Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File:                     21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier:          e7KUmrt+TuHwf+1TRElt2Ko1MCKr5ZTZUT/jKIaN5d0=
Subject key identifier:   97:4A:59:8A:02:23:F4:5F:21:DD:7B:1A:29:C4:E9:2D:A8:E0:82:BD
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer:       /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial:       4D56914BBAC20AF73F05B5587792D1AC1AA4FF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number:          0115
Signing time:             Fri 31 Jan 2025 13:44:06 +0000
Manifest this update:     Fri 31 Jan 2025 13:39:04 +0000
Manifest next update:     Sat 01 Feb 2025 14:53:04 +0000
Files and hashes:         1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: ubgYxKlma3HK18LjxErSnGj/vZm4XlAcetCmYE9BM/s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:56:91:4b:ba:c2:0a:f7:3f:05:b5:58:77:92:d1:ac:1a:a4:ff:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
        Validity
            Not Before: Jan 31 13:39:04 2025 GMT
            Not After : Feb  1 14:53:04 2025 GMT
        Subject: CN=974A598A0223F45F21DD7B1A29C4E92DA8E082BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:66:44:6a:f9:7b:9e:4f:82:d3:b9:3a:fa:80:
                    19:23:9b:5b:b4:29:4a:54:0f:58:51:c6:c8:1f:91:
                    3a:62:e8:a9:01:01:e2:61:1d:eb:4b:72:54:fc:5e:
                    8d:34:71:3d:9a:44:fb:c1:50:f9:cd:2e:95:ef:2a:
                    79:b8:1d:22:de:5f:e4:8d:1f:78:c8:a7:05:77:0b:
                    3f:df:21:d0:bd:00:64:8f:b8:91:03:6d:6e:df:2a:
                    b9:45:d7:ff:1b:a3:2f:61:48:09:2e:21:4a:59:9b:
                    8b:7d:20:df:c3:21:7a:36:45:93:20:f8:93:88:32:
                    4b:c3:96:02:bb:9c:4e:1a:84:b4:fb:04:10:15:87:
                    e0:33:95:6f:e6:4d:e5:b3:7d:33:55:f4:c4:1b:2e:
                    2b:71:e4:00:e7:6d:c5:c5:12:14:3f:7e:7a:1f:44:
                    52:74:87:45:98:b5:92:0e:e9:37:de:0f:fe:7b:86:
                    5e:77:a7:38:b1:b6:d5:ec:30:55:a2:25:51:c6:fe:
                    a7:8c:81:b4:6a:49:97:9b:de:69:03:c9:9b:0a:3a:
                    c9:c3:91:11:2c:b9:87:be:b7:d7:49:73:73:13:ac:
                    e9:77:52:3b:a8:87:dc:c2:4b:bf:45:a6:ff:3f:17:
                    0d:cc:63:8b:85:40:2f:40:54:98:86:55:a9:48:50:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4A:59:8A:02:23:F4:5F:21:DD:7B:1A:29:C4:E9:2D:A8:E0:82:BD
            X509v3 Authority Key Identifier:
                keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8d:00:7e:95:36:d3:1a:32:70:ba:b9:c1:88:5c:a5:29:0e:
         b7:db:a7:27:2a:fc:e2:5c:51:cf:3b:ef:c6:4b:a1:56:d7:bd:
         57:e1:15:72:b7:62:73:81:d1:e1:dd:42:5b:45:32:1f:86:d1:
         8f:92:78:2c:3f:50:92:67:63:c5:7c:3e:7b:8d:b9:fd:5c:c8:
         3a:58:0c:e3:a8:c0:b9:8b:5f:8f:d3:bd:d2:24:ce:e9:ab:c1:
         74:88:36:57:d0:b0:af:b0:54:5d:a9:95:ef:5a:58:2f:86:29:
         92:1b:af:89:d0:db:70:1f:21:be:11:d9:e5:20:bc:4b:03:ee:
         ee:44:bf:f4:79:07:77:94:c2:0c:eb:00:90:9b:c6:2e:aa:89:
         8d:b3:f7:34:71:c9:20:5a:22:ae:24:1b:cd:c5:f8:16:30:8d:
         66:62:50:41:fb:9c:5b:03:e7:d1:7c:e8:8f:92:38:2e:2a:08:
         d8:af:4d:a6:75:e7:55:d0:60:35:6a:e4:40:e2:80:d7:1c:85:
         98:36:9f:9a:ab:8c:ae:c5:ac:03:0d:c8:77:2c:1b:4e:2d:33:
         63:fa:c8:86:d8:e0:a8:7e:1b:46:46:6d:50:bd:31:f1:4b:af:
         e2:34:a7:06:77:c3:f5:4c:ac:f2:a0:6a:65:8d:75:ff:2e:c1:
         b6:c5:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:57:02 2025 by rpki-client