Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File:                     CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier:          qiysoiOti/eqGGmisemPiqsgmqnZsAYyhlILZqQDBOA=
Subject key identifier:   E3:D7:45:1E:1F:5A:3B:99:AE:AC:77:98:E2:17:68:E8:7B:EF:70:BD
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer:       /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial:       01962F747BDA2B688BC7F86B67B556783755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number:          1488
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: nrSmRwqJx1NdsSWN3qgyJZmcQ/uaUcJCBA8ISznvrgg=)
                          2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
                          3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:da:2b:68:8b:c7:f8:6b:67:b5:56:78:37:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=e3d7451e1f5a3b99aeac7798e21768e87bef70bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:6c:d8:46:e4:ef:a0:bf:d3:07:19:dd:3c:
                    bb:0e:f8:ce:12:e0:d8:b2:55:57:da:a8:6a:49:61:
                    a7:dc:c0:d1:7c:fb:e9:f8:63:96:95:90:4c:02:d5:
                    72:41:61:e2:0c:73:82:97:d1:fa:df:36:ca:3d:d3:
                    50:74:31:b2:46:ff:9a:cf:f6:c4:d4:89:84:00:ec:
                    51:fa:90:90:80:7a:c3:09:45:37:fb:49:f2:37:e3:
                    ce:14:ed:52:af:1e:52:37:ae:d6:cc:12:3d:a1:53:
                    75:00:f8:d6:3a:7d:be:38:a3:ce:2b:a5:0c:3b:9c:
                    0b:10:e9:d8:4c:e8:32:7e:db:f4:81:99:3f:ac:4c:
                    53:c0:eb:22:55:23:97:16:ce:07:6c:60:95:62:5e:
                    3e:b2:09:55:2b:3c:1c:84:85:85:42:ca:1b:03:2d:
                    5f:c2:c4:78:cd:1b:19:f0:7b:4f:18:cc:5a:eb:5c:
                    c0:5c:f6:c0:f5:d9:0a:30:f7:b2:07:71:b6:8a:22:
                    66:ab:f9:94:75:c8:48:f2:59:30:d2:97:90:a5:d4:
                    60:35:4c:62:fe:a5:42:c7:52:d3:ab:7e:20:93:1f:
                    d9:5e:b8:d9:41:f8:4a:ae:91:1e:1c:1f:f4:06:d5:
                    0a:6f:89:6d:15:8b:7e:be:f7:1b:b4:0e:ea:d0:0d:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:45:1E:1F:5A:3B:99:AE:AC:77:98:E2:17:68:E8:7B:EF:70:BD
            X509v3 Authority Key Identifier:
                keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:52:e5:3c:dc:c0:42:43:d1:ff:00:23:84:34:e6:65:7e:
         ba:ca:07:b7:e6:2d:57:bc:fe:06:f3:67:f2:36:37:54:b8:b5:
         4d:e4:17:e7:b1:8f:ce:78:12:fd:4f:31:39:8a:09:db:11:d5:
         47:4a:87:4a:c6:ee:69:03:26:2c:66:a0:a1:d4:59:1b:64:28:
         88:df:04:bc:ff:5a:33:4d:3d:fc:88:1b:5b:4d:39:c4:05:9e:
         5c:b9:da:b0:03:12:bd:64:83:0b:19:0c:a4:99:ad:31:04:27:
         f1:2a:b8:61:03:e1:2c:f1:4b:f1:a9:83:4d:28:4a:13:3b:0d:
         09:58:e3:cf:dd:4e:33:6e:1d:87:64:6e:92:20:b2:e8:7a:5f:
         b2:e4:bf:55:f7:3f:e0:33:0a:37:cc:17:5a:a8:ef:1c:a1:3d:
         5b:48:38:65:1a:04:d4:96:3c:f4:f3:37:04:a3:12:0c:8d:b2:
         0b:12:0f:44:34:f0:84:a8:e0:4f:70:3d:ab:76:d2:6e:ad:ff:
         25:bb:e4:fc:b9:a9:1a:3d:fe:81:68:e9:fb:d9:9b:f2:94:73:
         15:d8:b7:17:7d:a8:06:4e:45:aa:6e:db:6f:76:27:92:4e:a3:
         9b:eb:23:0d:d6:be:a5:4f:38:33:66:07:06:6d:35:99:1a:e5:
         5c:69:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----