Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.mft
File:                     EH1rbaFq45SJcXRk-4RXfHGI8fk.mft (raw, json)
Hash identifier:          GcMs3xaJK288uufepIqEqRpDurGwgSJ0XCUjVP6XUPI=
Subject key identifier:   7A:48:09:8A:47:74:B4:1F:29:86:FE:6C:CA:CA:C9:8B:89:23:58:B8
Authority key identifier: 10:7D:6B:6D:A1:6A:E3:94:89:71:74:64:FB:84:57:7C:71:88:F1:F9
Certificate issuer:       /CN=107d6b6da16ae39489717464fb84577c7188f1f9
Certificate serial:       0190C7DDD6BCE2C4EE957444034F26964754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH1rbaFq45SJcXRk-4RXfHGI8fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.mft
Manifest number:          109E
Signing time:             Thu 18 Jul 2024 22:02:02 +0000
Manifest this update:     Thu 18 Jul 2024 22:02:02 +0000
Manifest next update:     Fri 19 Jul 2024 22:02:02 +0000
Files and hashes:         1: EH1rbaFq45SJcXRk-4RXfHGI8fk.crl (hash: /ivSzeIcG6uXdsBcO7mqIMwEXkme1i19s5sw6WNDFIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c7:dd:d6:bc:e2:c4:ee:95:74:44:03:4f:26:96:47:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107d6b6da16ae39489717464fb84577c7188f1f9
        Validity
            Not Before: Jul 18 22:02:02 2024 GMT
            Not After : Jul 19 22:02:02 2024 GMT
        Subject: CN=7a48098a4774b41f2986fe6ccacac98b892358b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:bc:0e:84:8d:78:cc:c2:6e:dd:fe:a8:1a:
                    44:f5:64:3f:d2:cd:0d:ab:cb:88:86:cf:e2:50:71:
                    4e:2e:f9:1c:c3:92:95:93:2c:5a:53:26:00:d4:7d:
                    9c:fb:d3:33:de:0e:16:5d:f7:d7:69:f5:98:88:04:
                    d4:78:18:60:43:57:48:b7:ad:71:a2:04:31:a9:98:
                    9e:9a:13:68:97:54:54:da:24:59:f0:9e:c3:fb:ee:
                    f6:82:50:50:ce:e4:1f:ee:ba:4b:45:4b:91:6b:17:
                    86:39:71:5b:9e:12:90:6a:52:f6:f3:cf:90:08:98:
                    d6:06:f8:07:b2:d0:64:be:04:74:8e:55:b5:a8:a4:
                    c9:0f:fc:53:75:ca:d7:11:48:1d:7e:9a:8c:a9:97:
                    fb:35:09:09:27:b7:e7:21:bc:12:83:78:5c:02:74:
                    7e:5e:f1:ff:be:dd:0f:b1:4d:73:18:e1:b8:6c:16:
                    a6:5a:de:74:59:c5:e7:88:2a:25:6d:a7:c0:86:21:
                    fc:62:73:6d:3b:21:02:b9:f7:f5:50:06:39:04:50:
                    ba:73:bb:63:35:cf:63:25:d0:76:3c:8a:61:5f:36:
                    ac:55:6a:0e:4f:d6:8b:85:92:94:3b:3c:83:16:62:
                    d3:48:78:30:10:10:6e:c4:fb:02:eb:b4:7f:d8:0f:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:09:8A:47:74:B4:1F:29:86:FE:6C:CA:CA:C9:8B:89:23:58:B8
            X509v3 Authority Key Identifier:
