Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/912f7a-46ac-47e3-ba9e-31c2d86b9140/1/eQgWG3K3SVBmXW_xXhAK8ra3qJo.mft
File:                     eQgWG3K3SVBmXW_xXhAK8ra3qJo.mft (raw, json)
Hash identifier:          hR5GJ5RsXJ6/+dzW82I2ruMsjKrVkFo5NPvjk0gOE4k=
Subject key identifier:   42:40:18:BA:A5:20:5B:E1:43:FB:32:6B:7A:72:6F:6E:57:D2:A6:93
Authority key identifier: 79:08:16:1B:72:B7:49:50:66:5D:6F:F1:5E:10:0A:F2:B6:B7:A8:9A
Certificate issuer:       /CN=7908161b72b74950665d6ff15e100af2b6b7a89a
Certificate serial:       0189866BA1809AA124CCE54477DD39128B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQgWG3K3SVBmXW_xXhAK8ra3qJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/912f7a-46ac-47e3-ba9e-31c2d86b9140/1/eQgWG3K3SVBmXW_xXhAK8ra3qJo.mft
Manifest number:          011D
Signing time:             Mon 24 Jul 2023 05:42:27 +0000
Manifest this update:     Mon 24 Jul 2023 05:42:27 +0000
Manifest next update:     Tue 25 Jul 2023 05:42:27 +0000
Files and hashes:         1: eQgWG3K3SVBmXW_xXhAK8ra3qJo.crl (hash: N0H9TJZWvaM949faffh9uZigsE0EHIqh9lE8OnIwGF0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:86:6b:a1:80:9a:a1:24:cc:e5:44:77:dd:39:12:8b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7908161b72b74950665d6ff15e100af2b6b7a89a
        Validity
            Not Before: Jul 24 05:42:27 2023 GMT
            Not After : Jul 25 05:42:27 2023 GMT
        Subject: CN=424018baa5205be143fb326b7a726f6e57d2a693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:49:5c:2a:12:d9:8e:9a:ac:3e:e2:f9:3a:
                    27:12:89:7b:da:7d:da:d8:e7:a9:07:d9:a6:9f:94:
                    88:a7:6d:01:80:a7:65:a4:08:7c:d6:ed:f7:16:f3:
                    d6:52:7b:c2:ba:b0:05:53:49:ee:2c:27:1f:6e:82:
                    97:92:7c:bb:99:b4:f6:ce:a9:6b:36:b2:00:12:8e:
                    5c:d9:ca:7d:16:11:0e:84:27:b9:46:c8:ed:af:9d:
                    f7:5b:8a:49:6f:aa:de:61:ac:be:60:44:b7:ba:94:
                    40:76:ac:b4:f8:ac:9f:cf:ed:b8:ef:4d:a1:7d:b4:
                    b2:31:9f:90:aa:73:29:e8:25:43:c5:21:8a:f1:31:
                    60:1a:22:65:34:36:76:cb:16:93:cf:8a:a1:c7:cd:
                    8a:66:12:5c:5e:78:f9:67:34:d1:c9:a4:33:1a:3e:
                    83:4f:70:9b:66:da:f5:a2:c4:83:f6:41:cf:55:d5:
                    87:b1:b5:48:a3:39:fd:33:a3:9e:7c:73:c2:7e:e3:
                    95:9c:08:94:b3:28:38:83:90:95:0a:9e:0d:69:fc:
                    46:f6:75:6c:e5:89:0b:28:8d:b6:72:84:cf:bb:c0:
                    63:0c:39:ea:70:9c:97:a1:fa:ed:17:e1:05:30:4c:
                    a8:bc:3f:07:53:c5:88:bd:eb:59:79:37:3b:15:ad:
                    72:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:40:18:BA:A5:20:5B:E1:43:FB:32:6B:7A:72:6F:6E:57:D2:A6:93
            X509v3 Authority Key Identifier:
