Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
File:                     F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json)
Hash identifier:          os0SXklMQDbXi6UbqmGECCx/WYtrZ8QvuwuuBYydBpY=
Subject key identifier:   71:3E:7A:7E:D0:6D:70:24:45:04:C8:B8:F9:66:96:1B:03:54:94:7A
Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
Certificate issuer:       /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Certificate serial:       3336F5E93D2C45AADE00B0D8DD748450F4721192
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
Manifest number:          0174
Signing time:             Sat 12 Apr 2025 22:52:02 +0000
Manifest this update:     Sat 12 Apr 2025 22:47:00 +0000
Manifest next update:     Mon 14 Apr 2025 01:08:00 +0000
Files and hashes:         1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: v+xSg4Hfvif7OQWLIBvv7nXRnus64BIDDqiVgSjqajk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:36:f5:e9:3d:2c:45:aa:de:00:b0:d8:dd:74:84:50:f4:72:11:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
        Validity
            Not Before: Apr 12 22:47:00 2025 GMT
            Not After : Apr 14 01:08:00 2025 GMT
        Subject: CN=713E7A7ED06D70244504C8B8F966961B0354947A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:21:f2:14:e4:d2:bf:64:07:30:fd:c7:60:
                    15:7f:31:f6:81:1e:c1:0e:2b:51:b8:be:3a:aa:eb:
                    0a:93:cb:cc:37:52:3c:98:57:ef:1e:3d:3c:b5:f0:
                    53:8e:c6:75:8b:72:04:12:9b:ea:9c:b1:62:c8:87:
                    e7:d3:4a:b9:27:93:62:e3:15:97:43:b1:43:a0:c5:
                    49:c4:72:ea:03:ab:9c:fa:53:32:49:1d:03:2a:db:
                    2e:12:15:60:72:85:12:4d:16:92:cf:76:a4:86:28:
                    2e:16:4a:58:1c:01:41:74:f4:b1:91:dc:08:b0:d7:
                    b9:ee:fa:32:76:d0:7e:22:ff:ed:43:43:bf:75:a6:
                    58:d3:cc:53:a1:54:31:a9:0a:5a:d6:27:16:39:97:
                    59:2e:cf:c5:17:24:f9:9c:aa:29:c3:86:1d:a4:65:
                    ee:af:d4:b9:56:22:f1:24:c2:9f:6f:fe:bd:f8:eb:
                    f1:85:73:24:3c:e4:93:ac:f0:fb:03:cb:c5:d8:a5:
                    9a:21:2e:d1:d4:4d:4e:a3:fd:4b:5f:f1:eb:a8:36:
                    1d:f0:38:e4:62:b2:43:b1:e0:4d:1d:c6:d9:3d:fd:
                    3f:cd:af:e1:30:98:ec:6b:24:20:66:cf:d1:d1:e5:
                    95:f1:02:9a:4d:36:88:e0:11:9a:63:2e:63:fe:85:
                    4d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:7A:7E:D0:6D:70:24:45:04:C8:B8:F9:66:96:1B:03:54:94:7A
            X509v3 Authority Key Identifier:
                keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:3c:cd:4a:a9:c9:b0:cf:4c:c6:70:fb:86:ed:27:d6:d5:
         45:a0:98:6d:f6:0a:e7:05:cd:e9:08:7d:c6:5e:b9:86:f8:89:
         ab:be:46:a8:b9:20:89:17:82:d0:cf:94:6f:ab:8f:43:95:86:
         2a:48:c1:a2:a4:26:d7:7f:a1:a5:e4:a1:20:22:65:42:84:7d:
         bf:36:62:11:1b:5e:9e:28:4f:81:d9:3d:12:8f:09:56:d3:6c:
         f4:c1:6f:b4:53:c1:c7:89:24:f8:d6:1e:3e:22:19:87:ca:25:
         bc:bb:df:fb:2b:05:b8:c2:90:7c:95:1d:ae:87:6c:4d:6b:1b:
         98:5b:41:fd:74:c6:1d:cf:de:98:ba:09:a0:1a:66:1c:06:75:
         8c:ba:75:04:45:80:86:47:dd:fc:30:5b:59:86:c3:7f:91:f5:
         8f:dc:f6:18:51:e1:a8:89:a5:82:aa:ec:9f:d0:ee:89:cf:b4:
         49:3e:98:4d:c0:f3:58:51:65:b0:53:82:6d:60:ab:70:db:18:
         7e:f2:f2:54:62:9e:c2:37:83:22:bf:47:f8:af:ac:4e:cf:d2:
         9e:56:85:4f:8c:3f:65:12:08:ae:12:f3:ac:2f:3f:07:b9:20:
         af:8f:76:e6:d7:f1:82:a3:95:fa:e4:7d:8f:1a:75:e0:16:dd:
         8d:92:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net