Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/37FBkIPLMbFRLO0wRcAOIE8hTjY.mft
File:                     37FBkIPLMbFRLO0wRcAOIE8hTjY.mft (raw, json)
Hash identifier:          GkQ0L8H/17Y+uEq21iHEN6cC0Nj1xCy/yNSOhwEZLts=
Subject key identifier:   D1:F2:05:B5:D9:19:49:29:9A:2D:17:C8:8F:BE:35:BA:85:0B:30:04
Authority key identifier: DF:B1:41:90:83:CB:31:B1:51:2C:ED:30:45:C0:0E:20:4F:21:4E:36
Certificate issuer:       /CN=dfb1419083cb31b1512ced3045c00e204f214e36
Certificate serial:       0184E55B42538C1282F98B843B090212FCDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37FBkIPLMbFRLO0wRcAOIE8hTjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/37FBkIPLMbFRLO0wRcAOIE8hTjY.mft
Manifest number:          0B41
Signing time:             Tue 06 Dec 2022 02:54:33 +0000
Manifest this update:     Tue 06 Dec 2022 02:54:33 +0000
Manifest next update:     Wed 07 Dec 2022 02:54:33 +0000
Files and hashes:         1: 37FBkIPLMbFRLO0wRcAOIE8hTjY.crl (hash: 6oCjkELozDLDeYGXRc+kWeNzUjLlYtmhSGjzbh5ppD0=)
                          2: B9yG5gQ3gTdLMs1s35rE8FEwCK0.roa (hash: qPsYzEjNkHwlc5/qyUi//d74Eo9mR8f7JenLPULm2EU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e5:5b:42:53:8c:12:82:f9:8b:84:3b:09:02:12:fc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb1419083cb31b1512ced3045c00e204f214e36
        Validity
            Not Before: Dec  6 02:54:33 2022 GMT
            Not After : Dec  7 02:54:33 2022 GMT
        Subject: CN=d1f205b5d91949299a2d17c88fbe35ba850b3004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:8a:3f:d5:f6:12:43:0a:b9:cc:68:bc:e6:
                    3d:0a:ce:69:51:d1:e0:48:f6:71:b7:2a:c6:35:8c:
                    86:14:70:6c:5d:77:c4:09:3c:1e:de:a3:cf:f8:e8:
                    4a:93:67:28:cd:b1:f1:57:bb:4d:e7:30:bd:d0:11:
                    71:3a:04:49:53:2d:5d:87:b7:f8:4d:fe:cc:79:f9:
                    64:f1:35:4b:36:17:23:0d:00:3c:4d:37:7a:83:9c:
                    62:3c:1d:e5:f7:39:fd:35:d5:42:89:4d:de:75:ee:
                    7c:26:c5:5a:15:4c:84:36:fd:18:7c:aa:dd:42:5d:
                    bd:e6:ae:d9:e4:4f:ee:43:c4:25:59:6e:61:b3:8c:
                    15:1f:0e:d4:16:c9:0d:dc:e1:90:e1:1f:db:7d:31:
                    bf:95:ac:b1:98:84:54:79:05:88:cd:0e:15:2c:ce:
                    c0:58:e3:2a:25:9f:29:f2:ce:80:ed:88:c5:cf:5d:
                    3b:11:3d:c8:29:e9:cf:97:89:3d:f7:4a:87:62:6b:
                    04:0e:92:89:30:d1:9f:e9:26:b5:e8:39:ca:5c:fe:
                    58:c8:a9:b5:2c:13:e6:1a:40:0b:d0:34:10:62:87:
                    fb:28:ff:c7:d5:50:f4:91:49:a6:cc:42:66:42:6e:
                    96:f4:d3:e5:60:72:a9:97:ac:87:df:90:21:23:99:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F2:05:B5:D9:19:49:29:9A:2D:17:C8:8F:BE:35:BA:85:0B:30:04
            X509v3 Authority Key Identifier:
