Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
File:                     5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json)
Hash identifier:          h6xjo8iJaAi4eMmPkUO/rIRwRXS9YiMdWaR/H6z/eJs=
Subject key identifier:   2D:A9:60:70:56:37:76:77:8E:0B:E3:0D:B2:40:8C:62:E1:0C:2A:B4
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Certificate issuer:       /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial:       43F8847E5E0CB00880B6B80CD1D7F6642AE8903F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
Manifest number:          0175
Signing time:             Sun 13 Apr 2025 03:54:02 +0000
Manifest this update:     Sun 13 Apr 2025 03:49:00 +0000
Manifest next update:     Mon 14 Apr 2025 06:29:00 +0000
Files and hashes:         1: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: tMVO+Hc1tj5AW5StgOS15iIM9wSkQFoop+twU5PxB1Q=)
                          2: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: X1OZZS23Q4Nfhtk5bSrhW6qInzRXAlP/tPtmnx95SiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:84:7e:5e:0c:b0:08:80:b6:b8:0c:d1:d7:f6:64:2a:e8:90:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
        Validity
            Not Before: Apr 13 03:49:00 2025 GMT
            Not After : Apr 14 06:29:00 2025 GMT
        Subject: CN=2DA96070563776778E0BE30DB2408C62E10C2AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:01:25:50:f7:80:85:ef:1a:04:12:b3:79:
                    19:41:0a:4c:63:b4:69:e0:82:a8:75:1b:da:02:30:
                    fe:0a:13:35:bb:7e:4d:69:3c:f7:a6:95:8d:9e:04:
                    1a:09:d5:3d:ea:83:bd:00:3a:e8:cf:4b:51:ac:b3:
                    fc:6b:fc:4a:73:96:d6:32:db:4a:e7:58:fc:b9:05:
                    73:01:c7:1d:49:3b:b1:09:b6:4b:3c:c1:0a:a9:97:
                    99:6c:7d:11:84:03:00:79:9a:29:2a:45:b1:ab:1b:
                    cf:8f:6a:6b:fe:75:f5:74:7e:36:57:e9:10:3b:4c:
                    48:ea:5b:3c:7a:55:77:eb:01:d3:15:54:f2:89:3d:
                    d6:a5:c5:9f:a2:22:3e:12:c7:8e:70:b1:af:a8:c3:
                    6d:22:c4:19:77:a6:78:5c:da:d3:b8:06:3a:c0:29:
                    4d:5a:6d:b5:f0:e1:bf:02:31:68:63:67:19:3b:47:
                    2d:21:29:76:83:0d:85:5c:09:af:7f:8d:57:be:c9:
                    f1:4d:e2:67:83:7f:34:90:3b:eb:a8:b3:ab:01:78:
                    75:fb:13:ae:8a:3e:71:15:39:88:12:61:38:f8:c5:
                    bf:cd:3c:c5:62:30:3e:af:8c:86:7a:13:16:d2:ee:
                    ae:32:4b:66:43:66:f6:55:0d:d0:4b:1b:57:7b:b1:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:60:70:56:37:76:77:8E:0B:E3:0D:B2:40:8C:62:E1:0C:2A:B4
            X509v3 Authority Key Identifier:
                keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:06:e3:67:ed:1f:bb:c4:b0:a6:a2:60:6e:2c:63:f9:43:21:
         07:14:cd:1e:77:cd:3d:9d:77:93:e1:58:43:c2:c0:48:c2:6b:
         68:af:47:90:e9:d2:9e:d3:b7:2d:06:4b:4c:69:e4:84:1a:5d:
         99:1a:a0:a0:02:51:a1:d2:2c:ba:5c:83:b4:a6:6d:1e:77:d0:
         52:e9:01:d7:c5:e5:3d:cb:1e:0a:b3:08:61:52:6a:c9:c1:f7:
         05:1f:61:16:74:cc:ca:d0:f5:0b:d2:7f:d6:8c:06:89:29:ff:
         8c:c9:f0:b6:8f:c4:ef:b2:b0:60:6a:b2:6d:ca:98:99:cc:f5:
         60:a7:5f:e1:a4:9c:e2:c3:69:7b:bb:6f:33:36:ae:9e:05:23:
         ac:8f:3f:ff:fb:c3:d7:00:54:11:97:fd:b7:60:3d:09:b2:4a:
         7e:95:e6:8d:b1:3b:21:02:55:19:c8:2e:9a:bc:81:c8:eb:5a:
         2b:c8:cd:a2:fa:81:6a:b7:19:9b:67:e0:fc:8b:55:f2:6d:20:
         26:fa:55:70:d9:73:73:54:6d:fd:0e:42:ef:3f:05:d8:b6:ef:
         cf:ff:5a:7b:7e:32:8e:a0:5a:f2:99:f5:12:69:4a:3e:a3:17:
         61:fd:29:de:09:71:32:ad:57:5b:05:71:0f:d3:38:2d:d1:8d:
         d7:ae:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net