Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.mft
File:                     PeNAgpJc_SlLUa8SispUX_IfDtA.mft (raw, json)
Hash identifier:          Aunf5dckoZPfL8Qo/VW1ACKE+J5NfDF9H+ZiLjKLO6o=
Subject key identifier:   05:F7:D3:2D:6B:A3:DE:F0:46:75:44:62:46:9B:18:1F:E2:AA:0D:43
Authority key identifier: 3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
Certificate issuer:       /CN=3de34082925cfd294b51af128aca545ff21f0ed0
Certificate serial:       018CA9A5FCCA28C7452AE7FBF53D43DB10AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.mft
Manifest number:          085C
Signing time:             Wed 27 Dec 2023 05:01:16 +0000
Manifest this update:     Wed 27 Dec 2023 05:01:16 +0000
Manifest next update:     Thu 28 Dec 2023 05:01:16 +0000
Files and hashes:         1: PeNAgpJc_SlLUa8SispUX_IfDtA.crl (hash: /yd6mFfphUzyln5rAMfqI/PLWb4eDCKG+HuQbmLYEUg=)
                          2: wswgr7R7DkRaoErHai3fWLa9s9I.roa (hash: 8lzy7Ne7ZfGIz6xmnodO9USWJR3oML+83LrcKRJTLSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:a5:fc:ca:28:c7:45:2a:e7:fb:f5:3d:43:db:10:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de34082925cfd294b51af128aca545ff21f0ed0
        Validity
            Not Before: Dec 27 05:01:16 2023 GMT
            Not After : Dec 28 05:01:16 2023 GMT
        Subject: CN=05f7d32d6ba3def046754462469b181fe2aa0d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:09:8e:c9:af:cc:93:ed:fb:8e:ea:bb:61:
                    2f:5a:94:20:86:71:2e:81:77:1b:c3:17:51:01:5b:
                    82:fe:30:d7:21:26:37:28:70:80:2f:2c:64:3d:64:
                    2c:68:fe:d0:cd:76:4e:92:f5:c9:60:45:78:77:42:
                    b6:31:fd:53:a4:65:ce:9c:8a:89:ef:60:6e:43:b6:
                    07:01:ba:24:de:f7:08:7d:06:6e:25:aa:8e:94:4c:
                    97:a8:74:9a:50:df:56:54:7e:1d:0d:b4:79:04:29:
                    ae:2a:f7:52:b0:83:10:c5:2f:da:e1:9f:10:ad:01:
                    84:02:dc:2e:04:0f:c6:57:e9:97:51:71:91:fa:38:
                    0d:88:d9:0d:1a:8a:46:6a:c6:4c:52:9a:f1:f5:25:
                    e0:41:58:33:8a:1f:1f:6f:cf:07:4e:bf:e7:7f:07:
                    1c:01:26:a7:aa:c4:0b:87:f5:37:35:b5:d9:6a:f5:
                    3e:b7:77:61:a2:61:6e:13:d6:e8:d5:2a:13:13:84:
                    7f:70:d6:ca:78:d0:63:db:c6:d5:8a:39:18:1b:46:
                    23:51:1a:ae:b4:68:9d:df:3a:b7:7f:aa:0d:07:b7:
                    af:3a:f7:6b:23:1d:67:13:59:d0:83:8e:09:73:6a:
                    bc:03:1a:06:88:ec:48:3a:fb:ac:d8:2c:c3:a6:c7:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F7:D3:2D:6B:A3:DE:F0:46:75:44:62:46:9B:18:1F:E2:AA:0D:43
            X509v3 Authority Key Identifier:
                keyid:3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4c:08:78:fa:2b:84:f7:e8:e2:99:01:e6:93:71:2e:67:84:
         43:db:1b:07:8f:44:55:7a:f7:5a:43:56:01:d1:ed:e8:0a:54:
         00:b7:32:5c:46:18:1c:f3:23:86:f7:a9:58:ac:ab:f7:3a:4f:
         dd:d5:e9:78:b8:b2:0c:8a:37:c3:ee:68:a7:95:6a:bd:00:7d:
         c3:f3:d6:4f:af:34:9b:3e:ab:e7:4f:5d:28:b7:2c:c3:e2:11:
         6c:14:22:1d:a7:15:4f:54:2f:e6:c1:4a:1a:23:ac:9c:b4:db:
         83:c8:53:aa:c6:65:71:87:63:cb:3c:23:31:df:e4:77:0d:78:
         35:31:58:72:6e:a9:13:ce:1c:9b:a8:48:13:5f:fb:4c:47:36:
         fe:31:f4:3b:ee:ec:32:e1:bd:91:ac:f9:ab:eb:21:ec:ad:7b:
         09:d5:ff:50:19:f7:71:14:07:f5:ee:e7:18:d6:ec:8b:9a:86:
         08:52:9d:10:cb:9e:08:d3:72:0b:e7:50:72:58:f0:4b:c3:6a:
         38:8f:36:a6:eb:44:02:21:06:66:00:52:4c:ef:a5:1b:bc:23:
         fa:a4:16:70:10:1d:f8:9f:2b:f7:39:f2:22:e0:6e:dc:3d:27:
         fb:80:16:f9:ba:4d:cd:3a:21:23:66:07:0f:f6:0d:ae:b1:45:
         fc:f1:3c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----