                keyid:79:08:16:1B:72:B7:49:50:66:5D:6F:F1:5E:10:0A:F2:B6:B7:A8:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQgWG3K3SVBmXW_xXhAK8ra3qJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/912f7a-46ac-47e3-ba9e-31c2d86b9140/1/eQgWG3K3SVBmXW_xXhAK8ra3qJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/912f7a-46ac-47e3-ba9e-31c2d86b9140/1/eQgWG3K3SVBmXW_xXhAK8ra3qJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:23:08:25:a5:47:69:4e:7e:41:c2:e1:01:53:a9:71:9f:b4:
         33:a9:88:0e:9f:1f:d3:a8:ee:11:0c:46:fb:82:c9:48:06:3a:
         1d:0c:8a:df:21:42:b2:6a:48:21:ec:10:32:98:76:78:8a:cf:
         a2:c3:67:90:67:80:0d:8f:cb:45:ee:c7:d7:71:b8:b8:fc:90:
         fb:42:0e:78:4b:cf:74:e4:bf:eb:a9:3a:8e:a6:34:c0:4a:c4:
         91:6b:e0:f7:16:dd:6c:13:23:eb:4a:61:f2:5c:e7:03:f8:7b:
         ff:ef:5a:93:c6:d8:4e:39:de:98:6b:73:f7:c9:34:b0:e8:11:
         21:fb:70:1a:8b:19:bb:2d:fe:f6:0f:7c:39:52:87:d7:55:d1:
         15:19:29:17:24:fe:1c:2b:63:6f:e2:85:a7:84:73:48:6d:77:
         2b:5d:ec:25:b3:bf:ae:73:fd:8b:ca:4e:d5:f3:2b:52:32:81:
         6f:88:1a:f8:ad:6d:a5:6d:2e:ec:1c:cf:51:c0:c3:a4:f5:ed:
         5c:62:b8:4f:bd:fa:1a:d3:9c:80:ac:6a:d2:e0:44:bd:d8:76:
         4a:51:c8:34:80:e0:30:bb:d0:e6:a6:97:40:60:ad:4e:bb:c6:
         c4:85:ed:04:58:2a:68:79:31:d9:d2:97:a1:ed:59:f8:95:c5:
         d0:8a:e7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYmGa6GAmqEkzOVEd905EotuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDgxNjFiNzJiNzQ5NTA2NjVkNmZmMTVlMTAwYWYyYjZi
N2E4OWEwHhcNMjMwNzI0MDU0MjI3WhcNMjMwNzI1MDU0MjI3WjAzMTEwLwYDVQQD
Eyg0MjQwMThiYWE1MjA1YmUxNDNmYjMyNmI3YTcyNmY2ZTU3ZDJhNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRxJXCoS2Y6arD7i+TonEol72n3a
2OepB9mmn5SIp20BgKdlpAh81u33FvPWUnvCurAFU0nuLCcfboKXkny7mbT2zqlr
NrIAEo5c2cp9FhEOhCe5Rsjtr533W4pJb6reYay+YES3upRAdqy0+Kyfz+24702h
fbSyMZ+QqnMp6CVDxSGK8TFgGiJlNDZ2yxaTz4qhx82KZhJcXnj5ZzTRyaQzGj6D
T3CbZtr1osSD9kHPVdWHsbVIozn9M6OefHPCfuOVnAiUsyg4g5CVCp4NafxG9nVs
5YkLKI22coTPu8BjDDnqcJyXofrtF+EFMEyovD8HU8WIvetZeTc7Fa1yFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJAGLqlIFvhQ/sya3pyb25X0qaTMB8GA1UdIwQY
MBaAFHkIFhtyt0lQZl1v8V4QCvK2t6iaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFnV0czSzNTVkJtWFdfeFhoQUs4cmEzcUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85MTJmN2EtNDZhYy00N2UzLWJhOWUt
MzFjMmQ4NmI5MTQwLzEvZVFnV0czSzNTVkJtWFdfeFhoQUs4cmEzcUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny85MTJmN2EtNDZhYy00N2UzLWJhOWUtMzFjMmQ4NmI5MTQw
LzEvZVFnV0czSzNTVkJtWFdfeFhoQUs4cmEzcUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyMIJaVH
aU5+QcLhAVOpcZ+0M6mIDp8f06juEQxG+4LJSAY6HQyK3yFCsmpIIewQMph2eIrP
osNnkGeADY/LRe7H13G4uPyQ+0IOeEvPdOS/66k6jqY0wErEkWvg9xbdbBMj60ph
8lznA/h7/+9ak8bYTjnemGtz98k0sOgRIftwGosZuy3+9g98OVKH11XRFRkpFyT+
HCtjb+KFp4RzSG13K13sJbO/rnP9i8pO1fMrUjKBb4ga+K1tpW0u7BzPUcDDpPXt
XGK4T736GtOcgKxq0uBEvdh2SlHINIDgMLvQ5qaXQGCtTrvGxIXtBFgqaHkx2dKX
oe1Z+JXF0IrnxQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:00 2025 by rpki-client