Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.mft
File:                     EH1rbaFq45SJcXRk-4RXfHGI8fk.mft (raw, json)
Hash identifier:          C19IpIsyAhkMJnl42sXV1ANnaaaOCqkfJs+4jCapViM=
Subject key identifier:   DE:37:74:40:31:82:76:62:D7:11:CD:94:01:CD:81:B4:E3:43:67:85
Authority key identifier: 10:7D:6B:6D:A1:6A:E3:94:89:71:74:64:FB:84:57:7C:71:88:F1:F9
Certificate issuer:       /CN=107d6b6da16ae39489717464fb84577c7188f1f9
Certificate serial:       0190C9CC97B0CD6A4DCA2AA059BA05F55C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH1rbaFq45SJcXRk-4RXfHGI8fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.mft
Manifest number:          109F
Signing time:             Fri 19 Jul 2024 07:02:26 +0000
Manifest this update:     Fri 19 Jul 2024 07:02:26 +0000
Manifest next update:     Sat 20 Jul 2024 07:02:26 +0000
Files and hashes:         1: EH1rbaFq45SJcXRk-4RXfHGI8fk.crl (hash: 6gmZJCFbWikoFWH+idDMCkt+6P6EhJJJDUKX1DLvBrg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c9:cc:97:b0:cd:6a:4d:ca:2a:a0:59:ba:05:f5:5c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107d6b6da16ae39489717464fb84577c7188f1f9
        Validity
            Not Before: Jul 19 07:02:26 2024 GMT
            Not After : Jul 20 07:02:26 2024 GMT
        Subject: CN=de37744031827662d711cd9401cd81b4e3436785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:28:31:2e:aa:93:61:c5:6d:c0:2f:62:d6:
                    ee:2a:ec:08:92:5e:ed:7c:e4:bc:f7:c8:01:0e:c5:
                    10:f0:8c:c1:45:60:2e:39:96:7f:7d:72:5c:1f:8d:
                    b2:16:0a:e8:2f:1e:99:4d:3d:ba:a1:79:03:09:07:
                    7e:a1:1d:7d:72:49:d1:24:f7:e9:74:6c:52:33:a7:
                    5c:6d:38:03:7b:4e:d6:7f:70:da:eb:0b:1c:59:10:
                    fd:cb:1a:2f:b0:58:45:1f:79:98:e4:d1:5a:7c:46:
                    56:f7:bf:a7:dc:bf:eb:68:93:ea:db:f7:e7:7c:fc:
                    be:bf:39:9e:e6:05:86:f4:bb:63:b1:24:62:85:0a:
                    0e:73:5d:fb:c1:03:7b:3d:40:21:e7:0d:f3:cf:37:
                    ea:e8:ce:71:ed:51:5c:4c:2d:bf:b4:05:bd:65:5f:
                    db:da:ad:95:4c:e9:cd:4b:0d:b8:9b:1d:d3:59:90:
                    e5:a8:ab:37:4b:1c:61:91:b3:ed:1d:76:bd:e2:45:
                    8a:0d:27:64:56:6c:20:de:27:b9:2a:e0:63:a5:3e:
                    99:f9:a8:ac:f3:7a:44:5a:b7:82:e2:0b:b3:0d:ba:
                    18:dd:76:83:b2:77:be:8a:26:9a:82:d6:1a:74:f9:
                    5a:91:3a:d4:c2:aa:e9:c9:64:9f:b7:5c:78:22:43:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:37:74:40:31:82:76:62:D7:11:CD:94:01:CD:81:B4:E3:43:67:85
            X509v3 Authority Key Identifier:
                keyid:10:7D:6B:6D:A1:6A:E3:94:89:71:74:64:FB:84:57:7C:71:88:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH1rbaFq45SJcXRk-4RXfHGI8fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:21:62:7f:ab:1c:12:12:5a:aa:67:96:b5:d5:91:c2:a9:8e:
         3b:9b:13:37:2d:64:58:e8:d2:00:a7:78:82:0c:09:71:fe:a3:
         da:cf:9a:6a:ab:26:1e:0b:e0:e1:90:c7:fb:25:e0:20:f9:cf:
         02:94:db:87:36:13:50:25:80:7f:d2:5a:d4:01:dc:e0:d3:a0:
         a2:b3:07:54:7e:35:3e:79:3d:0e:fe:11:53:ac:fb:0b:6d:98:
         50:00:89:3a:ac:f3:b4:ce:e0:07:90:a2:b2:a0:9b:3e:3e:c4:
         85:9c:b5:5b:04:21:08:49:0a:86:1a:25:0f:64:71:80:c4:4b:
         8a:9f:bd:cb:cb:1e:19:74:ad:b1:61:f3:f1:03:8a:33:fc:2a:
         dd:a0:5f:4e:4e:9c:bb:22:51:13:81:03:3f:b2:4e:f7:da:01:
         80:22:57:ab:43:f7:a4:4e:34:d9:69:05:6d:da:52:b6:12:b0:
         a0:be:e0:cb:66:12:0b:9e:1b:47:0c:06:3e:da:e1:d4:c6:b1:
         07:c9:39:04:1f:fa:ac:ec:b1:9e:33:60:27:97:76:0b:4f:a4:
         51:da:c4:a0:17:09:9c:30:48:b7:bc:79:7c:05:a1:87:7c:d4:
         35:79:7a:5b:0b:0f:91:40:fc:6e:96:e3:b5:b9:20:c2:16:ea:
         95:b3:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:49 2025 by rpki-client