Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.mft
File:                     gCPT01gA7zyypWw4v5FDlzgeD_E.mft (raw, json)
Hash identifier:          mmuWB/30j1a8Y6Oah0MmcfVHoohLJottHaLzywDkcAA=
Subject key identifier:   46:C3:BD:F8:BA:34:84:FE:D5:B3:95:37:FD:A2:A2:E6:0F:89:EA:EE
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Certificate issuer:       /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial:       018FA93048DB51AB8CFFBD3A88EA119AD5CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.mft
Manifest number:          118D
Signing time:             Fri 24 May 2024 06:01:04 +0000
Manifest this update:     Fri 24 May 2024 06:01:04 +0000
Manifest next update:     Sat 25 May 2024 06:01:04 +0000
Files and hashes:         1: 9_7BOk-18Wet2CG0vJJkrfTaYrA.roa (hash: /btuFwXFQK8fzyGITTpn489MRXrBQ90SfGr1yP4AFZA=)
                          2: CDm3uh58ERXeebmc_jlO6nuOIbo.roa (hash: 23ZNSAcKCFqeJuNC7V80CmHaU2Kxw1dAVaoDBuPVoxQ=)
                          3: gCPT01gA7zyypWw4v5FDlzgeD_E.crl (hash: 13mCRi++so0q6Nf8DUj6FBfBoEFoVBKYV7Ubm1Cs7jk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a9:30:48:db:51:ab:8c:ff:bd:3a:88:ea:11:9a:d5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
        Validity
            Not Before: May 24 06:01:04 2024 GMT
            Not After : May 25 06:01:04 2024 GMT
        Subject: CN=46c3bdf8ba3484fed5b39537fda2a2e60f89eaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:ba:fe:47:08:3c:01:b6:80:de:c5:1c:92:
                    da:ca:e9:65:7f:b7:3e:46:3d:4e:80:f1:8c:d3:cf:
                    8a:ef:e4:a5:18:46:40:31:da:80:3d:9c:c0:83:ed:
                    41:82:d9:a2:3b:73:ca:1f:d8:4a:ea:c9:fe:82:5e:
                    88:13:bd:31:63:78:bc:fa:a5:6f:9f:b2:c1:99:05:
                    ee:9e:78:bc:9b:33:cb:46:84:02:61:2c:7b:09:d1:
                    9c:64:76:93:ea:b7:4f:6c:00:a9:fe:ca:77:35:ed:
                    9c:9c:d0:f9:b1:c4:d5:06:89:66:e1:a9:65:75:28:
                    16:56:d7:cb:ca:43:87:19:33:07:e0:59:5e:65:7f:
                    f6:fa:1a:e3:c9:25:ef:d6:2d:13:03:64:67:f4:fe:
                    e7:89:fb:c9:69:16:78:c7:f2:9f:c4:0a:10:6d:e6:
                    e4:ed:f5:ed:0a:3a:5a:86:3a:54:79:73:d1:89:52:
                    1a:38:fa:2e:4b:34:21:27:0c:53:d3:75:6d:25:57:
                    2d:4e:df:22:9f:1a:5d:b1:1f:98:ca:e9:4b:8f:8f:
                    74:3e:f2:51:19:34:d3:a6:f7:2c:86:3d:ef:64:23:
                    19:5b:0f:dc:86:9a:9c:8c:d7:8e:61:f6:d2:4e:f5:
