Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File:                     cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier:          VNltPOV+b8EhixEt1NHaz1YiSDjUClPYzjN8fCtCFM0=
Subject key identifier:   A6:3B:3C:3C:5E:8D:39:D6:99:FF:B1:19:90:A6:09:26:3B:7C:C8:36
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer:       /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial:       01962E9914123581CCCABF07351A17632C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number:          0B8E
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
                          2: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: KM2e2GSEGY+xd6f4R3gsZyxUcWU5fKlT1UIHVWM+ZzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:14:12:35:81:cc:ca:bf:07:35:1a:17:63:2c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=a63b3c3c5e8d39d699ffb11990a609263b7cc836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:8d:54:c5:28:f8:5a:05:0d:1a:8b:d4:4c:
                    97:ce:93:cf:81:9b:62:db:58:4c:be:7a:37:96:c0:
                    d7:45:83:f0:e1:a5:0c:61:76:b9:44:45:ac:37:ca:
                    8c:b0:b8:1f:80:34:eb:c6:57:e6:fe:cf:68:5f:4e:
                    14:b2:c4:2f:e9:e7:eb:5f:19:72:64:6e:87:8d:03:
                    85:ec:a5:34:3e:31:cc:b2:ff:d2:7a:ed:e6:5f:f8:
                    f9:9a:0a:d8:f1:0a:bc:2c:24:01:b8:2a:fa:32:d9:
                    af:59:c9:75:5f:87:25:58:d2:41:7b:2c:86:00:7a:
                    52:ce:2d:c7:f8:9d:81:8f:2b:15:cd:45:58:4d:0b:
                    aa:93:ea:25:75:9a:f2:c6:f5:7c:f2:3d:b0:e5:cc:
                    36:e5:58:e8:ff:b8:ea:e8:7a:83:08:e7:c7:10:26:
                    60:86:cc:3e:4b:38:11:81:e0:3e:7e:d4:61:ae:54:
                    6e:83:d4:90:7c:77:df:13:88:83:bd:ec:e8:2d:53:
                    01:cc:25:ab:7d:51:f6:00:96:14:dc:76:c1:51:99:
                    8d:d4:06:0d:25:0b:6f:bb:2d:49:b6:8e:83:b3:03:
                    12:47:d1:6e:e3:06:04:6a:a7:c2:30:1c:06:93:20:
                    30:0a:b1:0b:4c:77:fa:f9:a1:ea:4e:96:ba:da:ca:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:3C:3C:5E:8D:39:D6:99:FF:B1:19:90:A6:09:26:3B:7C:C8:36
            X509v3 Authority Key Identifier:
                keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:17:16:0b:56:d5:99:ef:ee:4e:f3:d2:62:90:56:e8:3e:72:
         e7:33:85:c0:82:25:24:c7:73:15:a3:f4:7b:36:2f:28:9c:e5:
         74:c1:ad:a0:24:e4:69:50:4a:06:da:61:88:29:77:e5:40:41:
         d0:8c:1a:fa:f0:2b:45:b4:85:df:c5:b9:da:fb:49:13:3a:ca:
         b3:95:79:42:98:56:43:ce:2c:94:2c:43:52:d9:da:4d:68:a6:
         81:74:88:f1:1f:18:13:42:7a:8f:ad:ce:80:ca:de:00:e1:3f:
         67:6a:35:6e:0a:1c:e0:48:03:c1:1a:70:6d:69:99:92:46:d8:
         25:2f:ae:e8:89:a5:7e:e8:fd:8f:b5:45:fa:f1:77:d3:5a:24:
         b4:20:67:86:5b:72:67:4d:57:11:9f:1d:c1:3d:86:73:d3:68:
         1f:98:0e:69:22:f8:bc:49:17:29:d8:16:d4:53:88:1a:69:f3:
         ec:0b:61:6e:6a:35:7d:e0:df:e6:ad:c3:66:5a:06:4f:38:3c:
         b8:f8:de:fa:6a:47:d4:5f:c5:7d:94:58:13:2d:4b:17:43:d5:
         d0:8f:c1:74:77:39:bd:f2:8c:e2:0a:94:11:52:e8:18:5a:56:
         ff:e3:12:7b:f0:9f:05:23:2c:04:af:c1:81:7d:7c:99:73:39:
         10:5d:b0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRQSNYHMyr8HNRoXYyyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk
NTNiNGQwHhcNMjUwNDEzMTAwMTQ2WhcNMjUwNDE0MTAwMTQ2WjAzMTEwLwYDVQQD
EyhhNjNiM2MzYzVlOGQzOWQ2OTlmZmIxMTk5MGE2MDkyNjNiN2NjODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY2NVMUo+FoFDRqL1EyXzpPPgZti
21hMvno3lsDXRYPw4aUMYXa5REWsN8qMsLgfgDTrxlfm/s9oX04UssQv6efrXxly
ZG6HjQOF7KU0PjHMsv/Seu3mX/j5mgrY8Qq8LCQBuCr6MtmvWcl1X4clWNJBeyyG
AHpSzi3H+J2BjysVzUVYTQuqk+oldZryxvV88j2w5cw25Vjo/7jq6HqDCOfHECZg
hsw+SzgRgeA+ftRhrlRug9SQfHffE4iDvezoLVMBzCWrfVH2AJYU3HbBUZmN1AYN
JQtvuy1Jto6DswMSR9Fu4wYEaqfCMBwGkyAwCrELTHf6+aHqTpa62spb1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY7PDxejTnWmf+xGZCmCSY7fMg2MB8GA1UdIwQY
MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt
MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj
LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBcWC1bV
me/uTvPSYpBW6D5y5zOFwIIlJMdzFaP0ezYvKJzldMGtoCTkaVBKBtphiCl35UBB
0Iwa+vArRbSF38W52vtJEzrKs5V5QphWQ84slCxDUtnaTWimgXSI8R8YE0J6j63O
gMreAOE/Z2o1bgoc4EgDwRpwbWmZkkbYJS+u6Imlfuj9j7VF+vF301oktCBnhlty
Z01XEZ8dwT2Gc9NoH5gOaSL4vEkXKdgW1FOIGmnz7Athbmo1feDf5q3DZloGTzg8
uPje+mpH1F/FfZRYEy1LF0PV0I/BdHc5vfKM4gqUEVLoGFpW/+MSe/CfBSMsBK/B
gX18mXM5EF2w3Q==
-----END CERTIFICATE-----