Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          UFVgFQA55wruPIuEq4Di6rJuSyUxCc4+H4Gz+R3Mbp4=
Subject key identifier:   9B:B4:9E:B8:9E:31:10:0D:84:D8:5B:34:F2:F8:1C:6E:84:51:FC:7B
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       0194BC3C4130F4CAAD8587BE13A62507B6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:52 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          3: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          4: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: qVNl/VgUnkh9710epVF9ZHjV+uM0r4HsDv9xby534zM=)
                          5: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          6: myo0lOXlik6455mDWNn0s-P-G5c.roa (hash: GWM9iq3advWBN0WarVLZ14po4AhHo2qPitRczQuVb+0=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:41:30:f4:ca:ad:85:87:be:13:a6:25:07:b6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Jan 31 12:00:52 2025 GMT
            Not After : Feb  1 12:00:52 2025 GMT
        Subject: CN=9bb49eb89e31100d84d85b34f2f81c6e8451fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:2e:06:62:9f:2a:d7:e7:44:92:8e:cd:48:
                    df:b1:7e:ae:36:ae:a4:80:67:47:52:ca:7f:15:6e:
                    ad:7d:e8:0c:dd:77:64:11:ee:fc:1c:89:eb:f3:83:
                    49:4d:9c:82:3c:ee:b7:aa:06:ce:00:1e:8b:63:31:
                    ac:49:c0:90:9a:26:04:45:49:db:2f:ed:69:02:88:
                    61:dc:75:b4:a3:91:db:75:f5:00:ce:7a:51:df:74:
                    6a:36:cd:eb:c0:77:6d:3e:14:81:12:d8:1f:cf:1a:
                    2f:3d:41:84:86:70:9b:3f:31:e5:07:c5:8c:35:b1:
                    09:6f:36:57:88:60:31:0b:54:1d:86:68:6b:2f:dd:
                    6f:3f:09:c8:8f:82:68:04:bc:a0:55:c1:85:2d:32:
                    65:d4:4b:59:80:9e:c6:22:18:4c:84:91:87:46:88:
                    5a:35:ef:10:ab:01:6a:68:f5:19:e7:44:97:66:e2:
                    96:00:e5:fd:ab:b7:10:54:5f:72:f9:e4:0f:3a:7b:
                    34:3e:8e:ff:89:66:a2:92:c4:a6:2e:06:4e:7f:ee:
                    5e:c8:b5:0b:d0:c4:ad:aa:37:9e:82:82:b6:a7:29:
                    80:6b:f1:5a:4e:09:34:5d:ef:22:bd:14:85:97:a3:
                    5b:ac:dc:05:80:fb:25:11:45:df:5b:f9:79:5b:56:
                    99:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:9E:B8:9E:31:10:0D:84:D8:5B:34:F2:F8:1C:6E:84:51:FC:7B
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:f6:76:80:97:cb:b9:71:6f:b4:c4:d1:23:78:ca:e9:28:
         c4:18:bb:27:4b:e3:ee:be:5b:49:99:0a:03:84:7a:22:c0:68:
         82:c3:5e:ac:a8:0c:cf:e7:ae:64:09:eb:5c:12:a5:f0:08:7b:
         5d:2d:6f:d3:5f:7c:da:70:33:fa:be:76:67:b9:74:62:d5:d8:
         81:54:06:10:10:ce:92:50:4a:1c:ce:a2:cb:fc:9a:ca:5f:0c:
         1c:96:84:f9:5a:66:58:ad:18:b2:ef:f9:f6:5d:ac:a8:2e:c1:
         c5:8c:6d:4d:2b:ce:6b:ff:c6:b9:0f:09:c3:e0:d2:20:1f:24:
         b6:d0:b4:7f:e6:2b:13:44:99:81:f4:ff:58:2f:69:a3:96:df:
         76:7e:7b:c8:21:aa:8e:b3:73:27:44:ba:09:e9:00:12:5b:71:
         c2:aa:19:9e:4a:97:e6:08:37:ff:4e:43:d3:9e:0c:b0:1e:e4:
         70:85:f2:59:c0:a4:d6:8f:52:fc:85:46:b6:ae:98:06:80:fb:
         37:f9:7e:39:2c:ff:2a:da:e0:fa:6f:ab:0f:64:70:49:ce:a8:
         a3:2f:15:61:1b:44:f3:45:30:90:07:ae:42:68:21:da:05:c4:
         ee:1e:80:fc:bd:78:27:79:be:bb:35:9a:38:2c:fe:59:69:e9:
         97:22:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----