Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          5hjcwkoxOp7VYMQ0slpmaAnjbwNS1rV1C2Em5RvSAL0=
Subject key identifier:   41:8A:D6:23:6E:AC:63:FF:81:E5:E7:2F:83:49:DB:FD:AF:B5:84:8F
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       4080E1324A9B1AC53B8CB4B632929B8252A423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          013C
Signing time:             Fri 31 Jan 2025 15:45:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:40:37 +0000
Manifest next update:     Sat 01 Feb 2025 18:57:37 +0000
Files and hashes:         1: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: k59Dqoh8/e4/hd7a+y/wvzKyA+hHSCn0RDEL0OUigmg=)
                          2: AS207487.asa (hash: sa+x9Ovn0VFP3PZWY4L934Znux06H1Z/gFrTHays+wc=)
                          3: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=)
                          4: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: zXUufmV0ZgYM4pY99hXXb9hrvjsbvgvghLPZeNn0rqA=)
                          5: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=)
                          6: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:80:e1:32:4a:9b:1a:c5:3b:8c:b4:b6:32:92:9b:82:52:a4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Jan 31 15:40:37 2025 GMT
            Not After : Feb  1 18:57:37 2025 GMT
        Subject: CN=418AD6236EAC63FF81E5E72F8349DBFDAFB5848F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:1a:0d:86:73:28:d9:c2:8f:86:3a:61:ab:
                    12:6a:e3:1a:41:5b:d4:c9:8f:44:84:f2:b7:8e:b9:
                    e3:5f:c2:b3:46:e0:bf:cd:56:b0:73:b5:e2:8a:da:
                    29:99:b5:d6:17:d0:ff:b7:6c:cc:91:77:5f:8f:8d:
                    53:ad:46:f6:db:4f:c3:b4:2a:da:d0:f5:51:4c:a7:
                    c7:8e:59:5c:81:e5:26:ce:c6:84:e4:2c:d8:45:1a:
                    7e:8e:47:85:4a:a7:4e:64:ad:fc:cd:dd:53:5d:ee:
                    92:34:2b:5a:6e:cd:a7:9b:30:d1:fa:7f:86:52:92:
                    f2:f9:2f:e4:5c:1e:31:14:ac:8a:82:40:34:25:28:
                    81:32:72:40:6c:f6:8e:1d:8c:04:ac:ec:c4:b5:f1:
                    3b:51:d9:f2:f1:ee:51:67:dc:d9:40:ce:67:46:f7:
                    41:ce:ad:9f:ee:eb:05:2b:e7:86:83:6b:25:d4:84:
                    c5:04:18:e4:e8:cd:ea:eb:97:bc:5c:07:bb:8d:1b:
                    80:dc:87:4c:92:dd:79:22:43:01:bb:ce:2b:12:50:
                    2d:f8:3c:67:73:88:88:69:48:99:d0:58:fc:de:51:
                    56:88:f9:a9:d4:c4:56:0b:26:c1:dd:91:d9:40:f1:
                    f0:6e:fd:1c:cc:c3:1c:49:34:db:42:6d:97:20:9b:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8A:D6:23:6E:AC:63:FF:81:E5:E7:2F:83:49:DB:FD:AF:B5:84:8F
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:ef:13:87:7f:a5:9e:c4:15:83:ce:d4:a7:20:11:04:4f:
         09:9e:5d:26:31:c3:04:83:8d:07:44:de:48:40:4e:89:9c:f3:
         1b:5f:14:88:16:a3:90:97:ff:8e:61:72:c7:44:40:65:cf:c0:
         d7:fb:b7:b7:ba:52:82:b6:a4:d1:d6:b6:cb:83:90:64:65:a3:
         22:a4:b5:f4:e3:b1:d2:5a:83:01:2f:90:11:74:a1:c5:fb:2a:
         c0:2a:d3:11:9d:de:16:9e:15:6b:68:2c:e4:66:39:8b:29:24:
         cd:00:77:03:03:29:d7:16:05:d1:4e:12:40:1c:7f:69:ac:5a:
         1e:cd:3c:b6:d9:22:f2:ba:e5:55:ad:f4:17:f5:60:01:c5:69:
         34:e5:dc:5f:74:a1:e8:fd:ad:0f:26:cd:6e:3b:a1:f7:84:f8:
         cf:aa:60:df:97:fe:2f:33:9c:03:3e:52:50:a8:10:66:84:1b:
         8e:a3:3a:fb:0e:d7:b3:c6:9a:55:50:27:18:1b:67:f2:2c:36:
         cc:f4:28:37:9f:06:f9:0d:d2:1f:fa:73:e7:eb:66:e9:28:ca:
         fd:28:ed:10:b5:97:84:f5:16:b3:bf:55:e2:1b:17:58:de:a9:
         20:b7:36:0f:cf:fa:d3:b3:c7:79:9f:19:ac:99:dc:39:62:5f:
         81:bd:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----