Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
File:                     BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json)
Hash identifier:          8qU4thACui5+0jBrrTYuMlPG/rGHXZdkctGqKB12Hds=
Subject key identifier:   06:93:E7:81:41:9A:DC:B4:5F:39:C8:FE:C5:A7:4E:3F:83:17:26:0C
Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Certificate issuer:       /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Certificate serial:       20CC25C7FF72F6DF09D4A32EDBD82B9A5BFDB1E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
Manifest number:          0173
Signing time:             Sun 13 Apr 2025 08:16:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:11:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:12:34 +0000
Files and hashes:         1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MohLLX8Sy/zW2nWkcZiofRJsITCqYsBthAW1Nb7L2Hw=)
                          2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: xIlVqQKMEIqvlm0C/len9nQGfdtLq7jGJTLqCfoyBz0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cc:25:c7:ff:72:f6:df:09:d4:a3:2e:db:d8:2b:9a:5b:fd:b1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
        Validity
            Not Before: Apr 13 08:11:34 2025 GMT
            Not After : Apr 14 12:12:34 2025 GMT
        Subject: CN=0693E781419ADCB45F39C8FEC5A74E3F8317260C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:de:68:86:e6:38:5f:c3:c8:01:91:b7:79:
                    79:31:35:17:b3:e6:a6:a7:d7:fc:ed:cb:6b:79:0c:
                    63:de:48:ae:ce:e4:e9:5b:92:bc:40:db:85:fb:c1:
                    9e:ba:5b:54:fd:60:cd:ed:72:dc:5d:c9:c4:9d:50:
                    30:67:f7:39:6f:45:b6:be:1f:6f:a1:99:7f:90:ae:
                    f2:8d:d2:3e:25:a8:c0:d5:ec:51:2f:20:dd:e1:26:
                    e4:5d:45:cd:2e:c1:21:3c:5b:74:b7:c6:4c:98:fd:
                    d5:4b:2b:4b:e2:53:70:be:75:2b:59:33:2a:9b:69:
                    17:42:6a:5b:43:41:c0:e7:25:eb:b0:fa:f0:09:d4:
                    19:c0:bf:42:ae:1d:59:02:eb:48:07:17:6f:e6:83:
                    ca:ef:e7:4f:e1:68:d5:32:3d:47:ec:03:1d:7b:90:
                    c1:67:4d:7c:62:1a:6a:19:85:da:3e:0f:fc:3a:4b:
                    7b:4b:19:c4:1d:6c:19:50:92:e4:67:58:d1:13:ba:
                    77:56:8c:1d:b8:6a:e9:e0:e9:e2:1b:b0:63:f2:40:
                    e2:36:4d:5e:0b:bc:06:dc:31:b3:eb:e2:00:a0:c6:
                    de:91:39:dd:c7:35:ee:31:b4:62:94:c8:bb:83:5b:
                    3e:f6:ef:d4:24:5e:c1:c2:48:71:5c:d6:b4:b8:30:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:E7:81:41:9A:DC:B4:5F:39:C8:FE:C5:A7:4E:3F:83:17:26:0C
            X509v3 Authority Key Identifier:
                keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:59:bc:19:bd:05:63:a9:7a:aa:73:a4:07:5a:09:e1:c2:
         f8:4a:a7:9a:a6:76:82:a7:b6:14:fb:29:ee:70:fd:87:04:75:
         6c:fc:18:6b:28:ff:c4:cb:0a:ba:51:ae:17:19:be:49:12:be:
         19:56:26:b5:ce:db:8d:f0:a6:74:c8:ab:84:78:37:fc:d1:41:
         9d:ff:87:15:4d:43:b7:2f:26:38:c7:be:68:fe:c7:db:f8:33:
         d1:ed:74:18:18:a4:cd:ce:bb:2d:3c:27:d9:b3:af:f4:86:9e:
         63:c2:5b:93:be:e5:d4:91:25:17:21:ce:23:28:6c:1f:ba:0d:
         93:db:4d:5f:d8:85:80:d3:a9:ee:3e:0c:bb:25:93:02:4d:e4:
         2e:4d:0b:a8:61:d6:91:0e:08:14:86:09:7a:68:45:65:a1:07:
         0e:71:dd:a7:83:2d:59:f4:2c:fb:97:43:68:75:bc:73:75:9f:
         0f:7e:12:59:17:9b:19:c0:e9:3f:3c:96:16:d2:0d:77:cb:db:
         f3:8c:8f:65:63:57:98:96:0a:97:c5:20:d7:89:a0:15:02:50:
         df:b1:a9:61:0d:90:b5:ba:9b:fa:17:8d:15:ef:cb:9a:3c:25:
         77:e7:9e:00:bf:32:42:94:1e:e8:ac:24:6b:19:36:fc:df:7e:
         48:b9:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----