Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File:                     CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier:          UmRRjJueirUuPkVqxGzDVxH1Vi7wlyw+7+GJB+2hkTM=
Subject key identifier:   FE:8C:3D:22:05:51:15:57:68:B5:62:85:75:AA:1A:69:1A:4C:51:67
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer:       /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial:       01962E618883D2AD168F148AF015E03B2471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number:          122B
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: 3Uxw97eIwZon6UlXBfsIwQoIT8aEXQcxQhtT/OvKRjY=)
                          2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:83:d2:ad:16:8f:14:8a:f0:15:e0:3b:24:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=fe8c3d220551155768b5628575aa1a691a4c5167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:89:47:84:d0:c4:c2:c8:86:a9:f5:7b:d2:
                    c1:45:70:80:2a:c6:d0:66:f5:34:28:58:ab:5b:22:
                    da:d4:b2:c7:20:40:16:e9:31:3b:a8:f9:79:f6:50:
                    85:1b:cb:2e:8a:e5:da:f5:d1:5d:c3:9d:e1:14:bc:
                    f9:c0:65:15:69:8b:43:ec:cb:40:e0:3d:15:f7:c6:
                    66:73:a3:91:07:cb:cd:a8:36:57:d4:22:f4:bf:56:
                    28:fa:25:ae:3a:ad:68:d7:d3:c5:e2:0f:bb:0d:d4:
                    2c:08:da:13:bc:e9:7a:11:29:7b:b0:24:0c:45:cb:
                    b7:bb:a9:b7:4e:fa:c6:fb:cf:bf:de:75:1f:fa:a2:
                    47:10:a6:a4:47:30:c6:94:49:9b:b4:9c:af:a1:20:
                    a4:31:61:97:53:8f:e4:30:56:28:f8:98:86:59:2b:
                    1c:53:82:1c:64:0f:c5:16:b2:c6:ae:12:aa:d0:68:
                    bf:72:59:4f:59:07:0d:19:a0:75:ce:ee:c2:b9:d7:
                    aa:6c:f9:db:00:d4:7f:7d:83:b0:c4:92:06:85:51:
                    ef:8e:cc:d1:65:f8:04:1c:c2:b7:b2:1e:ff:96:84:
                    0c:b9:a1:ee:13:d3:40:ae:33:2f:27:ff:a1:b7:fa:
                    29:c4:c1:b2:50:61:e6:cb:83:b6:93:4e:c9:28:73:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:3D:22:05:51:15:57:68:B5:62:85:75:AA:1A:69:1A:4C:51:67
            X509v3 Authority Key Identifier:
                keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:5e:ca:a1:29:e3:a8:33:67:de:d1:60:4f:6b:08:dc:da:
         3f:23:cf:0a:62:3c:0b:e7:83:cf:40:f2:29:8f:a8:12:47:88:
         43:28:de:ae:b0:de:52:aa:8a:88:eb:09:09:3a:5f:28:1b:b5:
         ec:64:b8:8c:e2:70:77:0f:3a:e2:51:46:b4:5b:d8:58:45:25:
         92:bc:4a:94:41:3b:aa:c5:b1:8e:09:ba:88:96:f6:1e:15:99:
         78:9f:86:8f:a9:91:1c:5a:ad:a0:52:fc:9d:b6:4d:53:78:d7:
         7b:93:54:4f:c6:a3:2f:0b:cf:49:f5:1c:12:87:2e:8b:fd:f8:
         db:61:42:ea:69:87:df:38:5c:ee:aa:50:c2:32:f1:5c:5c:69:
         6b:23:18:17:67:68:f6:32:58:24:51:32:62:34:02:a5:74:54:
         63:9d:08:a0:df:cb:83:bf:26:8b:a2:79:2e:3b:04:da:a9:22:
         d9:33:eb:45:df:c9:a2:12:ab:b4:ce:ba:74:a7:9e:a5:ad:20:
         39:b4:c1:df:c7:db:e6:6e:6b:53:61:e3:0f:6b:e1:53:dd:49:
         85:e2:54:f8:82:4f:56:d8:ee:5c:68:0e:6c:7c:e5:68:15:11:
         42:b7:cc:03:5f:a1:ef:50:00:ed:97:74:69:17:5a:81:7f:5b:
         7f:01:cb:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYiD0q0WjxSK8BXgOyRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjUwNDEzMDkwMTA1WhcNMjUwNDE0MDkwMTA1WjAzMTEwLwYDVQQD
EyhmZThjM2QyMjA1NTExNTU3NjhiNTYyODU3NWFhMWE2OTFhNGM1MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9GJR4TQxMLIhqn1e9LBRXCAKsbQ
ZvU0KFirWyLa1LLHIEAW6TE7qPl59lCFG8suiuXa9dFdw53hFLz5wGUVaYtD7MtA
4D0V98Zmc6ORB8vNqDZX1CL0v1Yo+iWuOq1o19PF4g+7DdQsCNoTvOl6ESl7sCQM
Rcu3u6m3TvrG+8+/3nUf+qJHEKakRzDGlEmbtJyvoSCkMWGXU4/kMFYo+JiGWSsc
U4IcZA/FFrLGrhKq0Gi/cllPWQcNGaB1zu7CudeqbPnbANR/fYOwxJIGhVHvjszR
ZfgEHMK3sh7/loQMuaHuE9NArjMvJ/+ht/opxMGyUGHmy4O2k07JKHMWGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6MPSIFURVXaLVihXWqGmkaTFFnMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7BeyqEp
46gzZ97RYE9rCNzaPyPPCmI8C+eDz0DyKY+oEkeIQyjerrDeUqqKiOsJCTpfKBu1
7GS4jOJwdw864lFGtFvYWEUlkrxKlEE7qsWxjgm6iJb2HhWZeJ+Gj6mRHFqtoFL8
nbZNU3jXe5NUT8ajLwvPSfUcEocui/3422FC6mmH3zhc7qpQwjLxXFxpayMYF2do
9jJYJFEyYjQCpXRUY50IoN/Lg78mi6J5LjsE2qki2TPrRd/JohKrtM66dKeepa0g
ObTB38fb5m5rU2HjD2vhU91JheJU+IJPVtjuXGgObHzlaBURQrfMA1+h71AA7Zd0
aRdagX9bfwHLow==
-----END CERTIFICATE-----