Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File:                     B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier:          mnGEyn+JPkRl4ddMzdIWEYd8KrMHRflilLyAzqSARhA=
Subject key identifier:   C1:73:D6:88:6B:09:FC:6C:4A:E1:13:1A:24:48:5F:F5:99:2F:82:C9
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer:       /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial:       4A1A3A9BFE9159AD967D7CA4FCB1E0F83727F3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number:          0173
Signing time:             Sun 13 Apr 2025 11:27:54 +0000
Manifest this update:     Sun 13 Apr 2025 11:22:52 +0000
Manifest next update:     Mon 14 Apr 2025 11:27:52 +0000
Files and hashes:         1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: zhHMUTaswRR1EJyNBEIVFf72Q2dycoAtDvT/X6hJ/Zg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1a:3a:9b:fe:91:59:ad:96:7d:7c:a4:fc:b1:e0:f8:37:27:f3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Validity
            Not Before: Apr 13 11:22:52 2025 GMT
            Not After : Apr 14 11:27:52 2025 GMT
        Subject: CN=C173D6886B09FC6C4AE1131A24485FF5992F82C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:5a:20:9c:61:6e:fa:5e:8e:37:ba:03:98:
                    8d:0f:a9:80:c3:cd:d0:74:e9:a8:a4:26:da:13:f0:
                    b2:c2:37:70:15:80:36:73:14:50:a7:31:d4:84:0b:
                    39:50:2f:8c:76:7f:75:29:63:3e:d5:d2:25:72:1a:
                    27:cb:fd:58:60:f2:3c:f9:b1:96:32:bf:5e:8a:71:
                    f8:37:d8:d0:ab:df:19:30:7a:e2:fb:18:3b:e8:cf:
                    b0:6a:b2:a5:65:e6:d3:bf:00:ae:8e:0d:0e:df:13:
                    02:93:15:4e:6a:b7:df:e6:74:e8:70:0e:c0:4b:0d:
                    62:f9:89:00:b0:08:10:60:29:78:14:56:e2:2c:67:
                    8b:f5:19:af:36:75:e4:74:6a:01:88:d1:a0:21:11:
                    8d:7f:f0:0d:ae:06:65:3a:2e:e9:0d:b4:e9:d8:00:
                    b1:2d:9c:96:9a:58:f9:9e:83:5c:96:44:b3:0a:22:
                    df:d7:74:25:a1:29:29:00:d0:ce:31:87:76:7d:9e:
                    ff:3c:2a:0b:5e:25:77:42:9f:bc:c2:ce:8a:61:7c:
                    01:ac:74:42:40:68:3f:b8:d4:b3:a1:6c:29:a2:86:
                    19:a8:7b:99:9d:88:e2:7a:60:d0:43:64:d7:98:b2:
                    7e:f2:92:a3:55:60:f0:c6:50:7f:df:a7:fe:a1:6e:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:73:D6:88:6B:09:FC:6C:4A:E1:13:1A:24:48:5F:F5:99:2F:82:C9
            X509v3 Authority Key Identifier:
                keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4e:64:22:7e:25:0c:d3:9c:39:3c:20:7c:6c:34:11:4b:03:
         a0:77:25:b1:fc:33:ca:bb:c9:50:69:42:eb:34:c7:a8:b2:4e:
         cb:7c:50:8c:5c:d4:9f:cb:bc:ae:d0:0c:34:9b:7e:9e:c2:cb:
         cd:ca:cb:b4:7e:a3:7b:aa:c9:92:be:20:cb:19:ae:9b:e7:8c:
         8b:fd:31:20:ec:04:e5:f0:1c:d5:da:90:33:66:db:99:10:8b:
         d0:d3:a5:21:4b:0f:89:78:23:1d:4d:08:76:5e:b0:3e:48:e8:
         f8:dc:bf:98:fc:de:52:b8:86:39:db:53:b7:be:c4:0a:2f:9f:
         b9:69:fa:71:45:84:10:1a:f0:81:52:56:f1:8f:c0:52:e1:76:
         48:45:7e:3c:7f:60:6f:8a:8d:cf:b6:0a:a5:0e:9a:fb:8a:30:
         16:06:27:79:5c:18:92:af:48:4e:6f:c7:9a:1a:e1:39:8f:e6:
         2c:98:d5:1c:e7:a7:34:6a:90:e5:74:62:e1:02:d3:98:ea:b6:
         3a:6d:fa:2d:84:ba:a8:85:e8:2e:84:41:74:83:16:07:59:0f:
         c3:ae:20:8d:4a:fe:02:f3:0b:b6:45:1a:4b:3b:2d:5a:26:dd:
         2c:c7:24:34:34:3b:12:30:0c:aa:ca:26:c7:e0:fd:18:65:e4:
         d5:2f:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----