Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
File:                     4742E76772F118A935D69FD40F69858085C80999.mft (raw, json)
Hash identifier:          Q9jKOkY9LKRYV/8P0p4v5Jv4+tUhaKSHYcb6xWKmsww=
Subject key identifier:   76:F8:38:A5:29:CF:8C:9B:F7:85:EF:F5:39:EC:9D:9B:C3:10:B6:AB
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Certificate issuer:       /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial:       2B3B44702064FE073B8F646617BFCA9DA2677BA9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
Manifest number:          0116
Signing time:             Fri 31 Jan 2025 17:22:13 +0000
Manifest this update:     Fri 31 Jan 2025 17:17:11 +0000
Manifest next update:     Sat 01 Feb 2025 21:17:11 +0000
Files and hashes:         1: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: xS2KKuCL0zT79XUS6UHnNtuc35sJP3wOm3GH4kAT+84=)
                          2: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: D0ROwoTKCiO0SHKC02McjK2f9xdxhPqW80gKE+eCaEY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3b:44:70:20:64:fe:07:3b:8f:64:66:17:bf:ca:9d:a2:67:7b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
        Validity
            Not Before: Jan 31 17:17:11 2025 GMT
            Not After : Feb  1 21:17:11 2025 GMT
        Subject: CN=76F838A529CF8C9BF785EFF539EC9D9BC310B6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b5:d1:ca:a9:4e:bc:66:84:71:96:12:02:5b:
                    61:2d:29:d1:5a:2b:51:ec:ec:17:61:8a:86:fd:f5:
                    c5:58:3e:bf:ce:c7:6f:3e:83:ce:5c:c7:3e:1e:74:
                    c0:d5:f6:e4:c7:f2:5a:7b:bb:ff:ef:06:0d:df:82:
                    77:a3:5a:de:da:f7:bd:fb:ab:7c:50:43:bd:e0:fa:
                    e4:91:7c:f4:99:64:2e:7a:4b:37:ec:72:c9:b2:08:
                    f0:a6:d7:1c:b0:96:bc:66:2b:84:ae:e2:20:e0:ed:
                    4e:f5:61:3e:41:b4:5b:7b:f4:82:f6:f8:63:71:e6:
                    ec:2d:d9:2c:dc:66:d1:8d:77:76:7b:84:9e:cd:e2:
                    2c:57:fd:28:b3:d6:86:a3:b7:2f:92:5c:9f:32:d2:
                    a0:c2:32:c4:6e:57:c9:70:46:e6:b3:15:cb:79:ca:
                    86:2d:55:5f:c9:5b:e6:58:94:c2:ec:cf:4f:ce:3f:
                    a1:2c:fd:64:d7:d0:d5:a9:d8:fe:8a:5b:c4:e5:0d:
                    c7:a9:42:66:af:46:ba:8a:8c:63:88:a6:02:9b:9f:
                    3c:65:57:49:71:c0:0a:65:28:23:a8:70:b8:b9:53:
                    ab:8c:f8:71:bf:6c:3b:45:fe:71:4c:e7:f5:cb:2b:
                    ef:9a:de:86:a1:28:9a:45:f7:17:41:c3:cd:ea:f1:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:38:A5:29:CF:8C:9B:F7:85:EF:F5:39:EC:9D:9B:C3:10:B6:AB
            X509v3 Authority Key Identifier:
                keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:15:c3:55:7b:7d:86:60:e6:cb:73:3d:31:a4:43:c6:68:
         d1:a1:60:49:a3:c0:d7:1a:99:41:1b:a1:1e:c6:ad:ae:2c:f2:
         21:e8:b5:f3:86:f0:81:e1:0a:0b:f0:9b:e3:68:ac:e6:ed:4f:
         81:1c:d3:14:47:08:8f:65:a6:6f:12:94:81:b7:cb:a1:f1:37:
         14:ad:53:ed:34:97:0f:6f:b6:33:ea:d7:b5:57:70:d4:09:2c:
         40:b2:64:cb:07:52:1a:9f:fa:28:13:b6:53:dc:20:9a:f5:7c:
         e9:01:84:d3:cb:a5:dc:02:fc:68:f2:45:61:ae:67:26:b7:30:
         cf:c0:25:df:2f:f4:79:f9:03:64:e3:81:a8:92:f5:ee:24:c4:
         02:bd:01:ac:52:63:e7:22:4c:71:da:d4:d7:3e:72:59:0b:96:
         31:72:c6:2b:09:f7:33:b3:f6:4e:bb:94:7e:5e:62:10:40:fc:
         51:9e:40:af:65:e4:f9:da:b1:44:33:47:5d:de:84:3f:1d:e2:
         b3:c5:08:84:67:23:fc:6c:ce:33:07:32:07:db:82:4d:4d:05:
         23:23:78:df:64:e2:9f:51:8c:da:14:4b:06:fd:e3:b6:f1:ba:
         c8:d0:dd:5f:a9:d2:e8:6c:c4:e3:70:09:25:6e:aa:79:1c:af:
         0f:60:9b:6d
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUKztEcCBk/gc7j2RmF7/KnaJne6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4
NUM4MDk5OTAeFw0yNTAxMzExNzE3MTFaFw0yNTAyMDEyMTE3MTFaMDMxMTAvBgNV
BAMTKDc2RjgzOEE1MjlDRjhDOUJGNzg1RUZGNTM5RUM5RDlCQzMxMEI2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDytdHKqU68ZoRxlhICW2EtKdFa
K1Hs7Bdhiob99cVYPr/Ox28+g85cxz4edMDV9uTH8lp7u//vBg3fgnejWt7a9737
q3xQQ73g+uSRfPSZZC56SzfscsmyCPCm1xywlrxmK4Su4iDg7U71YT5BtFt79IL2
+GNx5uwt2SzcZtGNd3Z7hJ7N4ixX/Siz1oajty+SXJ8y0qDCMsRuV8lwRuazFct5
yoYtVV/JW+ZYlMLsz0/OP6Es/WTX0NWp2P6KW8TlDcepQmavRrqKjGOIpgKbnzxl
V0lxwAplKCOocLi5U6uM+HG/bDtF/nFM5/XLK++a3oahKJpF9xdBw83q8UpfAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUdvg4pSnPjJv3he/1Oeydm8MQtqswHwYDVR0j
BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv
NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4
MDg1QzgwOTk5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzYwYTA5
MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3Njc3MkYxMThBOTM1
RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFw9FcNVe32GYObLcz0x
pEPGaNGhYEmjwNcamUEboR7Gra4s8iHotfOG8IHhCgvwm+NorObtT4Ec0xRHCI9l
pm8SlIG3y6HxNxStU+00lw9vtjPq17VXcNQJLECyZMsHUhqf+igTtlPcIJr1fOkB
hNPLpdwC/GjyRWGuZya3MM/AJd8v9Hn5A2TjgaiS9e4kxAK9AaxSY+ciTHHa1Nc+
clkLljFyxisJ9zOz9k67lH5eYhBA/FGeQK9l5PnasUQzR13ehD8d4rPFCIRnI/xs
zjMHMgfbgk1NBSMjeN9k4p9RjNoUSwb947bxusjQ3V+p0uhsxONwCSVuqnkcrw9g
m20=
-----END CERTIFICATE-----