Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.mft
File:                     gCPT01gA7zyypWw4v5FDlzgeD_E.mft (raw, json)
Hash identifier:          7HOSqCq5vuzXP6SgOOCT7wtbEo3XthiQ+dWR5R0qTJw=
Subject key identifier:   2C:F0:74:5C:C8:54:41:53:87:3A:CE:75:B4:4A:06:B8:E9:5B:7D:87
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Certificate issuer:       /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial:       018FA7420DD3ED6DAA20BD7F352CA79BD169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.mft
Manifest number:          118C
Signing time:             Thu 23 May 2024 21:01:15 +0000
Manifest this update:     Thu 23 May 2024 21:01:15 +0000
Manifest next update:     Fri 24 May 2024 21:01:15 +0000
Files and hashes:         1: 9_7BOk-18Wet2CG0vJJkrfTaYrA.roa (hash: /btuFwXFQK8fzyGITTpn489MRXrBQ90SfGr1yP4AFZA=)
                          2: CDm3uh58ERXeebmc_jlO6nuOIbo.roa (hash: 23ZNSAcKCFqeJuNC7V80CmHaU2Kxw1dAVaoDBuPVoxQ=)
                          3: gCPT01gA7zyypWw4v5FDlzgeD_E.crl (hash: u4b4el4nxUvvS4qrQlXcfOAh5Fp6j/qSJrrVFynTEGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a7:42:0d:d3:ed:6d:aa:20:bd:7f:35:2c:a7:9b:d1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
        Validity
            Not Before: May 23 21:01:15 2024 GMT
            Not After : May 24 21:01:15 2024 GMT
        Subject: CN=2cf0745cc8544153873ace75b44a06b8e95b7d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:5f:94:d1:77:77:b0:ca:78:34:9c:b6:c8:
                    2a:d4:02:9f:58:3a:66:ad:09:54:5b:ee:02:2a:d0:
                    e6:69:f9:70:84:e6:77:4b:bd:7a:4a:97:77:33:55:
                    de:a1:1c:8f:8b:cc:7c:dd:5f:63:23:1c:d0:6d:61:
                    5e:db:45:b7:1f:47:ed:d8:99:63:45:67:22:dc:d4:
                    7f:a3:fd:ee:eb:ee:85:ff:a6:25:f8:99:1e:8b:3b:
                    96:c8:47:c3:eb:7a:9f:9c:43:ba:7d:e2:11:25:64:
                    75:e8:68:71:3c:1a:4a:25:c3:e9:a4:95:45:63:91:
                    bb:44:07:60:16:9a:9e:0e:8e:49:a7:31:1d:69:a1:
                    08:c1:b6:5f:28:4d:59:5e:c4:3b:a4:24:ea:0b:98:
                    fd:82:30:e3:07:37:2e:47:4a:88:b2:c7:8b:33:1b:
                    37:7e:75:ce:20:9f:10:c6:21:63:80:e4:1e:e3:83:
                    1d:4c:bf:47:8e:55:4d:3f:fe:41:c6:97:c8:74:79:
                    c4:87:b4:5f:82:d1:29:19:34:08:8c:40:82:e2:22:
                    66:c6:de:c7:13:80:5c:e5:ce:ac:2e:30:0e:d7:c1:
                    1e:1f:1d:44:7d:77:3c:3f:7b:33:19:e2:1e:30:62:
                    c3:3a:c3:8d:a0:75:96:b0:05:be:d2:f7:05:d1:f7:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F0:74:5C:C8:54:41:53:87:3A:CE:75:B4:4A:06:B8:E9:5B:7D:87
            X509v3 Authority Key Identifier:
                keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:37:3a:f1:eb:b2:91:72:67:9e:4e:c4:99:84:5e:95:03:
         84:12:f5:b3:2b:6c:90:83:7c:8f:7c:68:85:b8:0c:cf:05:54:
         95:a9:81:b9:87:54:dd:6b:49:6a:9d:c4:1a:03:10:8a:16:50:
         01:11:21:ee:6e:8d:dc:bb:7a:a7:cb:fe:e1:fb:34:e4:0f:7d:
         61:dd:5b:10:62:f8:17:30:5e:dc:f7:c4:4a:96:e8:39:cf:42:
         1c:a5:27:8a:c3:31:ba:29:3a:f1:28:c0:d6:58:40:b7:97:93:
         3b:c5:8d:1f:e9:9d:94:3a:63:9a:3a:78:cf:3f:a5:95:a3:98:
         b1:43:c6:8d:8e:e8:ac:be:e3:ec:94:bd:51:bf:57:36:e4:17:
         ae:3a:08:05:ee:5d:bc:02:44:0b:da:95:f3:c9:53:bd:86:9d:
         1b:bc:8e:7f:c4:d1:4e:4c:6d:92:da:62:c3:da:34:7c:71:c4:
         cd:57:df:b3:76:9b:67:00:90:1a:73:5b:98:28:53:be:db:5c:
         8e:aa:e0:5c:e7:cc:20:fa:11:5b:f4:1f:63:2b:04:18:f9:07:
         d1:8e:9c:27:bc:02:22:15:ea:61:dd:81:88:66:cb:7c:4d:99:
         07:59:55:62:ef:46:5e:01:dc:b2:fa:7d:85:1d:0f:9d:cd:4f:
         b7:da:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----