Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
File:                     1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json)
Hash identifier:          Ogev6CiJT8z0g33Uyh2k8dUrK+rZeaCSMnMEqERBAG0=
Subject key identifier:   D5:41:BA:E9:AB:8D:D0:71:BD:40:11:6B:6B:12:09:C7:A5:8A:FE:1F
Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Certificate issuer:       /CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Certificate serial:       0CFADEE2B9D5D26E355535C7E8BC31D9BEEEF82B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
Manifest number:          0175
Signing time:             Sun 13 Apr 2025 14:22:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:17:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:37:04 +0000
Files and hashes:         1: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: 3DuIOWLJO8NrLMIsuHapBMIFfNv6pqKViDwoNolMhc0=)
                          2: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: gzLtzNKulRBUHeQJku2DH6vsAlj8OL+KDnvLoOteTsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fa:de:e2:b9:d5:d2:6e:35:55:35:c7:e8:bc:31:d9:be:ee:f8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
        Validity
            Not Before: Apr 13 14:17:04 2025 GMT
            Not After : Apr 14 14:37:04 2025 GMT
        Subject: CN=D541BAE9AB8DD071BD40116B6B1209C7A58AFE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:e6:77:8b:27:c6:3b:53:cf:df:44:19:72:
                    5b:1e:c2:db:a2:02:bf:2c:64:cf:a7:9c:ce:e7:5c:
                    f0:22:d5:d9:4b:28:46:94:d7:76:f1:48:03:b5:48:
                    1b:64:86:5f:b1:07:6b:09:28:b8:32:49:b0:c1:58:
                    75:46:4b:39:43:c9:31:6a:98:eb:00:ce:04:4c:0a:
                    96:e5:bf:7b:78:58:d9:a5:1e:53:f0:63:31:50:f5:
                    c0:fd:21:1d:83:ae:f9:aa:01:73:9f:97:89:0e:16:
                    40:ea:dc:15:58:d0:96:8a:98:65:d3:72:96:74:da:
                    c1:18:3d:78:e2:73:4b:ce:30:ba:98:89:95:e2:ec:
                    ba:7c:49:a8:50:a3:6b:26:22:ea:e9:08:53:19:4f:
                    57:df:de:12:ae:91:ea:b5:01:7f:bc:d0:45:5d:ea:
                    22:73:21:73:be:d3:c4:9d:eb:32:0a:b5:c6:fc:4d:
                    2d:ff:55:ca:f2:84:69:1a:3c:cd:39:0a:a4:29:d7:
                    f7:2a:e2:45:7f:ca:4b:69:c4:68:af:87:be:8e:b3:
                    37:df:c1:55:e6:07:1a:a6:09:99:69:4b:46:b2:47:
                    75:e0:6a:cf:f7:85:3c:1d:29:a9:15:08:ce:fd:d1:
                    d5:09:cf:5e:57:f7:8d:2c:1b:dc:06:94:c1:05:db:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:41:BA:E9:AB:8D:D0:71:BD:40:11:6B:6B:12:09:C7:A5:8A:FE:1F
            X509v3 Authority Key Identifier:
                keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:c1:e3:4c:dd:1f:2b:ef:84:7f:95:3b:9d:a9:88:f7:44:
         69:77:96:5c:44:f4:4c:cf:8a:2f:c2:6d:f7:52:17:6e:f6:51:
         53:44:33:e4:63:ac:34:be:bb:c4:60:4a:7f:15:62:df:81:7f:
         60:c7:8f:b1:f3:e5:14:6b:7c:b9:50:49:ae:38:e0:08:01:29:
         e6:2d:dd:ff:2e:6e:01:7c:5f:4b:ba:c7:80:e8:35:d6:e1:80:
         9e:2e:ad:ea:22:87:7d:68:87:59:ac:51:ed:d8:06:39:66:32:
         a2:92:a3:1d:46:d0:4e:54:97:35:5c:ff:57:86:9f:7b:aa:66:
         83:0d:6e:a5:6e:d3:05:78:bb:e9:c8:d6:96:ae:62:6f:31:42:
         51:5c:01:53:9a:42:41:cb:2b:bd:27:73:7b:6d:a8:7b:61:2e:
         3f:a2:59:a9:61:0b:ff:28:98:e6:88:82:07:2e:4b:e8:96:6a:
         cc:f3:7f:5e:cc:4c:c6:7a:b3:1e:86:bb:ae:9f:57:82:c4:5a:
         2a:30:47:71:04:de:4c:78:9c:00:5f:ea:34:cd:c2:af:56:92:
         02:96:33:1d:67:a1:f6:23:a0:13:66:28:94:03:08:17:cd:4b:
         1c:86:06:73:7d:a6:f6:d2:35:27:fc:e1:d9:6c:d9:13:54:f6:
         de:6a:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net