Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File:                     37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier:          9ItQy8w7Xpo8zJpfTjf+N03A/Chy/r+A/xqYfyOLcjo=
Subject key identifier:   5D:AC:A1:FA:A8:48:32:88:02:EA:D4:94:8A:FD:E6:2F:8B:8F:3E:E1
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer:       /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial:       01962F74A39038FFDE3EE4C386E3DD50BD7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number:          0DF5
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: ONBMUByFuTuMbbDqfyZcsLaLIlUU4XK+woSbLW2lAno=)
                          2: BTmp1b2H10lDEyqaD6QbLg-QUfA.roa (hash: N5JJaG9nV6D42/n2t32zZB6XXWBTeaXuJO0OLEH8EXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:90:38:ff:de:3e:e4:c3:86:e3:dd:50:bd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=5daca1faa848328802ead4948afde62f8b8f3ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:33:28:95:28:06:bf:d1:88:b2:fa:0d:8a:
                    2b:b5:03:db:fa:e4:c9:c1:60:32:7f:d2:c6:67:71:
                    ae:00:2c:69:bf:2c:79:89:95:91:c0:17:c3:3e:62:
                    09:63:a5:27:63:66:07:5c:a3:90:a9:26:e1:5f:8d:
                    c9:b4:00:d6:01:69:77:34:a7:1c:be:e2:81:63:02:
                    5d:a8:ac:ef:38:fa:c0:34:d0:be:65:3f:f3:54:98:
                    85:a5:72:db:b2:83:a9:34:d7:a6:9c:3c:19:06:42:
                    c7:31:3a:40:f9:30:21:ef:78:2c:ac:23:8c:fa:ff:
                    05:d9:f9:50:42:f4:78:3f:ee:9f:dc:5d:e9:b0:4f:
                    7e:b5:16:72:d7:a6:e6:93:ea:d3:cc:50:43:72:03:
                    7d:10:be:be:03:c5:ee:54:f3:28:74:6a:cb:12:25:
                    e6:1f:2e:ef:f5:08:1f:26:8f:8a:ab:60:13:9f:f7:
                    58:ae:23:51:5f:8c:d2:5e:d0:b0:a9:5f:b0:19:94:
                    1c:12:74:11:6a:44:e3:bb:5c:a7:75:c0:44:2c:af:
                    4e:20:fe:c3:38:76:d5:4b:5f:70:56:49:d2:84:57:
                    74:ad:aa:fc:be:43:d5:7f:25:24:fb:75:98:ca:c1:
                    a7:aa:67:0f:cb:fe:05:44:04:09:2d:7d:fe:9b:95:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AC:A1:FA:A8:48:32:88:02:EA:D4:94:8A:FD:E6:2F:8B:8F:3E:E1
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:b4:03:28:69:3e:b6:cf:5a:6b:53:7f:b2:39:2b:c5:c1:
         5b:35:c5:44:d6:ee:e4:1c:ea:f8:16:94:1f:19:40:b0:77:94:
         96:a8:b7:20:b1:c5:1f:0f:12:6b:22:cd:04:bd:f0:2c:78:7c:
         b5:61:f2:25:15:bd:cc:ae:95:87:3c:a2:b6:b0:27:81:dd:c4:
         26:4a:60:95:56:8b:08:bf:52:6a:91:97:e5:1f:b1:22:a7:ad:
         d8:7c:41:67:48:7b:47:39:59:5a:a9:78:8b:bc:28:73:2e:ea:
         b0:03:a9:3d:c5:52:3d:de:8e:d6:c4:ae:5c:e6:78:85:f5:eb:
         d4:5c:60:e0:ef:30:6b:e5:87:1c:27:4b:dd:c6:1f:d9:37:ae:
         cf:3c:8b:51:68:0e:d1:d4:48:10:63:f6:bf:96:27:49:cc:c8:
         27:2c:09:2f:11:f3:a2:d3:6d:1f:d4:8a:b2:a0:bc:a1:86:4c:
         6e:44:e6:15:f2:1b:a7:5e:f7:e7:8c:96:92:0e:75:d6:ed:99:
         09:ef:8e:0d:bb:db:39:34:32:55:6e:74:a3:2b:52:11:c3:99:
         6d:ad:8d:d6:76:79:92:56:79:97:d2:c9:5c:8f:ef:44:c8:46:
         f0:d3:ec:fe:a0:ea:f1:f9:c1:f6:a7:fc:c1:78:16:31:5a:b7:
         af:b5:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----