Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
File:                     09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json)
Hash identifier:          wylaNqC5Qc0Gh4TouhKOrwEnS6kulB8z/lgveCLSI14=
Subject key identifier:   F0:1E:47:0A:FF:09:38:24:07:2D:13:05:DF:F0:35:DF:C5:9E:1C:7A
Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
Certificate issuer:       /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Certificate serial:       2202A616D524FA33FB8746C53D715958F3540360
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
Manifest number:          4A
Signing time:             Sun 13 Apr 2025 04:38:51 +0000
Manifest this update:     Sun 13 Apr 2025 04:33:48 +0000
Manifest next update:     Mon 14 Apr 2025 04:40:48 +0000
Files and hashes:         1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: F/yAOy2NB6RhY7eVgRLmicqiUQg2Ri88QZtOYDkO40Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:02:a6:16:d5:24:fa:33:fb:87:46:c5:3d:71:59:58:f3:54:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
        Validity
            Not Before: Apr 13 04:33:48 2025 GMT
            Not After : Apr 14 04:40:48 2025 GMT
        Subject: CN=F01E470AFF093824072D1305DFF035DFC59E1C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:99:ab:85:93:21:af:08:96:ec:6d:4c:28:
                    33:e7:e1:01:e9:2a:cb:72:8f:8f:04:70:c1:de:65:
                    87:bf:67:4c:19:d3:34:ab:82:1a:92:ac:4f:2a:e1:
                    22:4a:4c:b8:cd:71:cb:2c:c9:24:51:94:56:32:51:
                    d6:5e:9c:2c:28:d8:70:a2:84:07:b2:7a:14:aa:ef:
                    bb:59:e4:39:f2:56:04:2d:e6:52:02:9f:dd:80:3b:
                    9e:e0:86:a4:76:f2:b6:6f:c0:24:97:a8:1b:ff:ec:
                    fd:15:e7:a7:4e:88:30:48:35:7f:31:c9:e6:24:af:
                    ee:41:24:54:48:cd:19:ed:0b:04:ad:aa:b8:52:f5:
                    fb:ac:54:9f:99:27:e3:d5:11:c3:10:e4:0f:14:71:
                    41:6d:9b:ca:fa:00:a0:6b:20:b1:c3:27:d7:ad:28:
                    c5:57:f5:cc:cd:f3:0e:d4:8a:77:df:2f:13:77:eb:
                    a1:9b:a8:97:b4:de:1a:76:3c:0c:5e:7b:8e:37:d7:
                    f5:a8:b9:d4:7f:62:2c:de:61:c4:e8:82:9b:42:0c:
                    b9:26:3c:f9:19:34:2e:3d:0b:de:23:fc:3c:60:b4:
                    37:91:36:18:b4:24:b3:47:a2:02:84:c4:a4:a0:47:
                    ab:77:21:86:f0:65:73:05:7d:d9:ae:af:2a:42:47:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:47:0A:FF:09:38:24:07:2D:13:05:DF:F0:35:DF:C5:9E:1C:7A
            X509v3 Authority Key Identifier:
                keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:b0:36:e8:69:9f:b1:c7:41:3d:9f:68:b6:5f:08:02:e6:
         a2:a0:0b:7e:2d:6d:34:da:2a:89:ea:9a:39:d8:ce:f2:94:e9:
         ad:3b:41:45:bc:10:03:79:b8:1b:80:69:41:d8:23:79:04:06:
         60:09:11:1a:35:be:88:96:90:75:e3:50:08:29:37:ee:c2:7c:
         4c:40:fd:ea:53:d3:fc:26:28:5b:e5:4e:14:be:8b:fc:63:03:
         4e:14:11:0b:f2:48:cd:31:9c:68:e9:c2:02:f4:7f:b1:a3:51:
         ac:8b:18:52:88:bb:46:95:4f:77:c4:60:a1:a9:a6:b0:79:3b:
         47:09:42:2c:4d:fd:ea:19:12:7a:2f:69:25:42:19:3d:f5:f8:
         1f:da:58:5c:55:3d:98:2b:ed:ef:4e:55:fc:4e:d7:76:e4:3f:
         41:7a:0a:4e:5a:cc:f1:9a:ce:1b:bc:66:cb:80:c9:6b:e9:3c:
         ab:65:fc:0a:39:6e:60:f3:73:fb:d9:5b:d0:58:93:e5:f7:62:
         51:51:28:90:0a:ae:0c:3d:cc:72:06:7b:85:01:f9:fb:0c:b3:
         a1:bf:6e:32:a1:61:04:65:b8:b0:4a:a7:72:c8:ba:48:b5:99:
         c0:08:86:9c:59:4b:05:34:ff:5d:96:84:32:21:a3:69:41:1b:
         92:53:15:c9
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUIgKmFtUk+jP7h0bFPXFZWPNUA2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz
REREMDgwRDAeFw0yNTA0MTMwNDMzNDhaFw0yNTA0MTQwNDQwNDhaMDMxMTAvBgNV
BAMTKEYwMUU0NzBBRkYwOTM4MjQwNzJEMTMwNURGRjAzNURGQzU5RTFDN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mpmrhZMhrwiW7G1MKDPn4QHp
Kstyj48EcMHeZYe/Z0wZ0zSrghqSrE8q4SJKTLjNccssySRRlFYyUdZenCwo2HCi
hAeyehSq77tZ5DnyVgQt5lICn92AO57ghqR28rZvwCSXqBv/7P0V56dOiDBINX8x
yeYkr+5BJFRIzRntCwStqrhS9fusVJ+ZJ+PVEcMQ5A8UcUFtm8r6AKBrILHDJ9et
KMVX9czN8w7UinffLxN366GbqJe03hp2PAxee4431/WoudR/YizeYcTogptCDLkm
PPkZNC49C94j/DxgtDeRNhi0JLNHogKExKSgR6t3IYbwZXMFfdmurypCR8utAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQU8B5HCv8JOCQHLRMF3/A138WeHHowHwYDVR0j
BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv
MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE
NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk
YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy
MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAG8sDboaZ+xx0E9n2i2
XwgC5qKgC34tbTTaKonqmjnYzvKU6a07QUW8EAN5uBuAaUHYI3kEBmAJERo1voiW
kHXjUAgpN+7CfExA/epT0/wmKFvlThS+i/xjA04UEQvySM0xnGjpwgL0f7GjUayL
GFKIu0aVT3fEYKGpprB5O0cJQixN/eoZEnovaSVCGT31+B/aWFxVPZgr7e9OVfxO
13bkP0F6Ck5azPGazhu8ZsuAyWvpPKtl/Ao5bmDzc/vZW9BYk+X3YlFRKJAKrgw9
zHIGe4UB+fsMs6G/bjKhYQRluLBKp3LIuki1mcAIhpxZSwU0/12WhDIho2lBG5JT
Fck=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net