Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.mft
File:                     IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.mft (raw, json)
Hash identifier:          L9OoRHy8RYhB+7wnEEGmUyl7lZ81epAzXqPfGv9gCxg=
Subject key identifier:   D0:29:1C:88:15:99:B9:59:84:79:B8:4E:A1:1A:06:B1:38:33:88:FA
Authority key identifier: 21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
Certificate issuer:       /CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Certificate serial:       018DC92EE7E6A666DD7F47068FBFC8355FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.mft
Manifest number:          1022
Signing time:             Wed 21 Feb 2024 01:01:50 +0000
Manifest this update:     Wed 21 Feb 2024 01:01:50 +0000
Manifest next update:     Thu 22 Feb 2024 01:01:50 +0000
Files and hashes:         1: IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.crl (hash: ZB/q+YpjbjRHY7OPb92a5CxzJfGWLXgugce3dK4qBuY=)
                          2: IhHK9GmAii_ZHID2yga4XbZjpog.roa (hash: 6AodPrQEz2c6+rGSUyiPHKtMGLdv1XKJT5u7O0A+EPI=)
                          3: gaUa-y4DFYckRgTGUaq-T5DqUUs.roa (hash: /Gkh3DAabGQmJMgcSYPUUkVs1uMYBxlvD0uyhg5Dw9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c9:2e:e7:e6:a6:66:dd:7f:47:06:8f:bf:c8:35:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213f21d1551d2775e7b064382b8122ad4fc585f7
        Validity
            Not Before: Feb 21 01:01:50 2024 GMT
            Not After : Feb 22 01:01:50 2024 GMT
        Subject: CN=d0291c881599b9598479b84ea11a06b1383388fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:57:89:77:a7:63:71:00:58:73:11:18:17:b0:
                    a0:f9:88:55:56:32:8d:f0:0f:38:81:e8:a4:cc:39:
                    96:e1:db:36:2a:28:db:da:bd:f8:1a:23:e3:e2:a1:
                    07:cc:d2:c5:bf:12:c0:8c:bd:37:13:0c:96:f6:9a:
                    18:6e:2e:44:bb:3a:1c:db:05:85:2e:dc:a3:6c:54:
                    be:73:b1:7f:1d:7a:9c:58:83:88:e4:b9:dd:da:bd:
                    28:08:4f:c9:34:6f:2d:d3:ae:e8:c8:8b:13:fb:e7:
                    eb:7d:d9:97:02:69:b8:1b:7d:40:6f:b9:24:e1:8b:
                    7a:af:10:ab:48:61:e3:96:89:c8:7a:0b:57:6e:ec:
                    94:d2:f3:6f:35:c4:59:37:44:d9:4d:51:6c:f5:d2:
                    73:e7:82:36:66:9a:d1:99:b4:c7:fc:3b:d2:b7:8a:
                    cd:e5:7e:bc:8e:91:51:56:c4:62:bf:42:e7:d8:a0:
                    6b:d5:86:34:da:52:c3:56:b6:0c:dc:b4:43:f1:97:
                    a6:07:bc:9f:a6:04:8e:34:95:a6:18:28:50:70:f8:
                    77:52:51:2e:f6:ad:51:40:8f:4e:1c:e8:c4:84:cd:
                    7a:ab:cf:2c:7e:32:8b:ba:db:f5:1a:dd:1a:20:a0:
                    b3:31:7e:4a:10:3b:cc:9f:10:d5:89:43:80:c7:63:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:29:1C:88:15:99:B9:59:84:79:B8:4E:A1:1A:06:B1:38:33:88:FA
            X509v3 Authority Key Identifier:
                keyid:21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:42:1e:e9:69:fe:93:b3:67:e5:d1:32:82:0a:ac:5d:81:
         94:75:d3:29:26:f7:ff:47:53:97:82:a0:2a:f7:5c:8a:db:a0:
         d2:dc:d5:c7:41:f9:74:3b:3c:ca:2b:a6:c6:0f:48:71:ff:f3:
         e8:de:e0:58:29:b1:55:08:7f:e6:71:cf:1f:77:2e:a9:3d:bd:
         15:29:4a:c3:0b:4a:3f:ec:0d:71:71:8b:6c:37:ac:3f:76:b5:
         e6:84:43:66:e1:0b:b8:da:e1:48:ea:39:15:c2:f9:6d:f9:a9:
         f3:47:85:17:b0:08:c2:af:b2:de:03:07:69:d2:9d:e4:56:2f:
         59:a1:55:8f:28:d8:0e:10:1d:07:f6:21:97:16:6f:d7:a9:86:
         57:24:20:4b:75:8e:6b:45:81:08:a6:12:6b:41:c5:f3:e2:d6:
         33:4c:70:de:b6:59:a0:0b:26:b1:7f:c2:a0:c3:bd:72:62:3d:
         ac:68:c9:bf:d4:f9:8a:9d:46:ac:5f:bc:3b:79:ac:28:24:fd:
         4b:f0:d2:69:ae:34:e6:c4:4e:31:34:58:69:8b:dd:ea:52:74:
         2f:2b:ef:19:3f:e7:8e:e0:c1:80:c6:89:e3:04:e6:88:6a:34:
         7d:f7:e6:55:ee:08:ca:17:a0:05:bb:7e:9a:7c:6a:a6:6e:8a:
         c4:08:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 13:56:39 2024 by rpki-client on console-fra.rpki-client.org