Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/37VD0Px5fRcqqpw9d_lDJls5ia0.mft
File:                     37VD0Px5fRcqqpw9d_lDJls5ia0.mft (raw, json)
Hash identifier:          p7TgIPnjVTOR+VTzGdlCaEpyOGuyBVgG3V+teMTaxD4=
Subject key identifier:   48:32:03:CB:A5:49:28:69:B5:7A:48:6D:71:3D:26:50:23:10:32:D7
Authority key identifier: DF:B5:43:D0:FC:79:7D:17:2A:AA:9C:3D:77:F9:43:26:5B:39:89:AD
Certificate issuer:       /CN=dfb543d0fc797d172aaa9c3d77f943265b3989ad
Certificate serial:       019345CC2F77B89EF419EB1E6B7D97254234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37VD0Px5fRcqqpw9d_lDJls5ia0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/37VD0Px5fRcqqpw9d_lDJls5ia0.mft
Manifest number:          1367
Signing time:             Tue 19 Nov 2024 19:00:29 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:29 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:29 +0000
Files and hashes:         1: 37VD0Px5fRcqqpw9d_lDJls5ia0.crl (hash: MU4wcdXK/0udRFFYeXe0NnT9cxRGD+hVcTp0Hmsr9dE=)
                          2: __8iGjbhYIOykJ_NH9Y8XXbhIgg.roa (hash: G2Vks8D4NRI2oxUcmxjPOD8iJFPLjgkrswj73CKaMIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cc:2f:77:b8:9e:f4:19:eb:1e:6b:7d:97:25:42:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb543d0fc797d172aaa9c3d77f943265b3989ad
        Validity
            Not Before: Nov 19 19:00:29 2024 GMT
            Not After : Nov 20 19:00:29 2024 GMT
        Subject: CN=483203cba5492869b57a486d713d2650231032d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:a2:a3:84:86:3a:e2:c7:d7:5d:8a:ca:0a:
                    92:04:80:db:f7:58:a4:6b:db:9c:0f:ab:21:38:e0:
                    a7:3e:d5:3d:10:ef:cf:7c:44:28:96:2e:1f:ac:ff:
                    94:4f:17:6d:3e:32:e6:b5:ba:09:c0:4b:04:20:32:
                    ec:27:59:87:a0:16:83:6b:d2:e2:32:5a:09:ee:18:
                    e5:0e:c6:1c:de:f6:17:44:ef:7b:2e:9d:b4:2d:e4:
                    23:df:09:85:f6:4d:90:a0:57:14:4d:1b:b3:3f:64:
                    e4:25:8f:9f:d6:a6:1a:2b:56:a8:5e:fb:3a:e5:6e:
                    23:7c:49:be:84:f6:9b:e3:54:78:be:3a:7c:0c:10:
                    92:9e:da:7a:82:7a:41:25:75:00:e1:ea:6e:19:6f:
                    8b:f8:d6:8a:34:7d:d2:84:cd:d3:19:dd:49:52:14:
                    91:4f:0a:77:3d:74:ac:7e:8c:07:3a:57:24:21:0e:
                    3f:ff:87:1b:43:8d:92:e4:cf:b4:23:26:5e:56:78:
                    44:16:d1:aa:1b:35:e3:fe:00:21:29:0d:19:f1:03:
                    38:da:ec:17:0d:8b:61:de:ac:26:1f:3d:d6:e3:03:
                    b5:e1:dc:4f:53:9b:02:76:35:50:16:c2:82:89:9a:
                    7b:98:83:34:c7:30:d0:8c:0b:92:52:bd:b2:33:9c:
                    70:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:32:03:CB:A5:49:28:69:B5:7A:48:6D:71:3D:26:50:23:10:32:D7
            X509v3 Authority Key Identifier:
                keyid:DF:B5:43:D0:FC:79:7D:17:2A:AA:9C:3D:77:F9:43:26:5B:39:89:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37VD0Px5fRcqqpw9d_lDJls5ia0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/37VD0Px5fRcqqpw9d_lDJls5ia0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/37VD0Px5fRcqqpw9d_lDJls5ia0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:96:ed:9c:d7:6d:d1:52:ee:3f:54:05:c3:24:0f:b5:d7:
         ae:fa:74:fc:70:fa:b5:26:69:de:0a:f9:cf:31:62:0a:b4:9c:
         9e:4e:06:6f:9d:ab:87:53:c4:44:90:f4:6f:3e:db:b2:23:a2:
         df:50:1e:97:d0:2a:c4:d3:7c:8d:2d:50:63:79:8c:7d:42:1f:
         e3:b4:af:4d:2c:38:7d:ec:e4:32:07:4c:ae:ad:b2:d2:16:ee:
         fe:59:9a:8b:67:49:fc:e5:7e:5d:87:13:bc:eb:2f:c6:35:79:
         4f:cc:e4:2a:4f:0c:e8:d2:25:49:04:a7:80:b4:14:fc:16:aa:
         e6:e9:cf:88:b7:57:1a:f3:51:bd:d8:9b:1e:f6:3a:b6:8c:69:
         fe:27:af:d3:79:c4:68:9c:76:fb:f2:c2:b6:a3:2a:dd:b0:07:
         cc:7a:1a:2c:2b:69:74:31:6a:d7:0c:16:eb:ee:a8:c9:e8:9a:
         92:4c:d7:94:4c:ac:41:d6:a7:57:58:09:b2:a1:f6:cf:70:e6:
         d1:a5:36:09:60:0c:ae:98:9a:df:1e:78:43:ea:9f:19:bc:06:
         7b:4e:89:70:56:40:d9:18:84:68:3d:2a:96:65:e1:a8:61:b9:
         d9:a9:9e:7b:8b:08:4d:19:42:79:dd:f8:96:35:81:13:9d:ae:
         a7:79:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----