Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File:                     B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier:          EljraeZGxHkAVYSKk/QeXr2duclWwIV4dvh8WhkTZbc=
Subject key identifier:   C1:05:4C:5B:92:65:E1:29:D0:C7:6A:BC:8F:EE:8D:84:0E:53:10:1C
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer:       /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial:       037EBC04DBFD0F2F9EEC3C9A5EA588EE1F407E11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number:          0176
Signing time:             Sun 13 Apr 2025 10:25:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:20:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:25:17 +0000
Files and hashes:         1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: k7Hyx8Fcblz8sMPWWUn1xlW5kmshJVmyoexgVBI8Si4=)
                          2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: k/wmSIsicW6bIEYBgom+wqdJSOY7iu6zbHSV4HudHUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7e:bc:04:db:fd:0f:2f:9e:ec:3c:9a:5e:a5:88:ee:1f:40:7e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
        Validity
            Not Before: Apr 13 10:20:17 2025 GMT
            Not After : Apr 14 10:25:17 2025 GMT
        Subject: CN=C1054C5B9265E129D0C76ABC8FEE8D840E53101C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:28:44:de:4f:54:48:b9:74:f3:20:c6:40:
                    b2:66:e2:6a:78:4d:e4:3d:55:9a:36:17:4e:65:45:
                    9d:e6:38:b6:31:f6:d0:bd:e1:55:8f:c9:fc:9a:52:
                    27:39:d9:9c:ba:c4:88:e0:53:05:e3:b0:cc:11:f1:
                    8c:f4:5b:cd:76:a6:f4:b6:cc:70:5c:a2:a7:42:82:
                    42:51:63:af:a9:6e:68:67:ce:15:37:64:75:ae:9e:
                    36:dc:c0:73:d9:85:7e:11:58:2b:37:b1:8b:1f:7d:
                    ee:fc:d4:9a:5b:f2:9e:71:20:2f:4b:1b:63:ba:98:
                    d9:6d:47:7a:f1:6a:a9:8d:89:3f:c0:41:92:04:23:
                    68:69:d5:f5:a8:fa:2b:cd:99:52:d9:09:09:b5:b1:
                    39:b8:36:c1:bc:39:02:f9:e0:e9:06:6d:19:f3:0b:
                    26:17:de:41:52:d4:47:68:7b:b3:b7:33:2d:fe:b6:
                    52:78:d8:e8:5b:45:25:f3:06:18:3c:85:cf:f9:71:
                    52:bd:28:c5:59:e3:31:fb:34:1a:33:6a:48:50:c0:
                    d9:0f:81:24:f2:a0:9a:ab:5a:fb:fb:d5:8d:0b:97:
                    b2:47:4d:2e:19:81:37:a6:b8:dc:ce:59:aa:c2:bb:
                    78:31:c4:34:0c:6f:ca:05:f3:82:61:41:44:0d:87:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:05:4C:5B:92:65:E1:29:D0:C7:6A:BC:8F:EE:8D:84:0E:53:10:1C
            X509v3 Authority Key Identifier:
                keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:84:d7:d4:bb:a7:2b:ae:17:eb:ad:20:43:8c:1c:18:c0:55:
         de:16:2e:01:21:13:90:80:1a:b1:b4:df:83:49:21:93:16:e4:
         06:50:1b:79:12:e4:ca:70:cd:78:b6:9a:45:40:29:41:f8:ee:
         7a:9c:83:33:5a:c8:a9:1a:e5:e2:15:25:d9:05:e7:d0:fb:1c:
         2c:be:69:f0:21:2d:ae:b4:d5:61:c4:ca:77:53:6d:fd:43:5f:
         c6:f5:4e:9d:88:ac:cb:50:bf:9e:59:e3:0b:61:3a:f5:8d:25:
         3f:e2:85:b1:b1:4e:24:66:d1:3e:9e:04:31:d0:5f:50:03:61:
         84:79:8c:58:2d:9a:8c:60:47:ce:00:c9:32:fb:10:14:c9:2b:
         14:a1:f4:b0:36:2b:c5:4a:e4:71:91:d4:60:06:e3:4c:69:a0:
         5d:3f:85:c6:20:39:ff:64:5a:de:6f:86:cc:6d:fe:a9:26:05:
         0c:f8:ea:80:53:aa:10:6c:0e:45:c7:17:40:5f:d1:f2:9b:a3:
         61:58:38:13:43:43:e0:94:95:6a:64:fa:1b:7a:8e:00:2d:8e:
         f2:76:32:8b:2f:c8:16:74:e3:53:81:23:24:98:87:32:90:b7:
         47:0c:56:7f:20:e2:0c:74:a2:0e:00:ef:62:10:01:c9:3e:cb:
         8d:89:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----