Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File:                     28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier:          D+8Dis/v2TXkr9wH0RHuA54B/9tEeqvK9CKT9WSCxes=
Subject key identifier:   FF:22:62:40:CA:FA:61:26:81:38:BB:41:07:AA:3E:CF:58:24:27:39
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer:       /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial:       01962F74459BAAF4B9D180C5E8E38910404B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: PmU/1LdEwOx7o+8TBYB1qDfzrFzwfVnk7Xow1b2oS70=)
                          2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:45:9b:aa:f4:b9:d1:80:c5:e8:e3:89:10:40:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=ff226240cafa61268138bb4107aa3ecf58242739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:29:11:4b:cf:3e:ab:08:ae:49:03:a7:b6:
                    65:7f:0e:88:be:1a:ad:75:64:cf:a8:cb:e3:7e:70:
                    e2:1a:79:d0:4f:28:c2:c1:04:be:6a:f0:36:6f:69:
                    f2:8e:ef:18:d6:e3:a8:e0:5c:4a:77:b9:aa:fc:82:
                    78:d6:3b:c1:7f:ff:16:4e:d8:e2:4b:8e:88:a3:41:
                    1b:c0:da:f1:22:4a:6a:3f:b8:75:f2:e5:80:46:e2:
                    24:d2:15:20:b9:73:bf:42:ea:2d:f6:c4:60:c2:49:
                    76:be:be:68:f8:0f:45:d8:46:99:52:a7:f7:b3:3b:
                    d2:03:a0:fe:a2:c0:07:77:c8:a7:3f:77:92:0d:a2:
                    53:02:2f:b2:b0:20:d0:09:0a:8a:5a:ec:a0:f4:88:
                    3b:ef:54:6b:19:bf:6d:1a:72:a6:c5:36:ec:fb:2d:
                    cb:1e:66:e5:81:41:88:e7:de:50:1c:c7:7a:8b:3d:
                    7a:53:44:39:b3:b5:94:81:90:7c:11:d5:d8:25:b0:
                    e9:f8:25:0b:8b:e0:45:66:b7:5b:91:4d:ec:6c:06:
                    d9:87:28:8b:f3:66:cb:32:7a:14:fb:c4:d4:4b:e0:
                    39:41:89:c7:cb:02:94:e0:db:d6:62:dc:86:d8:cd:
                    30:e3:71:07:85:e7:a8:12:77:d9:cd:5e:18:16:23:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:22:62:40:CA:FA:61:26:81:38:BB:41:07:AA:3E:CF:58:24:27:39
            X509v3 Authority Key Identifier:
                keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:32:08:da:6a:f2:51:0e:25:1b:c6:1e:0f:70:0c:84:27:a4:
         52:b1:86:28:ec:16:46:8f:1e:d6:df:25:46:1f:23:04:ed:a3:
         c5:8d:a6:49:a4:0d:b0:77:aa:13:8d:60:4f:a8:bb:b6:30:2a:
         db:c7:a2:01:db:be:5b:b3:18:7e:be:ca:cd:91:9e:5c:07:ce:
         9c:79:c3:0a:ac:64:1b:5c:5c:c6:bb:55:3e:4f:01:00:1c:15:
         7e:97:d8:33:5c:98:cf:67:b7:9e:58:3d:f1:eb:ad:b1:99:44:
         ac:bf:1f:7e:45:ad:6b:26:b1:9e:c6:b4:07:e6:23:e7:4e:f4:
         f0:4b:45:ba:f0:66:bd:f6:17:7a:7c:d2:29:f5:d1:3f:88:a5:
         35:83:d5:1d:39:6b:d5:54:98:8e:18:03:4f:42:9f:01:b6:6f:
         fd:bb:ad:62:c5:05:42:37:c8:c8:73:c0:a5:79:e3:9e:d8:a8:
         bf:3d:ef:7f:cc:ae:1a:09:ca:99:1c:00:1e:b3:26:88:cc:10:
         c3:4a:b1:fc:dd:4e:56:ec:f4:d4:b3:ce:8b:ad:3f:de:ce:41:
         86:5a:c6:52:d5:56:96:36:15:dd:7e:fa:9d:05:41:a2:88:e2:
         0d:b4:09:12:ad:ec:2e:01:ef:0e:14:40:cb:73:fe:ce:8f:de:
         89:fd:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----