Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File:                     28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier:          dgeNQMHXwEAIgHIr3BnIZFzbECr5CxZga5rnGD4IoJ8=
Subject key identifier:   50:B7:FA:E6:C2:73:19:83:4D:09:8F:E9:D5:67:6C:24:44:63:67:C2
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer:       /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial:       01962F067986248532A91D55F56558815B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number:          14D5
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: kjeStAG+i4Ktkz/l3KHh/jGnIhldcmKk00DkvpS+ZHU=)
                          2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=)
                          3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=)
                          4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:86:24:85:32:a9:1d:55:f5:65:58:81:5b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=50b7fae6c27319834d098fe9d5676c24446367c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:aa:ef:c5:17:44:d8:a4:e3:b1:09:07:11:
                    65:c6:34:ae:f6:0d:eb:6c:a2:c7:1b:65:7c:41:96:
                    18:1d:a7:b7:b3:b3:41:02:ff:ca:11:e6:c9:7c:11:
                    19:50:ec:6f:32:cc:ff:08:3f:b0:2b:3b:57:c8:c0:
                    01:32:f7:98:18:9b:14:be:19:c3:01:5f:c7:9c:d8:
                    1c:81:80:b5:a2:6a:82:85:62:3f:fd:5a:d4:8f:ca:
                    93:cd:55:30:ec:32:f5:0d:92:6c:32:49:18:04:2e:
                    18:fd:3c:6b:5a:ba:d3:f8:86:a6:63:f8:f3:bf:a4:
                    37:be:5c:c9:61:97:4d:c0:bd:53:56:bc:76:bc:8a:
                    13:60:a1:16:98:83:10:fe:63:66:85:b0:25:85:99:
                    4a:c5:32:c0:2e:44:52:34:46:25:62:4b:3e:02:dd:
                    26:62:a3:df:3e:f2:6f:67:42:11:97:76:d9:6f:0a:
                    b1:40:cd:6d:ac:d4:aa:f7:88:b5:2f:a3:e9:3b:cb:
                    e8:d2:d1:2d:72:91:fe:21:40:05:78:8c:3d:ad:a8:
                    1d:86:d3:f8:1c:53:a5:ef:31:b8:7b:7b:3f:16:b6:
                    43:2f:3f:b1:5e:9c:af:e1:5e:1b:46:a9:60:84:53:
                    6f:a0:2c:56:9b:a7:29:df:83:47:2a:21:78:f6:96:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:FA:E6:C2:73:19:83:4D:09:8F:E9:D5:67:6C:24:44:63:67:C2
            X509v3 Authority Key Identifier:
                keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:84:6d:59:54:06:19:21:0c:61:51:7c:d9:e2:37:64:05:
         e0:b6:8c:28:c2:fc:f6:93:d5:fd:81:0a:79:d8:16:d8:6d:7f:
         e3:f9:c1:a8:27:85:ae:c4:4b:5c:3e:dc:4f:5c:9a:9d:8f:d7:
         c9:ce:d9:95:c2:20:51:72:e0:e8:8c:9f:98:b7:eb:6e:a8:fe:
         de:86:06:21:bb:07:58:33:4f:d4:b3:d8:33:bc:ca:2e:e1:5d:
         20:51:53:5e:98:6c:61:79:1b:db:47:42:fb:eb:86:9a:ef:0e:
         0f:74:06:d2:72:6d:c3:3a:e0:ee:3f:63:53:c0:7f:87:d2:d7:
         05:52:6a:f6:49:1c:90:47:25:49:0b:4f:4e:f6:f2:b9:63:b2:
         64:bf:01:f0:c6:bf:39:aa:61:ac:28:3b:b7:02:ce:93:a7:d0:
         3f:0f:25:cc:c2:32:fc:8b:aa:f5:15:92:0f:d4:14:72:62:a9:
         53:40:fa:b7:52:46:67:1d:6a:5b:62:b9:9a:da:c6:9b:c4:7a:
         c3:ad:64:ae:5f:cd:05:c9:6e:74:14:67:39:e4:df:2a:49:6b:
         9b:ae:56:cf:a5:6f:2e:0d:f1:b8:d9:85:87:d7:1c:1a:72:8e:
         0f:19:4e:f7:9e:00:68:5a:38:10:49:e2:7c:bd:b7:ad:a8:bf:
         3c:50:cd:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnmGJIUyqR1V9WVYgVsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2
NDEzMzMwHhcNMjUwNDEzMTIwMTE1WhcNMjUwNDE0MTIwMTE1WjAzMTEwLwYDVQQD
Eyg1MGI3ZmFlNmMyNzMxOTgzNGQwOThmZTlkNTY3NmMyNDQ0NjM2N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiyq78UXRNik47EJBxFlxjSu9g3r
bKLHG2V8QZYYHae3s7NBAv/KEebJfBEZUOxvMsz/CD+wKztXyMABMveYGJsUvhnD
AV/HnNgcgYC1omqChWI//VrUj8qTzVUw7DL1DZJsMkkYBC4Y/TxrWrrT+IamY/jz
v6Q3vlzJYZdNwL1TVrx2vIoTYKEWmIMQ/mNmhbAlhZlKxTLALkRSNEYlYks+At0m
YqPfPvJvZ0IRl3bZbwqxQM1trNSq94i1L6PpO8vo0tEtcpH+IUAFeIw9ragdhtP4
HFOl7zG4e3s/FrZDLz+xXpyv4V4bRqlghFNvoCxWm6cp34NHKiF49pbcUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFC3+ubCcxmDTQmP6dVnbCREY2fCMB8GA1UdIwQY
MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt
NDg5NGY4OGJlZGRjLzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj
LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdyEbVlU
BhkhDGFRfNniN2QF4LaMKML89pPV/YEKedgW2G1/4/nBqCeFrsRLXD7cT1yanY/X
yc7ZlcIgUXLg6IyfmLfrbqj+3oYGIbsHWDNP1LPYM7zKLuFdIFFTXphsYXkb20dC
++uGmu8OD3QG0nJtwzrg7j9jU8B/h9LXBVJq9kkckEclSQtPTvbyuWOyZL8B8Ma/
OaphrCg7twLOk6fQPw8lzMIy/Iuq9RWSD9QUcmKpU0D6t1JGZx1qW2K5mtrGm8R6
w61krl/NBcludBRnOeTfKklrm65Wz6VvLg3xuNmFh9ccGnKODxlO954AaFo4EEni
fL23rai/PFDNSw==
-----END CERTIFICATE-----