Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/11/3C67125FC43A7E29CF387F561C593707A441F7BB.mft
File:                     3C67125FC43A7E29CF387F561C593707A441F7BB.mft (raw, json)
Hash identifier:          iPI0fdHJpcZw2Cm/vuEnj0cc+7bgLK77UV6GVgCRe1I=
Subject key identifier:   BF:33:13:4E:81:24:26:6A:8F:4D:ED:68:A8:39:94:70:94:AE:8F:21
Authority key identifier: 3C:67:12:5F:C4:3A:7E:29:CF:38:7F:56:1C:59:37:07:A4:41:F7:BB
Certificate issuer:       /CN=3c67125fc43a7e29cf387f561c593707a441f7bb
Certificate serial:       42E8D69D590A263369E18CD13382532B831BAB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGcSX8Q6finPOH9WHFk3B6RB97s.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11/3C67125FC43A7E29CF387F561C593707A441F7BB.mft
Manifest number:          81
Signing time:             Wed 07 Dec 2022 09:23:04 +0000
Manifest this update:     Wed 07 Dec 2022 09:18:04 +0000
Manifest next update:     Thu 08 Dec 2022 09:29:04 +0000
Files and hashes:         1: 3C67125FC43A7E29CF387F561C593707A441F7BB.crl (hash: fV5cmopdA+bAyLsZuYTZ1hamJZMknZk5HH8nSrCInOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:d6:9d:59:0a:26:33:69:e1:8c:d1:33:82:53:2b:83:1b:ab:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c67125fc43a7e29cf387f561c593707a441f7bb
        Validity
            Not Before: Dec  7 09:18:04 2022 GMT
            Not After : Dec  8 09:29:04 2022 GMT
        Subject: CN=BF33134E8124266A8F4DED68A839947094AE8F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:94:40:3e:89:38:a4:b1:5a:e2:50:89:6f:
                    3c:d3:a7:a7:46:ee:0e:b7:16:5d:aa:1b:66:eb:86:
                    a3:fa:74:c5:6a:c6:ca:f7:33:fc:41:1a:bb:77:51:
                    86:3b:30:1a:3a:5b:ee:02:0e:d8:02:4a:3d:0a:1e:
                    20:f4:ff:71:5c:d6:69:21:68:f4:7e:7a:82:57:6b:
                    6d:8b:a5:1f:a5:ae:1f:66:69:18:88:3a:59:a0:32:
                    b2:7d:50:80:c0:72:fc:69:14:0c:e8:61:08:bb:02:
                    52:bb:59:a8:8e:1e:af:ea:16:02:18:7d:60:b3:c5:
                    0a:91:a5:31:84:e7:e8:7d:b7:1c:18:b0:75:5d:0e:
                    2d:c9:a9:e0:61:38:1b:df:9a:5b:62:fc:b5:12:e9:
                    fb:f5:38:1d:01:12:c2:d7:2b:17:b2:e3:d7:f5:1b:
                    be:5b:f2:80:56:03:55:da:3e:31:9b:9d:f2:21:69:
                    98:2f:3c:a8:cc:48:0e:a4:6a:4e:3b:82:ba:a5:6f:
                    97:4f:e1:86:7c:95:0c:8e:44:63:c4:ac:d7:8b:22:
                    17:ac:c3:a6:b0:eb:fd:a7:66:31:2b:5e:ef:d0:b7:
                    63:da:5c:f5:8a:fb:ef:a7:fe:dd:f5:fd:b6:34:d2:
                    df:3f:41:91:ec:62:48:de:b2:e3:76:54:09:3a:d9:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:33:13:4E:81:24:26:6A:8F:4D:ED:68:A8:39:94:70:94:AE:8F:21
            X509v3 Authority Key Identifier:
                keyid:3C:67:12:5F:C4:3A:7E:29:CF:38:7F:56:1C:59:37:07:A4:41:F7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11/3C67125FC43A7E29CF387F561C593707A441F7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGcSX8Q6finPOH9WHFk3B6RB97s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11/3C67125FC43A7E29CF387F561C593707A441F7BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6d:e8:d3:83:92:82:35:6a:9a:ab:78:98:42:43:ee:29:d7:
         56:19:01:08:09:d4:e9:f7:81:b8:72:42:5c:80:d1:cf:01:fb:
         08:e1:15:5f:1f:09:84:bc:38:d0:6e:1e:c2:17:90:39:36:b6:
         f1:39:04:b0:39:07:4a:3d:ce:36:37:8c:31:67:97:97:61:9f:
         13:ef:d3:89:34:fa:1e:45:88:08:86:eb:08:65:00:f7:d6:72:
         03:c1:5d:f3:ac:70:13:7c:ea:54:10:52:dd:d1:a8:72:be:90:
         6f:e8:b2:f6:07:c5:d2:68:a3:ea:00:71:ab:e2:eb:42:ec:7f:
         e7:df:51:38:10:6e:82:82:a2:04:85:2e:4d:d0:7a:fd:56:35:
         52:a9:78:12:3e:ed:9d:4a:0d:ad:76:55:14:2c:8c:c4:f5:16:
         1f:3b:e2:d1:ee:71:28:fa:65:c3:7f:97:81:8d:e5:b4:f0:7b:
         79:22:3d:63:e8:e1:96:a6:fa:40:fa:9f:f3:49:4d:31:35:05:
         61:23:b8:86:90:32:d8:db:f3:ee:9a:21:c7:13:61:26:af:93:
         74:10:a3:c4:fc:96:03:7f:33:4b:fa:47:d5:56:e5:fe:a5:1d:
         36:3a:0c:0d:9f:94:7c:5e:50:c8:b5:d8:7e:94:8e:27:4a:02:
         43:7f:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----