Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File:                     1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier:          ZLFD1FcOQiVlScPD6hhS0RL3XxKAVE53UCe9CxXqAsY=
Subject key identifier:   30:61:DC:16:5D:F6:36:27:23:4D:CB:CC:69:BA:D1:79:69:8C:4B:B5
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer:       /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial:       60FF86AAF5553CFFA3D4852458538BDEB16F6005
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number:          0178
Signing time:             Sun 13 Apr 2025 12:47:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:42:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:10:12 +0000
Files and hashes:         1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: CmQSOUQtb8K/Whkj0GLNSH9Tvx101OHfSU609UeKmSc=)
                          2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rM7Iz0AdMAoRVTiJd3bICea3rYWVyAIw/EdVZlqCGD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ff:86:aa:f5:55:3c:ff:a3:d4:85:24:58:53:8b:de:b1:6f:60:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
        Validity
            Not Before: Apr 13 12:42:12 2025 GMT
            Not After : Apr 14 13:10:12 2025 GMT
        Subject: CN=3061DC165DF63627234DCBCC69BAD179698C4BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:e7:bf:d5:ab:bf:fd:15:14:a7:5b:f9:d3:
                    44:d9:77:06:fd:f1:e9:b7:d9:65:81:4e:e7:05:79:
                    11:7e:e7:0e:05:2b:cd:77:fa:08:e0:de:86:f3:2e:
                    91:71:ba:d9:bc:58:92:c9:84:62:7d:52:dd:a4:ec:
                    b5:c8:8a:b7:a4:57:c0:eb:92:b0:60:5e:23:12:8a:
                    88:a6:ec:14:dd:e4:21:8a:09:87:a0:dc:da:52:c7:
                    6f:cb:42:66:69:af:98:68:fb:8c:26:2e:74:9d:ae:
                    b0:14:2f:33:1a:26:22:1a:eb:ff:e3:43:0a:da:7c:
                    82:9e:d3:9d:46:3c:d0:7f:93:b8:fb:f2:ab:39:9b:
                    09:da:9a:63:e2:17:c9:9e:f7:29:22:ba:80:44:99:
                    f2:dc:a9:17:91:23:49:bc:9f:39:c0:05:db:8d:d3:
                    f6:9b:76:35:b5:7a:06:30:f6:fd:55:48:dd:99:91:
                    ee:ea:d9:ea:3e:75:cf:59:e9:4c:41:0b:2e:9f:55:
                    83:a0:93:2e:c3:c5:e6:8c:e5:f9:c6:33:35:a7:bc:
                    e8:2c:5c:f7:50:91:3d:ff:f5:3c:a0:11:c5:7d:6f:
                    31:46:05:6f:f2:c2:2c:e9:64:72:70:92:3b:18:fa:
                    c0:c7:f2:58:68:ed:ce:16:b4:08:e4:07:5f:00:d1:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:61:DC:16:5D:F6:36:27:23:4D:CB:CC:69:BA:D1:79:69:8C:4B:B5
            X509v3 Authority Key Identifier:
                keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:ec:3e:18:dd:c4:8b:eb:10:da:15:ae:20:db:23:29:0b:
         91:98:08:df:82:aa:c5:b1:b7:47:a3:7c:10:b3:81:9f:37:50:
         bd:53:16:ac:e5:26:0c:80:b5:3d:12:63:d3:a6:c2:7e:07:44:
         fa:97:7c:fd:06:ec:1d:ae:37:e0:5b:d0:4e:4f:60:1c:0b:f5:
         a7:ef:13:3e:84:19:10:dd:f6:82:71:ff:ef:3c:c9:5b:f0:39:
         28:50:64:94:79:ba:f2:a2:74:55:b4:70:66:89:52:04:7e:de:
         94:a1:c0:89:68:23:79:31:80:c9:95:79:9d:70:1c:2b:e9:84:
         f9:2c:f1:d0:a6:c9:a3:d0:a4:e7:4d:ee:8a:63:f8:35:3c:9c:
         ec:ef:c1:ea:98:a7:b3:4a:5a:57:a3:b7:e3:65:ad:fe:6d:b7:
         5c:06:27:c1:c9:44:8c:28:fd:dd:83:38:3c:4e:45:7b:ad:9b:
         ef:fb:28:98:f6:8b:e8:6f:b3:1b:87:58:75:e7:ef:b9:6d:00:
         2d:ec:78:69:ed:51:0e:30:f5:1f:f6:7a:db:ee:58:67:1a:a8:
         58:a3:c2:58:ed:32:63:c1:d4:e0:2e:71:2e:e6:2b:62:91:8c:
         48:09:31:88:6b:e0:ba:d9:91:ba:aa:25:da:16:72:f7:e1:35:
         9a:f1:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----