Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
File:                     6482EA67DB858D1440DD67B955223E4341BA4E97.mft (raw, json)
Hash identifier:          zblRh5WTC5OEpNpVwh07EkUBiy87Ig4h9IYVG8Cutjo=
Subject key identifier:   A2:F4:EB:AA:5A:61:F3:48:B8:CC:F4:C2:EF:29:10:02:EB:4C:32:87
Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Certificate issuer:       /CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Certificate serial:       535094BB07DC02B81237099C556004AD33DBD495
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
Manifest number:          0117
Signing time:             Fri 31 Jan 2025 15:41:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:36:43 +0000
Manifest next update:     Sat 01 Feb 2025 17:40:43 +0000
Files and hashes:         1: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (hash: 6LW9GY7ytZRKBljhKsr5USrIitQbRAKHkl3957Ar/Zo=)
                          2: 6482EA67DB858D1440DD67B955223E4341BA4E97.crl (hash: Vcj90KuOQYRQl2RQ8JnFURLBNEiCyhwwabKymsbDYcE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:50:94:bb:07:dc:02:b8:12:37:09:9c:55:60:04:ad:33:db:d4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
        Validity
            Not Before: Jan 31 15:36:43 2025 GMT
            Not After : Feb  1 17:40:43 2025 GMT
        Subject: CN=A2F4EBAA5A61F348B8CCF4C2EF291002EB4C3287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:61:08:d5:97:67:03:3b:87:8c:3c:95:53:
                    c1:3f:1f:4f:c4:55:97:fb:35:d9:c9:3d:8e:35:bd:
                    6c:1d:b6:28:08:73:94:c5:b4:f5:71:6c:15:71:22:
                    24:ee:60:c9:ad:2a:5d:cb:db:43:a5:c6:78:28:c9:
                    e8:a1:c5:a7:e2:10:bc:fd:f8:7a:1d:6a:78:3e:d3:
                    fc:97:f9:44:d7:0b:cc:af:f2:d4:a6:23:98:35:71:
                    8f:90:d6:d8:17:e4:84:3f:b2:f6:71:6a:17:99:a2:
                    94:b0:5c:00:97:6a:87:e9:4e:d5:16:a9:b4:a0:5f:
                    ce:64:2b:36:97:ef:5a:66:c2:58:ed:58:79:37:50:
                    da:aa:9c:2b:3b:7f:9a:e0:14:d3:e5:d1:67:3f:ef:
                    ae:c5:44:1c:3a:ef:ba:90:df:c8:32:8a:c5:8a:01:
                    19:36:48:9b:ba:c0:f5:cb:79:ba:e0:05:f7:2d:77:
                    af:22:b4:6e:97:bf:4b:ef:35:33:56:ba:cd:1c:db:
                    dd:8b:08:37:87:05:69:93:91:10:ad:28:4e:c3:48:
                    af:97:ae:37:7b:48:84:33:b9:8f:91:21:2e:9c:ab:
                    07:f4:96:fe:7f:8e:5a:a5:2d:18:69:d0:36:eb:80:
                    30:f2:33:ee:b7:61:d6:28:7c:37:f6:c2:cd:7b:19:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:EB:AA:5A:61:F3:48:B8:CC:F4:C2:EF:29:10:02:EB:4C:32:87
            X509v3 Authority Key Identifier:
                keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:68:0a:02:8a:cf:12:bf:86:20:e1:23:fe:79:f6:92:aa:38:
         c9:8a:db:e0:77:5d:5f:88:32:2b:ae:fd:fb:f9:bc:dc:ba:0e:
         69:18:2a:5c:e8:87:23:d1:98:17:db:89:2a:20:6b:6c:8d:d0:
         be:fe:b2:28:31:fd:be:c7:9d:ec:4f:70:63:25:2a:f4:cd:8a:
         8d:9e:62:38:8d:85:73:33:bd:be:d3:be:cc:4b:a3:ef:32:f0:
         b5:5a:21:9f:bd:82:40:ec:15:a5:e2:e5:1c:79:29:48:cd:f9:
         22:2a:4f:09:89:db:5c:c7:79:88:39:0e:1c:eb:43:19:57:41:
         8c:df:a8:7e:21:75:aa:0d:7a:2a:3d:fd:22:28:d7:cb:cb:56:
         a0:86:fc:f7:ca:7e:67:58:3b:71:08:e1:8c:c4:0f:e6:6f:dc:
         b7:15:88:7a:0f:9e:88:8b:01:56:e1:10:3a:d3:3c:41:6e:f9:
         f7:a6:19:ab:21:9b:ee:58:7f:c1:c1:b0:02:31:e6:37:5d:4a:
         17:4e:6e:bf:d2:1a:53:b4:c7:5e:91:9c:a9:12:fd:5d:a6:4d:
         0c:b4:15:70:8f:6f:9f:f5:10:4d:a7:d5:4a:8b:2a:04:9a:0a:
         b4:c4:53:88:c7:c0:c7:72:4b:58:9d:3f:c6:fa:17:51:7a:32:
         f6:b8:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:21 2025 by rpki-client