Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft
File:                     ihSfdtOUQVHwreTeeDHT1Cy26N8.mft (raw, json)
Hash identifier:          5sqsbJ4em913A7rZC6GHCqGhYTC44d2IBtdv7yH3WPM=
Subject key identifier:   ED:8C:62:3A:00:09:22:F6:DF:DC:AC:BF:FC:6C:28:80:6B:19:40:35
Authority key identifier: 8A:14:9F:76:D3:94:41:51:F0:AD:E4:DE:78:31:D3:D4:2C:B6:E8:DF
Certificate issuer:       /CN=8a149f76d3944151f0ade4de7831d3d42cb6e8df
Certificate serial:       018D9C1E0BBF9164427E938E43D53F214DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihSfdtOUQVHwreTeeDHT1Cy26N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft
Manifest number:          086C
Signing time:             Mon 12 Feb 2024 07:00:31 +0000
Manifest this update:     Mon 12 Feb 2024 07:00:31 +0000
Manifest next update:     Tue 13 Feb 2024 07:00:31 +0000
Files and hashes:         1: DvPO_8Qn3_vMKvAvnRsqhhaxSnU.roa (hash: 4BhsaS52wV1kOM+NkaivMtSQ7sfF7YLoC8dGjYe9BNc=)
                          2: ihSfdtOUQVHwreTeeDHT1Cy26N8.crl (hash: k1fdXPRJYXOIpyG63syXS9Bn7+G8xY0FxhimWNivCbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:9c:1e:0b:bf:91:64:42:7e:93:8e:43:d5:3f:21:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a149f76d3944151f0ade4de7831d3d42cb6e8df
        Validity
            Not Before: Feb 12 07:00:31 2024 GMT
            Not After : Feb 13 07:00:31 2024 GMT
        Subject: CN=ed8c623a000922f6dfdcacbffc6c28806b194035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:7f:c2:d8:ad:12:d9:4f:45:fc:97:64:51:
                    c9:ed:c9:94:dd:92:32:40:c1:77:27:e2:5d:8a:86:
                    98:e4:12:94:8b:a1:a4:8a:73:7e:47:3c:a7:19:54:
                    ce:8a:e2:16:e2:de:48:00:68:bf:92:42:19:8a:99:
                    4b:84:22:d9:cf:af:9f:9c:54:e3:be:c0:4f:a1:6d:
                    af:71:3a:58:d5:65:db:ee:64:ef:92:7c:14:d0:93:
                    df:12:56:dd:cc:b4:44:89:8d:37:ef:a3:40:b5:50:
                    ce:74:86:c3:f9:55:fe:4e:2c:f7:17:1a:b6:ef:b4:
                    35:68:7a:63:9e:6b:cf:f7:e0:a6:df:26:64:c6:88:
                    7e:bb:4a:6c:77:30:06:84:9d:c4:64:2d:ef:9e:96:
                    5f:d3:e1:19:b1:5f:34:74:3d:cb:a0:52:50:2d:6b:
                    82:59:1f:5e:0b:3f:10:90:87:63:0f:87:4a:ef:15:
                    df:e3:2d:64:7e:90:cb:61:1d:c3:f4:6e:d6:45:41:
                    a1:df:07:59:3a:7d:8d:7d:f2:8c:51:10:04:ef:b5:
                    10:4c:f8:77:9f:8e:44:4d:e4:51:b8:37:e4:1d:cb:
                    dd:b2:82:39:09:36:ec:40:9f:3c:23:bf:13:45:d8:
                    a1:61:37:2e:ed:ff:37:97:9a:5b:ea:0d:9c:ce:cb:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:62:3A:00:09:22:F6:DF:DC:AC:BF:FC:6C:28:80:6B:19:40:35
            X509v3 Authority Key Identifier:
                keyid:8A:14:9F:76:D3:94:41:51:F0:AD:E4:DE:78:31:D3:D4:2C:B6:E8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihSfdtOUQVHwreTeeDHT1Cy26N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:91:fa:2d:b9:1e:7a:41:bc:a4:68:ab:da:ed:6c:9f:b2:b7:
         51:4b:10:bb:9d:65:86:57:2e:22:a3:1f:ff:99:de:b4:de:c7:
         a8:39:d3:15:93:28:a0:f8:1f:bd:e0:85:4c:57:5d:7f:1e:86:
         b0:6a:27:d1:8c:73:25:4a:3d:5d:9a:74:d3:95:84:9e:6c:80:
         e1:4f:9b:13:4f:77:db:be:a8:46:b9:af:66:8e:58:ee:9d:03:
         9a:15:32:44:e1:ac:4b:9a:1b:71:28:84:8f:8a:8e:e9:32:9b:
         e9:66:8a:c5:a5:77:d3:7f:c1:af:19:48:f5:53:72:88:ee:db:
         eb:e0:6c:58:bb:9e:c8:cd:85:a3:34:1f:0e:bf:de:46:ab:81:
         ae:70:34:44:b5:f5:8c:c6:05:8a:16:c3:19:49:96:12:a0:59:
         e5:71:22:e7:39:22:dc:78:f5:f3:9e:43:1d:f5:9b:3e:d1:81:
         73:e9:b2:e9:f3:1e:98:d6:26:32:f3:87:64:58:a7:c0:9a:58:
         ae:cb:41:8a:b7:bf:b9:b1:ec:a2:e1:c6:6e:8f:7b:73:80:47:
         a6:e1:f1:d3:89:67:2d:74:ae:2b:bf:23:3a:1d:a0:b0:bc:84:
         bd:91:f9:81:50:2b:73:e4:67:64:0e:f2:07:98:e7:c6:79:13:
         ac:43:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:07 2024 by rpki-client on console-fra.rpki-client.org