                    04:61:67:a5:67:dc:f6:4c:f3:22:de:d9:ca:23:79:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C3:BD:F8:BA:34:84:FE:D5:B3:95:37:FD:A2:A2:E6:0F:89:EA:EE
            X509v3 Authority Key Identifier:
                keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c4:5c:2d:d3:17:03:e0:29:3e:f2:56:27:c1:aa:30:ab:db:
         92:dc:15:85:3b:3c:1b:fe:94:d9:bf:aa:0d:f3:90:8d:5b:93:
         0b:0a:88:5c:ed:fa:cf:d5:a3:a0:be:d7:8e:52:0f:e2:c0:d7:
         7a:19:59:e0:5b:ed:f3:5c:37:6c:31:63:1c:7b:b3:83:99:da:
         75:95:0d:4c:f7:6e:13:7d:87:71:d3:92:8e:46:0a:09:e3:60:
         e8:04:46:fa:e0:85:f2:06:56:12:98:07:24:0d:d9:b3:db:f0:
         98:40:e7:8b:b4:6e:87:fb:f6:1e:b5:b1:ee:ac:fa:78:30:75:
         9b:86:01:29:50:8e:10:b7:ed:bf:9f:67:01:14:fd:26:4f:f4:
         ba:9a:b2:88:fb:3e:13:90:a5:c7:fb:62:eb:71:fd:06:22:fe:
         3b:ff:fa:c1:1f:1f:7b:df:63:f7:4e:d5:fa:2d:9f:c6:79:0b:
         33:33:58:87:3b:a2:6a:c4:d4:3f:8c:b5:81:06:b7:08:61:d7:
         0a:49:bb:79:74:cf:bf:eb:0e:29:60:46:6d:ca:0f:7f:01:bf:
         a9:ed:32:50:bf:8e:db:c4:2f:57:c4:2c:fc:db:a6:61:b1:1d:
         d9:b6:49:21:57:6b:f8:ed:a8:7b:ff:40:7f:91:ff:41:17:48:
         0a:2b:e2:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+pMEjbUauM/706iOoRmtXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjNkM2QzNTgwMGVmM2NiMmE1NmMzOGJmOTE0Mzk3Mzgx
ZTBmZjEwHhcNMjQwNTI0MDYwMTA0WhcNMjQwNTI1MDYwMTA0WjAzMTEwLwYDVQQD
Eyg0NmMzYmRmOGJhMzQ4NGZlZDViMzk1MzdmZGEyYTJlNjBmODllYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyii6/kcIPAG2gN7FHJLayullf7c+
Rj1OgPGM08+K7+SlGEZAMdqAPZzAg+1BgtmiO3PKH9hK6sn+gl6IE70xY3i8+qVv
n7LBmQXunni8mzPLRoQCYSx7CdGcZHaT6rdPbACp/sp3Ne2cnND5scTVBolm4all
dSgWVtfLykOHGTMH4FleZX/2+hrjySXv1i0TA2Rn9P7nifvJaRZ4x/KfxAoQbebk
7fXtCjpahjpUeXPRiVIaOPouSzQhJwxT03VtJVctTt8inxpdsR+YyulLj490PvJR
GTTTpvcshj3vZCMZWw/chpqcjNeOYfbSTvUEYWelZ9z2TPMi3tnKI3nTLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbDvfi6NIT+1bOVN/2iouYPieruMB8GA1UdIwQY
MBaAFIAj09NYAO88sqVsOL+RQ5c4Hg/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2Et
ZDFhMGMzMjBjMjhhLzEvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2EtZDFhMGMzMjBjMjhh
LzEvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcRcLdMX
A+ApPvJWJ8GqMKvbktwVhTs8G/6U2b+qDfOQjVuTCwqIXO36z9WjoL7XjlIP4sDX
ehlZ4Fvt81w3bDFjHHuzg5nadZUNTPduE32HcdOSjkYKCeNg6ARG+uCF8gZWEpgH
JA3Zs9vwmEDni7Ruh/v2HrWx7qz6eDB1m4YBKVCOELftv59nART9Jk/0upqyiPs+
E5Clx/ti63H9BiL+O//6wR8fe99j907V+i2fxnkLMzNYhzuiasTUP4y1gQa3CGHX
Ckm7eXTPv+sOKWBGbcoPfwG/qe0yUL+O28QvV8Qs/NumYbEd2bZJIVdr+O2oe/9A
f5H/QRdICivikg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org