Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft
File:                     GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft (raw, json)
Hash identifier:          +V2fFEpEJ7fYsUlcPC3BJRO9VVa/bTU2nkoeHgeAG5g=
Subject key identifier:   25:B7:8F:88:62:E8:96:FC:4F:D7:81:0D:54:D5:03:25:96:E5:7D:A7
Authority key identifier: 19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
Certificate issuer:       /CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
Certificate serial:       0189207ECAF526A263B5E8437A5F4FA1124A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft
Manifest number:          07EC
Signing time:             Tue 04 Jul 2023 10:42:07 +0000
Manifest this update:     Tue 04 Jul 2023 10:42:07 +0000
Manifest next update:     Wed 05 Jul 2023 10:42:07 +0000
Files and hashes:         1: GWUJqIHln_r6oxz0i_Xidhu4Iu0.crl (hash: 9rUgrtHMZE1plktUy7N9d9s1Hf6W+MWVl8MF2bb8uWs=)
                          2: xj_5YqCQbPB2R7DcxL-xfqt524s.roa (hash: f0NKv3y7F1PTau8KcZ5AZspR+sPj5nSYAJ8L4zAS0IY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:20:7e:ca:f5:26:a2:63:b5:e8:43:7a:5f:4f:a1:12:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
        Validity
            Not Before: Jul  4 10:42:07 2023 GMT
            Not After : Jul  5 10:42:07 2023 GMT
        Subject: CN=25b78f8862e896fc4fd7810d54d5032596e57da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:28:58:9a:7b:23:f7:1d:74:75:65:08:dc:
                    05:80:49:c9:bc:11:2e:f6:4d:f0:eb:17:d8:f7:0b:
                    b1:1b:07:b2:9d:d1:10:76:0b:07:c3:53:8d:ad:2c:
                    13:42:74:65:3e:51:84:b0:af:21:b5:fb:04:44:6e:
                    77:85:ee:96:d1:4f:24:8a:78:46:4d:d2:eb:2a:92:
                    be:86:6f:2a:50:56:2e:48:6e:81:42:36:94:00:0a:
                    cb:2f:c1:09:4f:37:24:ed:ab:5f:3e:de:80:cf:2b:
                    09:73:86:ae:c5:b2:3e:98:2b:37:7a:36:04:f9:0f:
                    4b:13:6a:b1:5f:53:4c:85:23:54:f8:03:7b:59:65:
                    5d:c4:e4:48:eb:0b:8f:e8:ad:9d:d3:0a:f1:70:7f:
                    76:1b:08:cb:99:e9:9f:5c:e0:7c:92:70:25:cb:08:
                    5c:7c:2c:a3:13:c9:d3:aa:99:42:91:cc:a3:4d:e4:
                    31:68:6a:74:5b:82:d6:2b:78:8a:e8:3e:60:54:a7:
                    17:10:a7:f4:c3:ad:f0:4b:15:e4:d0:76:5d:2c:a4:
                    24:2c:42:72:ed:ba:fa:d1:06:ee:55:39:10:bc:3e:
                    1f:6c:97:43:0f:19:bb:a9:c8:62:61:8d:3f:85:fb:
                    6b:0f:0f:d0:fc:5c:fb:fd:2a:0d:f3:c5:68:9c:9b:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B7:8F:88:62:E8:96:FC:4F:D7:81:0D:54:D5:03:25:96:E5:7D:A7
            X509v3 Authority Key Identifier:
                keyid:19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:7d:5c:cd:00:fa:ec:10:a1:d9:38:e5:9b:86:ee:b1:22:
         bd:67:72:0c:a2:ae:11:10:3f:b6:b7:19:fc:fe:55:7e:53:97:
         37:cd:ea:17:e8:80:07:59:45:f7:e8:98:c9:cf:55:88:ac:24:
         26:a5:f4:c5:8a:0a:21:aa:9f:5c:0a:3b:4d:0c:b8:97:5b:bc:
         5d:aa:9f:8f:f6:35:e8:6d:e6:8e:a5:2e:2c:1c:21:1e:dd:e2:
         c1:2a:22:4b:bb:85:bb:06:ae:89:cd:20:87:50:ae:cf:b5:ef:
         80:3b:7e:1a:20:15:ab:a9:3f:e8:44:dd:72:64:7b:a5:d4:49:
         fc:e0:78:79:39:6c:8c:30:c2:53:30:0a:f6:dc:2f:91:e5:ca:
         20:6e:9c:64:03:2f:09:9c:55:46:80:4a:a5:a0:85:15:07:ac:
         45:b9:ad:e6:87:ac:3f:43:d2:9a:e3:68:26:cc:4e:08:7d:3d:
         25:07:27:16:b5:04:db:7f:22:59:f8:5c:0a:ff:f3:6c:b6:bc:
         af:63:7a:00:70:86:01:2d:6b:83:33:b2:da:dd:dd:19:99:31:
         33:8e:d5:d3:c2:e1:8a:58:4b:e7:b0:b5:72:66:97:c7:f7:e7:
         4b:07:1b:f6:3e:6f:6c:09:22:4c:29:3c:2b:a6:68:8e:7e:39:
         1c:56:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:15:50 2025 by rpki-client