fc:a3:43:00:ed:db:cd:f8:ba:fa:89:35:cb:a4:5a:
                    cd:c9:dc:ba:af:a4:50:4d:7e:bc:05:53:8a:c9:3f:
                    9a:6c:59:95:bf:c0:0b:bd:9e:05:43:ce:12:a4:86:
                    4b:b6:3e:13:6d:62:c4:b9:8a:1e:a5:7a:24:9e:28:
                    17:2b:30:27:b9:ef:dd:66:53:6d:4c:dc:ff:aa:d2:
                    d0:56:76:60:6a:f4:3d:f9:c3:40:ac:22:a2:9e:aa:
                    21:3e:03:a9:70:e9:eb:35:62:bb:3f:de:69:14:cc:
                    c7:fe:fe:2c:46:6b:6a:c7:d0:b8:70:9b:57:60:7f:
                    0f:91:20:60:71:7f:c4:bd:5d:99:e4:d4:9d:d6:f8:
                    16:b7:be:36:3b:37:2e:2a:aa:ca:69:2a:eb:6a:3f:
                    71:a8:42:bf:2a:bd:cc:df:be:bd:8b:ea:47:e5:da:
                    ab:16:89:72:f8:b4:70:a4:f7:5c:de:62:d5:c4:f8:
                    28:52:40:d8:a5:90:c3:a9:b0:47:40:04:69:fb:56:
                    84:27:e8:57:51:3f:d2:c5:d1:9d:51:a3:45:7f:fd:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:66:F2:41:BD:95:49:C6:EF:17:FC:3E:FF:55:4C:52:82:83:A5:81
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:23:da:32:1f:4b:66:02:8e:d1:ba:fd:c8:93:f1:4d:44:ee:
         3e:26:bc:5e:1f:41:16:f5:0f:a8:e4:70:e1:cc:c6:a8:9b:b1:
         f5:c1:9b:dd:60:ce:be:0c:e9:08:00:e1:aa:24:db:34:66:bf:
         58:6e:28:61:0c:10:5b:a7:10:ca:df:12:49:c0:f6:b3:86:67:
         49:a7:d8:3c:90:70:74:4c:de:78:7a:99:f6:9f:76:6d:fe:c9:
         fe:e7:d7:b0:1f:01:ce:0e:78:b0:54:36:8b:6e:bd:68:72:59:
         51:2f:2d:6e:8a:ff:54:f4:be:f1:14:57:79:e2:c9:97:51:09:
         b9:64:63:49:84:64:3f:73:91:7b:16:d1:4b:a1:0f:a1:41:82:
         6a:5f:d7:94:33:24:94:07:70:ba:de:ca:b4:81:c0:07:6b:52:
         27:8c:cd:36:01:6d:39:e3:58:bb:a2:af:88:5e:8b:ea:1b:90:
         c6:ab:27:52:f5:a9:cd:bb:26:9f:d8:26:c3:f1:ca:42:58:4f:
         31:c1:3e:08:4c:8a:4e:b5:77:47:ec:ad:a6:ac:82:ff:5d:05:
         f9:cf:d3:8c:36:76:ec:8a:fd:15:9a:91:de:f5:4f:cf:8b:b8:
         db:7b:9c:86:06:2f:e5:93:fe:11:01:c8:a8:c4:4c:e0:77:32:
         c6:65:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----