Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          kNrPd3xIuxPDNsjOPZak8Nr4pe4UJdMIxKjZZb8GI8I=
Subject key identifier:   E8:6C:54:1E:A0:2B:C2:AE:09:2E:52:11:C5:B8:14:13:3B:2A:D0:DA
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       0194BC73197C50E27B2D1248DFEAC6A4FD81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0962
Signing time:             Fri 31 Jan 2025 13:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:47 +0000
Files and hashes:         1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: ea/mX0PMvk1iSuDCJCpW2RT5HIvyVmJ+rAiHiR9MceA=)
                          2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
                          3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:19:7c:50:e2:7b:2d:12:48:df:ea:c6:a4:fd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: Jan 31 13:00:47 2025 GMT
            Not After : Feb  1 13:00:47 2025 GMT
        Subject: CN=e86c541ea02bc2ae092e5211c5b814133b2ad0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:7a:34:bb:5a:21:6d:8a:49:f6:04:24:d8:
                    59:e8:8b:f5:2b:8b:3c:c7:01:99:d2:32:32:45:75:
                    fa:0f:18:3c:5f:70:f1:c2:7d:91:fe:9e:a5:f3:11:
                    20:9f:6b:4e:1b:b0:71:7c:e9:78:eb:2d:30:b1:33:
                    4f:a1:a9:43:38:51:0c:d2:d3:91:ee:13:81:d6:88:
                    44:95:71:5d:39:ec:6d:69:41:3b:6f:cc:1b:10:4f:
                    e2:58:4c:1d:31:9b:22:2c:06:5d:92:6f:e1:38:5d:
                    8e:d0:50:f8:26:93:fa:c7:44:14:dd:db:9a:9f:5a:
                    2e:52:b0:eb:4a:8c:49:89:0e:2e:01:c9:42:ee:c1:
                    64:3a:fe:e8:69:4c:ef:76:eb:de:c4:ae:22:ef:43:
                    a7:7a:39:5e:23:9b:48:eb:35:e5:4f:88:19:28:2a:
                    65:52:e6:ef:c7:27:48:f5:ad:45:3e:ae:77:c0:0d:
                    2c:5e:1c:a9:17:93:e4:09:3f:20:aa:66:18:aa:09:
                    e3:34:1a:c7:c0:1e:c1:34:e9:92:70:df:c2:cc:6a:
                    cb:7e:44:94:dd:d0:6a:2c:c1:86:5b:08:8a:30:e8:
                    ac:20:eb:55:ad:f6:ba:45:3a:30:e0:bd:6f:f6:25:
                    05:30:9d:25:1c:f1:f5:bd:4e:3f:06:ad:73:0d:4f:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:54:1E:A0:2B:C2:AE:09:2E:52:11:C5:B8:14:13:3B:2A:D0:DA
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c2:55:c9:d9:de:87:4f:ef:e9:76:56:ea:c5:ef:79:17:0b:
         a0:9c:40:6d:a3:b0:af:24:70:c2:5f:18:30:a9:3f:fb:63:19:
         b0:55:67:1c:31:2a:57:70:79:34:ab:7b:4d:fb:62:91:2f:fe:
         ba:53:a8:13:31:44:c9:1d:0e:4c:6c:af:9b:c7:44:05:a1:34:
         f8:f8:8d:4c:0c:54:b5:08:c5:94:6b:61:86:35:12:b0:95:6c:
         7a:0f:65:37:c1:c5:a6:7b:0f:f6:a5:6d:85:84:e3:b8:41:1e:
         be:e9:a0:7d:27:eb:89:d7:41:7e:1d:31:e5:d6:77:cf:35:37:
         b0:e8:2c:51:0f:85:20:2a:9f:e5:ba:b2:45:41:c3:b8:0d:c2:
         0e:50:dc:39:aa:f1:34:69:ed:a6:b6:16:79:2b:67:0b:64:e3:
         75:c7:17:74:d8:33:30:92:7a:56:30:17:89:dc:b7:a1:7f:66:
         45:dd:b8:fa:cd:c6:29:d7:a2:19:b6:13:6b:3c:db:7d:21:c9:
         4b:52:21:ec:93:83:f0:58:39:6b:6c:02:d5:11:c6:8a:31:4c:
         93:c1:b9:90:d7:29:4d:51:fe:a0:b9:48:60:73:fb:a4:be:f4:
         b5:bb:54:44:31:74:2a:40:80:4c:6a:86:09:1b:5d:d3:93:cd:
         95:e0:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:19 2025 by rpki-client