Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File:                     28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier:          QdpYG7PieKFs6CbSw7p3aD0yD2mMMh9HLTpoNxjYz+w=
Subject key identifier:   52:7A:30:6A:5A:D0:7C:18:7F:D8:28:E1:9A:68:FA:75:34:DC:7A:01
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer:       /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial:       01962E99579A73E2E8A624CB94E88D8F0CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: A+0yEgU4p7SKP/QoRmYT48czBBgrqwwr+/Yu1y1VW3Q=)
                          2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:9a:73:e2:e8:a6:24:cb:94:e8:8d:8f:0c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=527a306a5ad07c187fd828e19a68fa7534dc7a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:74:6d:2e:ba:89:04:03:31:57:5c:8e:fd:
                    a3:da:71:fb:85:b6:b8:a3:1f:f6:61:d1:ff:e4:97:
                    ab:41:0e:b6:29:1f:8b:0a:1a:60:71:dd:48:44:64:
                    13:1d:74:b3:99:ba:9f:be:fb:58:0f:7a:f9:3b:f0:
                    1f:0b:97:fa:a0:38:54:c7:9b:20:69:bc:9f:f5:a8:
                    0e:a0:bb:52:32:4c:b8:c4:89:e9:81:43:22:42:21:
                    8e:3c:aa:ea:ae:96:51:19:71:7b:6e:3d:13:2b:64:
                    ab:05:be:ad:c8:13:8d:5e:68:5c:f8:4d:8f:79:69:
                    bf:f8:b0:67:d9:48:40:60:59:44:51:de:9e:7a:52:
                    fb:a1:f9:8e:80:cd:f3:f0:d0:a1:11:34:25:b3:5c:
                    bf:4e:b9:34:05:c1:4d:d1:d0:3d:0f:22:f2:d6:e9:
                    d1:3b:01:77:e4:c4:6b:0b:3e:cf:b9:99:9e:c8:34:
                    b9:0f:d1:09:b4:86:93:e2:ee:98:19:91:c6:18:62:
                    4b:3f:c9:b5:ac:69:92:ed:9d:73:6b:d4:72:77:bd:
                    c3:d6:23:1e:88:f8:e0:24:48:5e:27:7b:06:ff:53:
                    19:ee:ad:11:b7:24:0e:04:6e:d6:7c:39:7e:5e:23:
                    9b:da:d1:38:90:b4:95:88:48:7d:ea:d7:52:a2:fb:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:30:6A:5A:D0:7C:18:7F:D8:28:E1:9A:68:FA:75:34:DC:7A:01
            X509v3 Authority Key Identifier:
                keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:0f:df:81:91:f5:10:ed:d6:d3:94:00:cb:0c:36:04:9b:
         4e:68:e7:03:56:55:3a:c1:77:bd:4a:47:45:24:b3:9a:5d:5c:
         47:8c:c5:12:10:37:b0:04:a2:bc:3b:61:b7:86:49:fc:78:3c:
         25:24:c2:a3:1e:6c:bf:c0:61:b7:8d:fc:60:68:93:ca:fb:79:
         67:d7:30:e2:63:5f:4c:45:cb:f7:eb:d6:67:71:42:67:60:58:
         9d:98:6b:5c:a2:8c:e4:26:37:8c:cc:9a:7c:c4:bd:8f:23:54:
         83:68:d1:df:48:97:46:b5:94:ab:b2:53:f1:17:67:ba:9b:0e:
         19:43:d0:38:1c:8e:3f:25:e1:7c:db:ab:02:6c:26:36:00:f4:
         d6:90:1c:2f:6b:4c:e6:65:4c:62:8c:4c:4c:08:9f:12:95:e5:
         00:b0:f2:f5:84:99:74:e8:d0:a6:48:84:a0:0b:66:aa:ad:41:
         f1:12:c7:4e:b0:0f:20:ee:0f:e0:70:16:7c:0b:d4:ba:85:b0:
         f0:cc:46:c5:40:a4:fd:24:ac:6b:ef:70:24:70:38:1b:34:25:
         69:32:07:49:3a:d4:4f:fb:a9:30:c5:8a:db:93:20:e8:77:54:
         78:b8:e1:12:15:89:5a:a4:e2:6d:d1:b0:15:c8:14:b2:1b:01:
         a8:8b:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----