Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
File:                     B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json)
Hash identifier:          YplO57uJ9A1/dPcEWvNYClQhXpP+p40ZnPlezQWbV4s=
Subject key identifier:   59:52:6F:1C:9D:8E:8A:F7:59:B9:52:8C:46:2B:C0:CB:3B:89:3E:46
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Certificate issuer:       /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial:       66A14C92A3713131700348619B2D3217AE558C7F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
Manifest number:          0117
Signing time:             Fri 31 Jan 2025 09:39:19 +0000
Manifest this update:     Fri 31 Jan 2025 09:34:17 +0000
Manifest next update:     Sat 01 Feb 2025 10:37:17 +0000
Files and hashes:         1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: 1GbcHccR0qrRnppaVrIADnqlOOEe/j64UrxuiomGG2o=)
                          2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 9y00w6cwXJQxOVcC+hWes6m35jsrIAutWCWZ9sJrWuQ=)
                          3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: F1Isf1C1gT1EarQJXJEaoygOIDIRISNuTm2wNbjGs+g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a1:4c:92:a3:71:31:31:70:03:48:61:9b:2d:32:17:ae:55:8c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
        Validity
            Not Before: Jan 31 09:34:17 2025 GMT
            Not After : Feb  1 10:37:17 2025 GMT
        Subject: CN=59526F1C9D8E8AF759B9528C462BC0CB3B893E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:46:10:f2:70:49:08:a2:85:f4:fe:56:d3:
                    a4:06:02:cb:b5:c3:8b:fb:a2:e5:e4:5b:93:eb:2e:
                    23:5b:ca:84:f0:b0:eb:f7:02:d0:68:7e:4f:a3:72:
                    a9:e7:3d:45:5d:fe:1c:07:ab:48:c3:10:41:6a:3a:
                    93:ca:8f:8a:6d:d0:6d:30:9e:0d:8b:da:6c:b7:12:
                    33:83:95:1e:20:13:89:24:3e:b0:0a:90:0c:f4:cd:
                    02:82:59:fd:6c:95:42:1a:d7:17:15:a7:8b:c1:47:
                    04:6a:71:31:fc:9e:c0:0f:fa:4c:90:c8:aa:f9:08:
                    33:59:ce:18:df:19:36:52:45:d7:80:e2:50:04:9d:
                    00:d8:43:c9:fb:f2:20:e6:9c:08:b2:76:19:12:2e:
                    92:30:29:76:29:e4:5b:ea:6a:ca:80:56:c4:83:53:
                    8f:e4:3b:17:9a:42:2d:66:19:71:13:fe:dd:46:37:
                    0b:93:89:06:69:93:12:f7:37:32:e1:42:c9:73:0b:
                    a3:96:3a:7a:38:fc:cb:89:c2:8a:f6:04:a3:f2:5b:
                    0c:a2:a0:af:7e:32:89:23:19:4e:66:71:68:61:cd:
                    46:74:37:f7:8f:f6:49:5f:a7:e1:e3:d4:16:38:a8:
                    80:90:d1:63:ca:da:14:00:2c:fa:eb:d5:a4:a2:6c:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:6F:1C:9D:8E:8A:F7:59:B9:52:8C:46:2B:C0:CB:3B:89:3E:46
            X509v3 Authority Key Identifier:
                keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:94:e0:48:48:6b:7b:e0:55:13:f3:d8:19:84:3c:89:43:58:
         01:48:15:b7:13:9d:fa:41:9d:5d:77:d4:0e:a7:32:69:c2:71:
         92:c8:f2:25:03:bf:42:dd:50:71:5a:42:bd:41:f0:8b:0c:21:
         ad:47:22:bc:d9:85:6e:49:f9:b9:53:49:aa:c1:e7:c1:fd:af:
         fb:ca:9e:b4:36:25:38:07:9a:80:91:2c:f4:22:21:e8:e4:b0:
         b0:e1:23:88:33:f8:dd:10:0b:04:60:c2:f9:ea:f6:4d:75:47:
         80:b6:6a:0b:2d:6f:f2:61:f8:3d:f9:ad:02:0d:c6:aa:55:b6:
         31:1e:0c:65:88:d8:ca:35:97:26:0b:8c:f9:64:53:c2:58:b7:
         0a:02:0e:33:cd:d9:25:52:ed:8c:e1:ec:86:8e:c0:1d:f4:c5:
         09:5f:0b:c0:1a:6f:3e:c0:34:ad:36:68:8f:dc:1c:11:8f:5b:
         29:44:3f:0c:7d:bb:6d:c8:aa:b3:07:8e:48:91:fc:d4:cb:40:
         bd:63:f7:9e:ad:7c:fb:8d:23:37:05:d7:9e:76:4e:b9:34:e0:
         91:98:47:c8:dc:3b:78:79:16:55:a3:07:f3:fb:0b:f9:40:c8:
         8c:b5:ad:3f:cc:75:29:57:84:5c:16:6c:ec:59:cb:49:dd:15:
         bc:0a:16:e4
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUZqFMkqNxMTFwA0hhmy0yF65VjH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG
MjFFMDUxODAeFw0yNTAxMzEwOTM0MTdaFw0yNTAyMDExMDM3MTdaMDMxMTAvBgNV
BAMTKDU5NTI2RjFDOUQ4RThBRjc1OUI5NTI4QzQ2MkJDMENCM0I4OTNFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOnUYQ8nBJCKKF9P5W06QGAsu1
w4v7ouXkW5PrLiNbyoTwsOv3AtBofk+jcqnnPUVd/hwHq0jDEEFqOpPKj4pt0G0w
ng2L2my3EjODlR4gE4kkPrAKkAz0zQKCWf1slUIa1xcVp4vBRwRqcTH8nsAP+kyQ
yKr5CDNZzhjfGTZSRdeA4lAEnQDYQ8n78iDmnAiydhkSLpIwKXYp5FvqasqAVsSD
U4/kOxeaQi1mGXET/t1GNwuTiQZpkxL3NzLhQslzC6OWOno4/MuJwor2BKPyWwyi
oK9+MokjGU5mcWhhzUZ0N/eP9klfp+Hj1BY4qICQ0WPK2hQALPrr1aSibJNZAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUWVJvHJ2OivdZuVKMRivAyzuJPkYwHwYDVR0j
BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv
Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD
OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz
N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND
MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALmU4EhIa3vgVRPz2BmE
PIlDWAFIFbcTnfpBnV131A6nMmnCcZLI8iUDv0LdUHFaQr1B8IsMIa1HIrzZhW5J
+blTSarB58H9r/vKnrQ2JTgHmoCRLPQiIejksLDhI4gz+N0QCwRgwvnq9k11R4C2
agstb/Jh+D35rQINxqpVtjEeDGWI2Mo1lyYLjPlkU8JYtwoCDjPN2SVS7Yzh7IaO
wB30xQlfC8Aabz7ANK02aI/cHBGPWylEPwx9u23IqrMHjkiR/NTLQL1j956tfPuN
IzcF1552Trk04JGYR8jcO3h5FlWjB/P7C/lAyIy1rT/MdSlXhFwWbOxZy0ndFbwK
FuQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:39 2025 by rpki-client