Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File:                     EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier:          tDhLqqOgZXp6cYOt8iezyJhKgQczoQvE+0WkVUmtD7Y=
Subject key identifier:   B9:35:AF:91:49:89:B3:4F:3C:B0:B4:D2:E0:04:AB:79:6E:30:51:19
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer:       /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial:       019F236A01DD6037525A89D2030D9B604F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number:          1356
Signing time:             Thu 02 Jul 2026 15:19:37 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:37 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:37 +0000
Files and hashes:         1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: +mSCTz43az4zws4Onjy5txqjQGstAMbxhYHo/3ORmg8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:01:dd:60:37:52:5a:89:d2:03:0d:9b:60:4f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
        Validity
            Not Before: Jul  2 15:19:37 2026 GMT
            Not After : Jul  3 15:19:37 2026 GMT
        Subject: CN=b935af914989b34f3cb0b4d2e004ab796e305119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:18:9b:65:df:e3:c2:69:f8:bf:a0:e3:84:
                    b9:6f:d5:be:c0:ed:a6:be:eb:6b:a1:49:9b:bc:ad:
                    a4:de:be:33:f3:e0:75:ab:d7:6d:eb:ca:4e:39:fd:
                    bb:af:9c:41:1a:64:62:f5:d5:3f:9e:80:bd:8e:31:
                    28:f7:26:12:d9:6a:8c:e8:03:fc:b6:a1:09:32:5d:
                    2f:31:8e:ef:19:57:de:da:fe:90:f4:bf:17:e7:ce:
                    59:ac:70:d6:cb:fa:ad:57:c6:72:2a:43:e6:fd:69:
                    d5:47:f6:5c:c7:74:90:93:e1:f1:0b:d7:18:e2:6e:
                    c5:e8:e4:c1:95:5a:60:8d:c5:a4:cb:45:d2:8d:e0:
                    83:6e:b8:76:1a:f1:2d:1b:96:08:2e:b6:51:a1:c8:
                    51:f5:40:63:c7:31:04:b2:68:15:fc:1f:a7:60:00:
                    3d:91:4b:43:85:30:df:37:fe:70:9c:e6:d3:9d:d7:
                    2e:1c:a5:c9:4a:a9:54:46:aa:12:37:e6:ac:6d:8a:
                    18:35:f6:51:30:33:b6:3d:43:2f:1c:9a:af:52:ab:
                    53:13:38:46:ee:8d:3e:a3:85:37:83:eb:9f:fb:c3:
                    ed:ed:80:d9:1b:3e:21:6f:8b:e2:7d:dd:c6:de:21:
                    b5:bf:76:45:6d:10:5c:b9:b6:cf:ab:f7:d8:34:34:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:AF:91:49:89:B3:4F:3C:B0:B4:D2:E0:04:AB:79:6E:30:51:19
            X509v3 Authority Key Identifier:
                keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:70:3e:69:7e:c2:79:cc:a9:90:a2:d1:bb:96:d1:3e:a5:bc:
         c0:0d:d0:86:af:49:95:14:24:6e:83:d2:b6:1e:eb:59:3f:f9:
         63:e9:05:ee:58:ca:74:3f:dd:4d:e3:cb:87:9e:d1:d5:73:76:
         51:a6:58:25:91:18:ee:be:7a:4b:de:12:63:6d:8b:7f:a2:75:
         1c:33:00:f1:aa:bc:b9:1e:95:f0:c0:a5:45:4a:ff:ce:1b:41:
         a6:b4:80:7e:86:f1:20:c2:17:14:c4:aa:60:dd:7c:02:a9:ca:
         99:c2:ce:e3:77:65:6e:df:a5:f2:9d:c1:14:60:e5:4a:a4:aa:
         3f:d9:b4:6f:9c:22:a6:a1:32:7b:0d:4a:bc:e2:ce:fc:b7:f3:
         2f:3b:21:39:56:ed:43:ce:44:0b:11:10:d4:57:79:48:68:f9:
         ca:ef:42:2a:51:f8:54:5d:63:77:23:12:db:dd:e8:dc:9a:20:
         78:15:57:2c:b0:36:b0:52:7e:2d:c6:5f:50:19:1b:22:2a:b8:
         a6:7f:0d:ba:ba:ab:48:b3:cc:00:e7:d0:3f:2f:3d:71:ac:a0:
         04:8d:45:96:00:a5:97:45:bd:89:8d:47:a7:4b:c5:40:e2:d5:
         9e:87:bc:dc:6b:6c:8d:31:1b:b2:fd:9e:01:64:df:81:59:db:
         df:82:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----