Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          8ZZyaSllkzWElgpzhTzoU9vAMt8Vaio43OwVABbntl8=
Subject key identifier:   19:04:AA:0A:53:2B:80:68:BF:8A:94:37:EF:6A:43:D1:F6:43:74:5C
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       2CDF253F5D21413B91C99EBC1BF982CD25D6600D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          0114
Signing time:             Fri 31 Jan 2025 02:58:04 +0000
Manifest this update:     Fri 31 Jan 2025 02:53:02 +0000
Manifest next update:     Sat 01 Feb 2025 06:06:02 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: lsk+Qf+0DjSc464e5iaeA6gxGeJ7Y2xB50r5qMTnCHU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:25:3f:5d:21:41:3b:91:c9:9e:bc:1b:f9:82:cd:25:d6:60:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: Jan 31 02:53:02 2025 GMT
            Not After : Feb  1 06:06:02 2025 GMT
        Subject: CN=1904AA0A532B8068BF8A9437EF6A43D1F643745C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:cc:83:7a:b7:72:5b:cc:d2:10:aa:23:6b:
                    d3:d2:16:b5:60:57:3f:2b:3d:b1:f0:eb:8e:4f:08:
                    66:f3:41:57:9f:a4:53:99:c9:e5:f6:42:a9:62:59:
                    46:5b:ec:0b:fd:50:70:f1:d3:65:fb:44:a5:13:e4:
                    e7:44:3e:72:41:64:24:0d:ed:1a:fc:81:02:50:26:
                    3f:5c:99:f1:e3:74:c2:0b:9e:4b:5a:14:26:0a:df:
                    fb:df:96:24:46:5c:38:ee:87:fb:e1:cd:31:73:51:
                    37:d6:65:8e:c6:32:56:40:2b:3a:76:c2:92:92:60:
                    09:41:9d:a2:a6:a9:da:8f:b6:46:52:91:19:46:99:
                    67:35:d9:18:00:6d:2f:f3:4d:10:70:8e:46:6a:24:
                    27:a6:92:73:55:f9:a5:e3:79:15:e1:8c:2b:93:ea:
                    75:8a:b8:ec:fa:f8:de:87:76:38:b2:dd:2a:f9:d5:
                    99:fb:77:83:a2:78:9e:c7:53:79:1d:db:30:b0:a1:
                    77:02:06:83:19:23:5f:a0:74:b7:52:8a:95:b7:17:
                    6a:91:b3:02:f6:4e:2e:38:af:95:cd:f0:2a:76:96:
                    82:6d:b2:c6:35:c2:b6:d7:71:90:bb:bb:bc:97:7c:
                    6e:60:b7:05:b6:78:3b:76:8e:79:3a:f7:e9:f7:6e:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:AA:0A:53:2B:80:68:BF:8A:94:37:EF:6A:43:D1:F6:43:74:5C
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:1e:d4:60:44:f2:2d:14:f2:67:9a:e9:55:1f:32:73:09:e8:
         5e:79:9c:ac:13:2a:ef:8d:13:a9:ff:31:81:72:f0:62:a9:79:
         33:4a:b9:98:e2:c4:1a:28:81:b4:33:5f:89:ce:55:54:1f:a7:
         9e:8f:a0:2d:ed:db:6c:bb:a0:e3:d0:e5:78:f8:42:52:e0:15:
         b2:f4:64:95:70:e8:c1:f9:fb:c7:d6:29:c3:a7:52:0d:46:c6:
         b8:e3:19:01:70:a1:90:01:81:0f:a6:6a:a3:96:8a:b3:05:28:
         81:1a:af:c1:ae:73:59:b7:2f:3a:2a:7f:a5:79:04:76:82:e3:
         99:47:b4:ec:5c:bd:fb:f8:78:d7:95:d0:0c:7d:3e:98:78:31:
         37:cd:cc:9d:b9:5e:0a:65:93:6a:3d:ea:2f:66:f4:eb:43:e3:
         12:7f:fe:a7:63:36:01:45:3c:ca:9e:ce:10:84:a5:ea:17:46:
         ce:2d:01:ff:40:0f:25:50:1f:3f:24:81:a3:c6:19:7e:d9:0c:
         8c:97:79:b2:6f:15:75:a4:d7:34:0b:12:71:b3:ce:f5:26:c2:
         43:81:c3:8f:cb:eb:60:ea:85:4c:04:19:7e:03:16:98:8c:f7:
         e0:5e:07:d8:13:26:9b:6b:9b:29:39:09:d2:a5:bc:d5:a8:6a:
         fd:e4:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:17 2025 by rpki-client