                keyid:DF:B1:41:90:83:CB:31:B1:51:2C:ED:30:45:C0:0E:20:4F:21:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37FBkIPLMbFRLO0wRcAOIE8hTjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/37FBkIPLMbFRLO0wRcAOIE8hTjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/37FBkIPLMbFRLO0wRcAOIE8hTjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:69:75:43:80:b7:7a:08:b1:c6:77:0e:32:e1:a8:97:59:54:
         84:0f:4d:1c:f8:85:18:71:c9:95:30:cd:f4:94:28:29:30:2a:
         96:07:07:92:27:9a:d7:39:e2:4b:90:33:11:3c:b9:50:3c:1c:
         81:8e:b8:6c:dd:d1:41:83:ee:5b:66:ae:27:d1:77:f1:20:3b:
         37:50:58:5a:af:1e:c9:12:4a:6f:fa:04:db:96:d3:1c:86:9d:
         93:35:c1:60:5c:c7:0c:c0:59:28:f0:d9:a4:60:c1:6b:62:7b:
         e5:ec:e6:3b:08:a5:4b:dd:b8:fc:c7:d3:81:49:69:f3:74:ab:
         c4:e1:3d:c1:74:f6:0c:18:cc:ad:6c:4e:d0:1f:fe:7e:13:5a:
         ea:14:f8:ae:25:f5:97:53:9a:91:5d:bc:25:84:16:92:ab:cf:
         d1:56:82:8f:76:f4:a4:4f:e2:2d:05:66:6d:f4:e4:05:78:0b:
         fb:e4:75:0c:54:c4:60:e2:27:6e:93:e7:0a:a7:c7:ae:70:42:
         0f:d1:e9:c5:63:2e:de:fc:80:85:30:1d:8d:7e:4a:d2:4d:0b:
         3b:d1:b3:02:1d:97:df:87:da:09:90:dc:68:bb:50:65:93:23:
         bf:96:bf:43:53:bd:4b:15:b8:49:02:57:f1:bd:d6:93:a1:a1:
         ed:83:8a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYTlW0JTjBKC+YuEOwkCEvzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjE0MTkwODNjYjMxYjE1MTJjZWQzMDQ1YzAwZTIwNGYy
MTRlMzYwHhcNMjIxMjA2MDI1NDMzWhcNMjIxMjA3MDI1NDMzWjAzMTEwLwYDVQQD
EyhkMWYyMDViNWQ5MTk0OTI5OWEyZDE3Yzg4ZmJlMzViYTg1MGIzMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW6KP9X2EkMKucxovOY9Cs5pUdHg
SPZxtyrGNYyGFHBsXXfECTwe3qPP+OhKk2cozbHxV7tN5zC90BFxOgRJUy1dh7f4
Tf7Meflk8TVLNhcjDQA8TTd6g5xiPB3l9zn9NdVCiU3ede58JsVaFUyENv0YfKrd
Ql295q7Z5E/uQ8QlWW5hs4wVHw7UFskN3OGQ4R/bfTG/layxmIRUeQWIzQ4VLM7A
WOMqJZ8p8s6A7YjFz107ET3IKenPl4k990qHYmsEDpKJMNGf6Sa16DnKXP5YyKm1
LBPmGkAL0DQQYof7KP/H1VD0kUmmzEJmQm6W9NPlYHKpl6yH35AhI5lszwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHyBbXZGUkpmi0XyI++NbqFCzAEMB8GA1UdIwQY
MBaAFN+xQZCDyzGxUSztMEXADiBPIU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdGQmtJUExNYkZSTE8wd1JjQU9JRThoVGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zN2Y2YmMtZDY4MC00ZTEwLTkxMjUt
OTI4MDczOTA0NjA2LzEvMzdGQmtJUExNYkZSTE8wd1JjQU9JRThoVGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zN2Y2YmMtZDY4MC00ZTEwLTkxMjUtOTI4MDczOTA0NjA2
LzEvMzdGQmtJUExNYkZSTE8wd1JjQU9JRThoVGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGl1Q4C3
egixxncOMuGol1lUhA9NHPiFGHHJlTDN9JQoKTAqlgcHkiea1zniS5AzETy5UDwc
gY64bN3RQYPuW2auJ9F38SA7N1BYWq8eyRJKb/oE25bTHIadkzXBYFzHDMBZKPDZ
pGDBa2J75ezmOwilS924/MfTgUlp83SrxOE9wXT2DBjMrWxO0B/+fhNa6hT4riX1
l1OakV28JYQWkqvP0VaCj3b0pE/iLQVmbfTkBXgL++R1DFTEYOInbpPnCqfHrnBC
D9HpxWMu3vyAhTAdjX5K0k0LO9GzAh2X34faCZDcaLtQZZMjv5a/Q1O9SxW4SQJX
8b3Wk6Gh7YOKuA==
-----END CERTIFICATE-----