                keyid:10:7D:6B:6D:A1:6A:E3:94:89:71:74:64:FB:84:57:7C:71:88:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH1rbaFq45SJcXRk-4RXfHGI8fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d5b824-7f42-4841-8326-71ba429c7f86/1/EH1rbaFq45SJcXRk-4RXfHGI8fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:05:70:f6:24:9c:91:fe:af:16:72:35:f1:00:c6:4f:fa:
         d8:3f:1d:7b:eb:7d:ef:50:56:e9:3f:aa:70:c8:ab:7f:72:27:
         b4:3e:5e:cf:0e:6c:f4:5e:4b:73:80:60:ed:8c:30:dc:6a:77:
         cd:25:19:51:fc:35:eb:64:0e:d9:e6:67:71:79:28:9f:2d:84:
         ab:0d:49:3c:3f:05:a2:d7:d2:e4:8c:88:61:60:65:58:7c:b3:
         b5:2b:23:b8:ba:f7:db:bf:bb:4b:84:30:f6:81:6d:fc:b6:3e:
         a8:c3:36:1c:21:62:22:4b:b4:40:a6:b2:59:86:11:5f:0e:f3:
         50:e8:8a:31:5e:12:dc:cf:5f:b7:5e:ae:5f:6c:36:19:53:b1:
         26:da:89:0d:37:bc:62:f0:31:26:2b:cf:f0:20:51:56:4e:fb:
         e6:09:6a:62:e9:cf:8d:e1:09:55:a1:b4:12:c5:25:4c:f1:44:
         fb:19:9f:fb:a4:ac:de:5e:a4:a6:40:24:42:43:ae:b9:e3:12:
         b0:42:b2:c4:c0:07:78:69:65:e1:48:a4:66:58:60:b8:a8:3f:
         b2:8d:90:6e:98:f5:a1:11:35:38:4c:8e:38:ec:61:84:87:d6:
         ec:eb:89:d9:40:52:9b:68:76:31:9e:18:99:e2:54:77:7c:63:
         d1:b8:ec:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZDH3da84sTulXREA08mlkdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2Q2YjZkYTE2YWUzOTQ4OTcxNzQ2NGZiODQ1NzdjNzE4
OGYxZjkwHhcNMjQwNzE4MjIwMjAyWhcNMjQwNzE5MjIwMjAyWjAzMTEwLwYDVQQD
Eyg3YTQ4MDk4YTQ3NzRiNDFmMjk4NmZlNmNjYWNhYzk4Yjg5MjM1OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYm8DoSNeMzCbt3+qBpE9WQ/0s0N
q8uIhs/iUHFOLvkcw5KVkyxaUyYA1H2c+9Mz3g4WXffXafWYiATUeBhgQ1dIt61x
ogQxqZiemhNol1RU2iRZ8J7D++72glBQzuQf7rpLRUuRaxeGOXFbnhKQalL288+Q
CJjWBvgHstBkvgR0jlW1qKTJD/xTdcrXEUgdfpqMqZf7NQkJJ7fnIbwSg3hcAnR+
XvH/vt0PsU1zGOG4bBamWt50WcXniColbafAhiH8YnNtOyECuff1UAY5BFC6c7tj
Nc9jJdB2PIphXzasVWoOT9aLhZKUOzyDFmLTSHgwEBBuxPsC67R/2A9OgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpICYpHdLQfKYb+bMrKyYuJI1i4MB8GA1UdIwQY
MBaAFBB9a22hauOUiXF0ZPuEV3xxiPH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUgxcmJhRnE0NVNKY1hSay00UlhmSEdJOGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNWI4MjQtN2Y0Mi00ODQxLTgzMjYt
NzFiYTQyOWM3Zjg2LzEvRUgxcmJhRnE0NVNKY1hSay00UlhmSEdJOGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kNWI4MjQtN2Y0Mi00ODQxLTgzMjYtNzFiYTQyOWM3Zjg2
LzEvRUgxcmJhRnE0NVNKY1hSay00UlhmSEdJOGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvcFcPYk
nJH+rxZyNfEAxk/62D8de+t971BW6T+qcMirf3IntD5ezw5s9F5Lc4Bg7Yww3Gp3
zSUZUfw162QO2eZncXkony2Eqw1JPD8FotfS5IyIYWBlWHyztSsjuLr327+7S4Qw
9oFt/LY+qMM2HCFiIku0QKayWYYRXw7zUOiKMV4S3M9ft16uX2w2GVOxJtqJDTe8
YvAxJivP8CBRVk775glqYunPjeEJVaG0EsUlTPFE+xmf+6Ss3l6kpkAkQkOuueMS
sEKyxMAHeGll4UikZlhguKg/so2Qbpj1oRE1OEyOOOxhhIfW7OuJ2UBSm2h2MZ4Y
meJUd3xj0bjsmA==
-----END CERTIFICATE-----