Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          VvhPkVFP0qMr5WlbMBdvHgKKhYNLdh1blZ7jzG4kF8U=
Subject key identifier:   49:8C:98:EC:42:BE:53:06:E1:C7:AF:D0:24:75:77:76:AD:E8:A3:3C
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       01962F3DCB571CCA6873586C5A698392D89D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0A22
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: WxNKxvCwAC2RobCV8cpjerviIvIaMOB+PsOBWaPUfe4=)
                          2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
                          3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cb:57:1c:ca:68:73:58:6c:5a:69:83:92:d8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=498c98ec42be5306e1c7afd024757776ade8a33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:65:4e:57:61:d8:da:53:6e:44:91:85:ed:
                    0e:88:6f:eb:1a:24:68:b1:45:7b:97:2b:aa:6b:c8:
                    fa:bc:f2:ff:2f:86:77:b3:61:a7:6e:66:c9:31:c2:
                    36:16:a3:20:b4:8d:d2:82:9d:fb:2c:22:df:e0:ab:
                    aa:2b:f0:05:0d:c2:88:5b:e5:e1:9e:27:1b:dc:c1:
                    79:09:0a:fc:ee:37:4b:1a:26:01:ec:09:5a:23:9e:
                    93:d4:17:55:31:26:4a:25:98:df:81:8f:97:4b:87:
                    79:b1:e6:be:20:56:72:48:05:b5:6c:a8:b9:1d:4e:
                    64:5c:07:c4:d1:c7:bf:83:0d:83:e7:99:6c:eb:cb:
                    a9:0a:e7:e5:97:db:84:46:6d:55:e2:8f:62:0d:a7:
                    9a:b4:4f:31:67:3a:63:0c:2c:79:f1:ce:40:84:75:
                    ef:24:c7:54:9a:d5:f1:5a:ad:62:6b:d4:3e:b7:9d:
                    1f:3d:a8:7c:35:b9:75:0f:57:70:da:d9:ed:c6:36:
                    ec:83:68:a5:77:db:41:65:f6:97:18:3b:1f:84:83:
                    35:3c:1f:c6:0b:5e:83:fc:89:65:e3:2f:79:b2:ac:
                    3a:a7:55:a9:6e:08:69:c9:35:70:10:e6:e9:ac:68:
                    d2:ae:a7:d7:33:9e:e3:ea:b9:82:9d:fd:86:0a:7b:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8C:98:EC:42:BE:53:06:E1:C7:AF:D0:24:75:77:76:AD:E8:A3:3C
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:00:a5:50:9b:d3:4d:c2:4f:3e:65:c5:ce:90:77:c3:20:
         45:94:48:0d:c2:04:7a:9c:d1:68:84:b2:1b:a4:d0:de:ca:ef:
         a5:46:08:be:a6:7b:bd:3a:47:31:d0:96:5e:0e:be:63:fd:4e:
         e3:2f:89:72:70:a8:8a:91:5a:84:5a:f2:7f:92:d3:ad:e5:51:
         85:f3:4b:d8:fe:db:97:b1:2e:26:14:ed:d0:0f:df:ac:3f:c8:
         e9:b4:67:ef:66:95:19:92:03:45:b9:0e:82:4f:b0:27:7e:d6:
         23:57:95:27:e5:9d:06:25:8a:5c:64:04:d9:dd:1d:34:1c:1b:
         3a:47:03:e6:35:8e:1b:05:99:d9:fe:a1:de:66:d4:83:e7:c9:
         84:da:e3:b1:78:13:30:cd:3e:e3:37:05:2b:ef:32:5c:ab:09:
         b5:f0:ab:59:0c:84:60:97:79:63:5e:62:3f:07:84:b9:a0:3b:
         9d:ad:6b:a0:b6:a2:3e:31:fb:00:34:42:55:09:c8:6b:1e:65:
         12:66:ac:cc:42:00:0b:75:8a:fa:69:f4:41:03:2b:99:38:30:
         98:ed:29:9e:39:52:0d:9b:21:bc:b1:fe:17:8e:0a:40:4e:c5:
         74:0f:2e:30:09:4b:13:88:ab:f3:46:c3:9e:16:77:f2:7d:6d:
         23:88:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----