Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File:                     10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier:          aZeFwKM6ZEcKCA3kbJatyUaGzM1yQ4rP7rZsQjGacQ8=
Subject key identifier:   70:45:15:50:CF:0C:79:B2:E4:62:AD:13:B4:AE:9E:D9:67:DD:0B:76
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer:       /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial:       58AF2021E859658FF2C5A9039A89CCA0F946EF01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number:          0178
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:56:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:20:27 +0000
Files and hashes:         1: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: Z89FcbCrTMtBscw2h5W75CHunYRsXIbcHNYXASnkLN0=)
                          2: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: oDycrh5qN7x/POOPeTV7p++c+MZV6zqWJW3wruk2qn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:af:20:21:e8:59:65:8f:f2:c5:a9:03:9a:89:cc:a0:f9:46:ef:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
        Validity
            Not Before: Apr 13 11:56:27 2025 GMT
            Not After : Apr 14 14:20:27 2025 GMT
        Subject: CN=70451550CF0C79B2E462AD13B4AE9ED967DD0B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:ea:41:40:78:87:bb:eb:45:bf:60:82:1b:
                    56:66:c7:1c:12:d9:84:b7:97:e3:3e:14:be:81:df:
                    07:76:62:03:3a:e1:9d:d1:65:45:0a:f3:98:24:8c:
                    ff:0c:b2:f2:0c:5f:da:1f:d1:46:04:ac:fa:ea:c5:
                    a4:ae:73:5d:31:fb:a3:35:20:c3:86:5b:9e:9c:de:
                    36:1e:22:55:cf:39:ac:3a:a1:27:21:50:c2:c2:e2:
                    fe:5b:3d:30:99:43:5f:94:0c:2b:4d:ec:25:ee:86:
                    50:16:dd:16:45:bc:57:3e:63:f7:16:aa:8f:be:e0:
                    ff:ac:70:de:24:9e:d0:67:83:fd:a0:53:2a:06:26:
                    de:e7:f3:41:50:fa:7b:da:02:71:28:bf:e2:76:56:
                    08:4e:a4:8d:e4:28:a9:0f:ae:e8:9d:db:26:36:64:
                    c1:78:17:cc:7c:93:f3:c3:ac:f2:33:04:9b:b3:85:
                    ac:73:42:fe:3a:02:77:9d:44:0b:5f:cb:26:f5:b9:
                    c1:c5:95:72:f1:07:78:41:a2:22:3e:f3:d1:6d:06:
                    a6:c0:fe:c2:1d:b2:12:a1:94:f9:ab:aa:2b:46:5e:
                    65:e3:b1:a5:e6:1a:ff:f1:ae:fd:f0:0a:6c:85:1e:
                    7d:e8:19:86:3d:ec:ec:54:16:ff:25:71:82:9c:c9:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:45:15:50:CF:0C:79:B2:E4:62:AD:13:B4:AE:9E:D9:67:DD:0B:76
            X509v3 Authority Key Identifier:
                keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7f:27:74:ce:9c:37:8b:25:f1:2a:dd:18:af:c7:95:a5:5d:
         0f:bc:12:9a:97:01:88:f7:e5:a0:2e:0f:9e:7e:e0:bd:6c:44:
         c9:0a:cb:aa:92:24:80:37:02:35:e0:9e:ed:05:58:d0:c9:d0:
         ad:9b:cc:57:55:e5:ba:58:fd:b6:6e:2e:1b:ab:e5:93:29:92:
         c5:55:3c:b3:68:f7:ca:c0:3b:3f:39:8c:3e:52:f2:1e:b3:84:
         1b:8a:9b:6c:e1:75:4e:53:51:91:b4:41:4e:83:ac:58:ec:b3:
         20:d3:b1:f1:9b:34:af:c9:36:f1:c1:d1:eb:1f:da:ff:3c:6c:
         a0:c8:9b:65:2c:1a:4f:26:0b:95:ed:4b:08:81:c3:a6:66:45:
         a4:84:64:75:79:16:aa:c7:bf:68:22:d6:29:72:a3:29:26:0e:
         41:f0:6e:33:dc:f7:ce:64:06:24:1e:b1:5e:d8:77:43:86:a4:
         6b:a0:dc:8e:c4:88:5f:d8:5e:de:ac:2c:6f:08:ee:2e:b1:88:
         f6:32:4f:1c:2d:b0:77:f2:e8:5c:aa:b0:56:db:df:5f:71:52:
         ba:16:0f:41:b8:97:dc:f9:10:e6:0a:7c:b6:f2:b4:1f:1b:ee:
         06:e9:13:30:b4:2c:30:f5:79:5c:ab:aa:1c:fc:fe:7a:6b:20:
         33:48:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net