Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/28q2AeuybVeeqHrP_7djzoHJgTE.mft
File:                     28q2AeuybVeeqHrP_7djzoHJgTE.mft (raw, json)
Hash identifier:          17SGlvwO3mqy5cI2gIRq9pmaYpw+EpsEQMfxbrBhQIo=
Subject key identifier:   9E:8E:A0:2D:76:B6:6C:85:DC:75:63:FF:0F:CF:7E:F9:CC:09:1F:C3
Authority key identifier: DB:CA:B6:01:EB:B2:6D:57:9E:A8:7A:CF:FF:B7:63:CE:81:C9:81:31
Certificate issuer:       /CN=dbcab601ebb26d579ea87acfffb763ce81c98131
Certificate serial:       018F001B66099F8975F2882DBF5F8D66C231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28q2AeuybVeeqHrP_7djzoHJgTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/28q2AeuybVeeqHrP_7djzoHJgTE.mft
Manifest number:          09B6
Signing time:             Sun 21 Apr 2024 10:02:26 +0000
Manifest this update:     Sun 21 Apr 2024 10:02:26 +0000
Manifest next update:     Mon 22 Apr 2024 10:02:26 +0000
Files and hashes:         1: 28q2AeuybVeeqHrP_7djzoHJgTE.crl (hash: 2KxMpsdh214HpJwitoGkupngISsXAFSvOqJOG7di/pM=)
                          2: X23RLgomPUl-KX1l8ThleqqE13Y.roa (hash: AS1Eq4WDsiTpp4QdhZuatWaXxdxs7XsxvE7viAai3Js=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:00:1b:66:09:9f:89:75:f2:88:2d:bf:5f:8d:66:c2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcab601ebb26d579ea87acfffb763ce81c98131
        Validity
            Not Before: Apr 21 10:02:26 2024 GMT
            Not After : Apr 22 10:02:26 2024 GMT
        Subject: CN=9e8ea02d76b66c85dc7563ff0fcf7ef9cc091fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:4f:f3:18:32:08:10:bc:09:1a:6f:ef:ae:
                    0a:73:17:85:e3:0f:0c:6d:86:b0:2d:f4:4e:38:bc:
                    31:38:6f:7a:33:02:1f:00:96:08:b4:4b:6a:db:9e:
                    8d:5a:2f:15:19:7f:90:91:c7:77:c3:b9:f6:e0:bd:
                    4e:85:04:8e:26:d9:cb:7c:79:fa:49:0b:b8:37:0c:
                    ac:10:df:52:a9:39:fb:7b:57:41:89:9e:67:fb:eb:
                    35:56:80:ce:d8:ea:d2:3a:51:52:0b:05:08:1c:65:
                    6c:b7:e4:d2:01:48:1d:0f:bd:ff:7a:31:0a:79:30:
                    6a:c6:e4:cf:ef:4f:be:41:03:3e:5a:a5:9d:cf:40:
                    51:71:3f:fa:cb:c6:a3:df:e8:fa:9d:8f:36:ac:d5:
                    a0:b6:10:d5:ff:b4:74:56:cd:95:9a:ea:d8:80:9d:
                    f3:cf:0e:9b:c2:30:37:39:0e:7e:02:82:b9:71:c1:
                    3d:9d:45:d5:ae:ce:96:7c:cc:1f:8e:f1:83:07:2d:
                    71:c6:6b:94:9e:45:10:fa:ab:f1:13:c6:2d:39:8c:
                    a2:91:a9:1d:1c:cc:93:f0:3b:ce:4b:b3:06:7a:7d:
                    be:91:e7:08:4f:d5:42:f9:c8:4e:72:71:14:22:d5:
                    af:6a:2c:a4:5c:f8:ba:fd:32:53:e6:a7:87:4e:d6:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8E:A0:2D:76:B6:6C:85:DC:75:63:FF:0F:CF:7E:F9:CC:09:1F:C3
            X509v3 Authority Key Identifier:
                keyid:DB:CA:B6:01:EB:B2:6D:57:9E:A8:7A:CF:FF:B7:63:CE:81:C9:81:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28q2AeuybVeeqHrP_7djzoHJgTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/28q2AeuybVeeqHrP_7djzoHJgTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/28q2AeuybVeeqHrP_7djzoHJgTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:8c:bf:76:95:79:36:a6:d2:a7:46:c2:e6:83:ed:76:69:
         6c:20:65:2a:b5:c3:7d:14:60:ae:4e:65:29:a4:39:1e:89:59:
         f8:37:b4:e5:64:a3:45:a1:97:8b:9a:41:59:19:58:f5:4b:f0:
         2d:e7:8a:14:50:a4:b4:ce:89:d6:d1:9d:31:af:82:3e:83:79:
         83:68:78:e5:a9:64:78:b8:57:1a:c5:06:30:4b:b4:df:9d:9c:
         7d:97:28:e9:12:94:b3:b0:b1:4b:a3:41:66:82:9e:73:29:92:
         c6:1d:d2:57:ff:8a:f6:cb:8b:fe:b1:a7:a0:0e:dc:a1:0b:48:
         0b:2c:84:7a:e5:60:44:1e:49:80:ad:45:9a:c9:f6:6d:ef:11:
         47:64:1b:47:0b:0b:c9:c9:d0:84:d1:4b:92:3e:58:77:8e:2a:
         57:f2:b8:07:7f:44:2f:44:ea:1b:6c:85:cf:b3:f6:af:73:e8:
         0e:58:e6:ed:a3:dd:1f:45:3f:a9:66:57:6e:6f:6b:d3:3e:26:
         15:fe:1c:5e:56:5b:b4:ea:45:8b:61:b3:c4:04:52:37:a4:ce:
         76:b9:5f:b6:16:97:ea:c4:ef:7f:3a:94:40:44:b8:5b:08:e4:
         1c:bf:7f:10:23:da:72:47:98:83:8b:8e:9b:bd:24:17:d9:55:
         58:8c:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----