Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File:                     CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier:          IfuoknkWRs8Z9hVH4AH45jf9i+w+73jVljkh2A3YWtc=
Subject key identifier:   18:58:15:34:D4:99:3A:1F:30:67:11:14:95:23:68:CF:48:BD:43:1B
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer:       /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial:       0194BD8576807AD28DE7EAD495A98720A6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number:          116C
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: pacGLYzR0iB/JlH9wUnjh7jwsCRZyDsz39UUXdTFHl8=)
                          2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:76:80:7a:d2:8d:e7:ea:d4:95:a9:87:20:a6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=18581534d4993a1f30671114952368cf48bd431b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:a1:e6:ac:59:c8:a2:bf:82:bd:cc:c6:f3:
                    d4:76:eb:51:f1:85:d3:df:42:73:c6:b4:e4:bd:53:
                    74:18:2c:3e:26:70:c0:7a:09:20:5e:91:0e:20:79:
                    20:51:bd:14:cd:f2:dd:70:25:26:ab:59:39:c9:b6:
                    bd:e6:1d:f4:8e:87:46:6e:e5:ee:39:4e:ca:d6:a6:
                    a0:17:d9:f2:30:1d:cc:5e:e6:ce:8c:9d:32:a5:8f:
                    9c:55:80:a3:9b:ff:c7:ca:36:14:44:87:35:76:1d:
                    e2:35:7b:36:4d:cd:94:aa:79:a7:ab:96:b2:b0:61:
                    19:e3:b4:c3:45:ff:96:53:4f:64:af:56:ef:81:8d:
                    e6:a0:40:90:1a:fa:fd:2b:31:b9:d9:6d:b2:9e:0d:
                    84:22:84:95:01:d0:f9:37:d5:db:c2:b0:b3:e5:96:
                    57:38:71:6e:15:5b:d6:ff:95:42:8d:2b:bc:ce:71:
                    d1:a8:24:2f:79:0f:51:a3:0e:8c:c4:e5:28:a3:b7:
                    19:40:e9:d5:74:e1:41:13:ba:ae:66:a7:cd:35:9b:
                    5a:d4:f5:75:da:d1:af:f9:dc:ec:3c:c6:97:c0:8c:
                    96:01:db:9f:77:2d:63:e4:08:64:d7:f7:cf:43:2e:
                    11:4f:32:d5:86:a6:3f:74:eb:c9:a0:8c:42:50:79:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:58:15:34:D4:99:3A:1F:30:67:11:14:95:23:68:CF:48:BD:43:1B
            X509v3 Authority Key Identifier:
                keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:6c:b5:bf:36:a2:94:f0:ad:99:3f:fe:1c:05:da:ac:29:
         bc:5a:26:03:88:4a:8e:18:3c:08:19:91:bf:5a:cf:c8:b6:84:
         7d:a1:e5:89:95:70:b8:bf:ce:e4:e8:a8:7b:ee:f5:e4:24:b9:
         6a:af:bf:c1:73:89:db:4f:b9:22:3b:72:0f:1a:ac:89:94:7f:
         55:fc:b3:a1:fe:bc:4c:2d:a6:45:19:ba:23:fc:e5:ba:ef:59:
         6a:fe:b7:52:b4:02:e7:a8:44:98:98:2c:78:d0:c9:70:18:fc:
         bd:b9:7c:fa:56:7c:f6:43:56:0b:d0:85:61:ea:d0:2d:d3:91:
         5a:90:db:e9:f9:d0:f2:66:df:53:93:06:c2:c1:64:bd:e3:77:
         e0:97:94:59:df:2d:35:5e:14:8d:48:0a:44:d5:65:ae:d7:dc:
         dd:36:14:6c:fb:1f:8f:c9:69:9c:99:c4:f8:4d:3a:da:de:33:
         b3:17:3d:7c:20:eb:d0:69:c2:f4:ba:2a:7a:0d:7b:51:d3:b8:
         d6:b3:1a:b3:56:52:a0:2e:d4:9d:56:2b:19:c4:5d:66:10:77:
         9e:22:a3:27:de:04:6c:85:c0:e7:bc:ce:9e:bb:ef:97:b4:c1:
         e2:23:b9:92:1c:b3:70:fd:79:1f:2f:b0:b9:72:68:88:bf:7b:
         02:32:f4:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXaAetKN5+rUlamHIKavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjUwMTMxMTgwMDI3WhcNMjUwMjAxMTgwMDI3WjAzMTEwLwYDVQQD
EygxODU4MTUzNGQ0OTkzYTFmMzA2NzExMTQ5NTIzNjhjZjQ4YmQ0MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Sh5qxZyKK/gr3MxvPUdutR8YXT
30JzxrTkvVN0GCw+JnDAegkgXpEOIHkgUb0UzfLdcCUmq1k5yba95h30jodGbuXu
OU7K1qagF9nyMB3MXubOjJ0ypY+cVYCjm//HyjYURIc1dh3iNXs2Tc2Uqnmnq5ay
sGEZ47TDRf+WU09kr1bvgY3moECQGvr9KzG52W2yng2EIoSVAdD5N9XbwrCz5ZZX
OHFuFVvW/5VCjSu8znHRqCQveQ9Row6MxOUoo7cZQOnVdOFBE7quZqfNNZta1PV1
2tGv+dzsPMaXwIyWAdufdy1j5Ahk1/fPQy4RTzLVhqY/dOvJoIxCUHlSYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhYFTTUmTofMGcRFJUjaM9IvUMbMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWRstb82
opTwrZk//hwF2qwpvFomA4hKjhg8CBmRv1rPyLaEfaHliZVwuL/O5Oioe+715CS5
aq+/wXOJ20+5IjtyDxqsiZR/Vfyzof68TC2mRRm6I/zluu9Zav63UrQC56hEmJgs
eNDJcBj8vbl8+lZ89kNWC9CFYerQLdORWpDb6fnQ8mbfU5MGwsFkveN34JeUWd8t
NV4UjUgKRNVlrtfc3TYUbPsfj8lpnJnE+E062t4zsxc9fCDr0GnC9Loqeg17UdO4
1rMas1ZSoC7UnVYrGcRdZhB3niKjJ94EbIXA57zOnrvvl7TB4iO5khyzcP15Hy+w
uXJoiL97AjL0Og==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:05 2025 by rpki-client