Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
File:                     4742E76772F118A935D69FD40F69858085C80999.mft (raw, json)
Hash identifier:          mlXS8Gu0dshMu8hF+glOFOLXmtyJMUe7RSDNi4D7cMk=
Subject key identifier:   D0:B7:68:12:42:39:76:54:5C:38:4C:58:45:24:B2:AC:26:84:B8:B1
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Certificate issuer:       /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial:       3F5AF1795A137A3407D6C0D70C121D829E05C19D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
Manifest number:          0175
Signing time:             Sun 13 Apr 2025 12:07:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:23:24 +0000
Files and hashes:         1: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: yO0x/a64kYJlNNNJOm+HqNkcrqWGG6QLAXSE+5hSO3U=)
                          2: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: D0ROwoTKCiO0SHKC02McjK2f9xdxhPqW80gKE+eCaEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5a:f1:79:5a:13:7a:34:07:d6:c0:d7:0c:12:1d:82:9e:05:c1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
        Validity
            Not Before: Apr 13 12:02:24 2025 GMT
            Not After : Apr 14 14:23:24 2025 GMT
        Subject: CN=D0B76812423976545C384C584524B2AC2684B8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:a8:e0:ae:fc:cd:76:1b:fe:e7:18:98:41:
                    27:bd:b2:d0:22:f3:1e:1c:78:cd:f6:a3:94:bf:33:
                    28:d5:67:f4:6e:42:bc:fc:7c:e7:f1:c6:90:6e:dd:
                    72:cf:89:f5:d1:b6:28:ca:6d:bd:bf:98:03:8a:12:
                    bb:af:ce:3c:f5:bf:89:97:cb:a9:d4:0a:13:36:a9:
                    26:00:8c:81:d0:ce:25:e3:d8:dd:d6:42:4a:0d:75:
                    ec:75:c0:44:3d:4c:3b:94:76:42:61:db:b9:23:f5:
                    39:66:72:39:94:29:c4:c0:17:80:33:0b:5d:00:62:
                    fb:a3:1f:75:71:d0:49:39:d9:f6:bb:f9:59:5f:9c:
                    e5:ea:fe:34:5a:a9:58:dc:d4:89:d6:e7:52:bf:7b:
                    e7:4e:ac:ae:13:00:1a:fd:f5:f5:d9:6b:7d:49:61:
                    d2:ef:cd:82:7b:23:35:1f:ed:13:8a:8e:ef:36:e2:
                    a4:6d:d6:fb:3b:58:98:ec:b5:49:48:3a:47:cf:28:
                    62:d0:26:b9:3d:cb:1a:5a:20:f7:22:20:03:88:a7:
                    6c:f6:11:04:b9:c4:5b:8d:a5:d1:4e:74:0d:d0:06:
                    d9:1a:d9:05:38:83:15:09:30:21:91:7d:20:aa:8f:
                    87:c8:5a:fd:9a:d9:3b:22:fa:2e:15:76:85:e2:24:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:68:12:42:39:76:54:5C:38:4C:58:45:24:B2:AC:26:84:B8:B1
            X509v3 Authority Key Identifier:
                keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:9f:bc:19:bb:44:be:d3:d0:0b:f0:5d:db:7a:bd:22:11:
         34:99:64:12:34:86:ef:f4:41:f1:a7:92:31:0a:85:f6:57:13:
         0c:6a:55:93:1b:e0:42:38:93:33:87:d8:eb:74:fc:f2:2f:02:
         51:22:d9:42:1d:f7:27:88:84:8e:6e:df:84:68:db:11:33:a1:
         2f:e3:7a:a9:ac:71:b3:22:14:c0:2b:f0:3a:6e:42:9a:7a:7d:
         ca:24:b8:0c:ba:ef:ee:44:27:35:d4:26:14:f1:62:a6:26:6e:
         5e:66:3b:5a:e7:ba:cf:b4:c2:9a:f0:a3:44:ed:0b:0d:59:4f:
         bd:2e:8b:dc:9c:78:0c:58:d6:14:18:ba:53:9e:c7:1f:20:9c:
         0f:2e:cf:e4:53:23:ab:29:b7:0d:ae:0a:ec:21:6c:32:8d:bc:
         d0:bd:77:ea:6b:e1:92:3e:87:6a:c1:4d:51:40:47:5a:65:b1:
         b9:4e:cd:50:4c:e5:69:99:38:e7:8d:45:15:99:32:c0:c2:d0:
         e7:e5:eb:75:1a:74:d4:31:2a:06:6b:d9:e6:bc:ab:d0:d1:f7:
         cb:15:73:01:3d:86:cb:9d:29:4b:e7:8f:cf:57:dc:9e:8a:f5:
         66:63:c0:f2:22:41:19:2b:f1:02:1d:35:ab:51:ee:42:64:bd:
         7d:e7:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----