Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
File:                     gkL-ZPQXLuuwyWr35QtipQd6_go.mft (raw, json)
Hash identifier:          JKVkI6Ngn0q61ncQpEHes9YfcTXlLXs4ShnQhynzW8c=
Subject key identifier:   09:F4:51:CB:AA:11:6C:2B:CC:67:BC:ED:B7:A7:55:74:D9:F2:83:46
Authority key identifier: 82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A
Certificate issuer:       /CN=8242fe64f4172eebb0c96af7e50b62a5077afe0a
Certificate serial:       01934715A5F41FB4286D2F9CEDBE0F205D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
Manifest number:          0320
Signing time:             Wed 20 Nov 2024 01:00:21 +0000
Manifest this update:     Wed 20 Nov 2024 01:00:21 +0000
Manifest next update:     Thu 21 Nov 2024 01:00:21 +0000
Files and hashes:         1: XTozRMhly3IvXhoRW_g50hTRKj0.roa (hash: l/cBNXGXfrSY5YuPlMadO2F6GArICwMLuVhHYHtnimY=)
                          2: gkL-ZPQXLuuwyWr35QtipQd6_go.crl (hash: v9ZmOzYXz+AXMQLuPeB1IDPXztzvtBb0QhF+kMk/RkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:15:a5:f4:1f:b4:28:6d:2f:9c:ed:be:0f:20:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8242fe64f4172eebb0c96af7e50b62a5077afe0a
        Validity
            Not Before: Nov 20 01:00:21 2024 GMT
            Not After : Nov 21 01:00:21 2024 GMT
        Subject: CN=09f451cbaa116c2bcc67bcedb7a75574d9f28346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:e5:75:57:bf:08:c4:0e:92:d5:6e:8b:aa:
                    5b:7c:72:76:e5:0d:e4:84:9a:6d:fd:79:f3:28:18:
                    33:04:6e:7c:f7:d3:67:f6:f3:df:f5:6d:ae:51:c1:
                    59:6e:7a:a1:38:63:fa:53:b1:a9:c0:64:ce:57:b9:
                    65:9f:45:1b:0c:38:b5:77:52:0b:29:15:1b:4a:32:
                    db:d8:b7:29:8c:0e:97:d6:a0:c8:80:bc:40:dd:27:
                    f0:d8:90:b2:03:46:13:c9:71:b1:9c:6b:b7:39:d9:
                    5b:b9:28:2c:33:52:5a:33:31:c7:f7:99:f1:2a:b1:
                    b4:7d:e6:18:88:8e:ca:d3:04:17:ce:25:f0:16:40:
                    9f:b1:0a:0d:8d:cd:b9:e0:86:a0:d3:c4:78:53:4a:
                    38:90:fe:44:f3:07:7f:72:f8:1d:64:ac:53:c8:68:
                    f1:00:cc:8c:9c:91:6d:67:a5:ab:a8:29:35:73:db:
                    ff:64:f8:24:4d:6b:a9:a9:37:ed:d5:1b:29:86:86:
                    11:f6:90:2e:3e:12:27:83:6e:b0:66:d8:25:c1:a4:
                    bd:18:8d:c3:08:99:d8:8a:ab:72:99:e7:3a:34:91:
                    36:a2:d4:71:25:bd:19:27:95:4c:8a:25:3a:fc:88:
                    58:34:a2:b2:d5:4d:da:58:9c:83:1f:8d:94:b6:51:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:51:CB:AA:11:6C:2B:CC:67:BC:ED:B7:A7:55:74:D9:F2:83:46
            X509v3 Authority Key Identifier:
                keyid:82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:37:7c:8a:43:fb:42:9a:91:16:36:a1:4f:ad:93:57:16:
         be:f3:ef:9d:76:ea:bd:94:d7:62:ae:51:a1:23:75:a0:b8:eb:
         ce:12:8d:b6:64:da:c3:f3:c7:aa:e0:2a:90:d5:4f:8a:0d:09:
         4a:64:ac:44:c8:f2:93:dc:1d:bb:28:d5:a2:26:d3:25:3d:8e:
         af:bd:0c:13:d4:42:b8:59:69:48:19:5f:dc:76:04:40:7d:2f:
         1a:75:f0:77:67:19:4e:07:3d:49:45:85:f2:f5:80:a0:58:a5:
         20:4b:2d:74:7b:b9:46:87:d7:7c:56:83:0d:8b:52:3f:73:fc:
         33:f4:a6:68:98:49:e0:52:0b:16:55:02:d4:e1:2d:36:74:04:
         a6:d9:00:bf:d6:c9:87:84:4a:17:58:88:bc:c4:2d:1c:9e:3e:
         1a:d9:3b:b6:23:30:4b:d1:86:d3:7d:de:d6:53:87:0e:be:f0:
         24:f4:78:e8:f7:42:55:77:2a:1d:16:38:13:39:42:b7:7d:1f:
         36:ff:2b:a2:42:e2:53:74:d3:45:2c:2c:1a:d4:1e:67:1a:b4:
         5e:2e:96:61:54:e2:be:de:9e:29:99:ec:41:ed:5b:9d:9f:5d:
         70:dc:f6:fe:21:c7:9b:c5:d3:a5:b4:d5:5d:05:cc:e8:5a:26:
         33:6b:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----