Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File:                     28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier:          L+c5GKwheSOIbVIimf+OPcmwTplEBEi2KkuT7rN9qeM=
Subject key identifier:   45:B4:41:35:93:C0:B7:A7:30:3D:53:14:E5:98:79:51:F6:C3:CE:73
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer:       /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial:       01962E2AF4E381D1E4D9CF204F5F90AE7494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number:          13BD
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: 5RdmZDFFvX4bNs843PPt3XlcB+jxna3796ISxiw/RnA=)
                          2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f4:e3:81:d1:e4:d9:cf:20:4f:5f:90:ae:74:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=45b4413593c0b7a7303d5314e5987951f6c3ce73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:22:d6:0d:48:c2:90:b4:ca:07:55:3b:9d:
                    a8:99:4c:ec:54:03:b2:c4:b2:ac:af:ef:ef:76:8d:
                    14:08:ca:67:7e:81:5e:25:6c:16:f3:42:39:10:a9:
                    d7:9b:7f:13:90:c8:3b:b4:74:b0:41:0b:80:9e:a2:
                    6e:bf:b9:2a:a1:df:23:5a:2e:a6:5e:b3:31:9f:01:
                    5d:6f:e1:b0:c0:cd:e0:c6:37:2e:b4:aa:b7:a3:0e:
                    5a:ae:6d:e3:a2:4e:d1:b8:13:b4:a7:4d:00:86:03:
                    e3:eb:f7:6c:06:a4:44:cc:28:98:93:8e:9a:21:26:
                    2d:c7:34:9e:6f:78:d4:bb:01:23:e0:f8:ce:20:13:
                    3d:9f:a7:c1:13:82:44:1d:53:5b:c8:ac:81:fd:90:
                    89:7c:bc:78:e6:ad:4a:db:72:4f:cd:49:8c:52:ae:
                    d3:51:70:e9:22:39:4c:d5:76:81:9f:13:a3:25:73:
                    7b:46:ce:e0:d0:f6:31:89:77:61:ff:17:d6:71:f4:
                    cf:1a:ed:bd:8e:84:16:0c:32:98:46:ec:9f:a3:c2:
                    4b:e6:8a:60:b3:0f:2a:22:26:23:ee:e4:50:87:6d:
                    8b:7d:4a:01:c8:86:14:27:77:de:79:78:31:62:03:
                    ed:d2:f7:ce:1a:57:ed:8a:a9:a4:82:dd:54:64:9d:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:41:35:93:C0:B7:A7:30:3D:53:14:E5:98:79:51:F6:C3:CE:73
            X509v3 Authority Key Identifier:
                keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:25:75:62:ec:df:e1:02:67:88:93:e7:f6:97:8a:71:98:
         a6:f6:63:dd:d7:97:5d:35:e2:6f:1b:20:5c:cc:0e:b9:31:3b:
         d4:0a:c8:9c:9a:c4:b8:0f:fb:b7:a7:12:a8:02:56:09:6c:4a:
         5f:79:22:83:0e:18:5d:f4:c4:16:81:71:40:0b:f4:ce:87:cd:
         fd:96:95:95:ea:fd:3a:40:fb:be:dd:c9:8c:c1:62:fe:7d:a9:
         c7:14:ac:26:a0:f9:1c:99:7b:11:3a:ce:be:e2:dc:96:2e:65:
         e3:07:17:86:39:f7:59:cb:8d:13:60:fa:5c:ca:24:14:8f:26:
         f3:0f:07:0f:a2:58:6e:54:0c:dd:14:6d:9b:ee:0b:bb:e0:c2:
         d5:ed:ec:43:fb:85:31:3a:eb:7b:72:66:8a:87:67:5b:d0:18:
         60:22:04:e0:17:2d:8f:78:5b:2d:f4:d7:1c:8b:00:49:ac:08:
         f8:4d:87:33:98:1e:f6:0e:3c:c8:38:46:4a:11:12:2d:f1:11:
         a7:e2:7b:23:44:ff:e9:00:9e:b2:9a:16:82:8e:e0:eb:8d:d8:
         cd:49:7d:8e:b2:c7:1a:25:c2:42:db:14:36:a4:d6:07:f9:b9:
         17:ab:fc:e8:14:07:d4:28:ac:b2:53:f3:ed:75:d8:72:16:02:
         36:1b:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----