Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
File:                     1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json)
Hash identifier:          LEJDlvDJYExPrf8zH15Mi6cZ8Im1NZVpRHkoP8Ohhv0=
Subject key identifier:   BB:BB:41:BA:3B:A5:DD:50:1D:83:A8:F3:30:7D:9C:89:44:64:05:CA
Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71
Certificate issuer:       /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
Certificate serial:       326421C738E65F571BA8B9045D2880484D5E66AC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
Manifest number:          0119
Signing time:             Fri 31 Jan 2025 06:46:34 +0000
Manifest this update:     Fri 31 Jan 2025 06:41:32 +0000
Manifest next update:     Sat 01 Feb 2025 06:55:32 +0000
Files and hashes:         1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 19BDluMuXyG9C3qtsM6y+GChj96yLYuOu6Hm07BlCks=)
                          2: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 8L2dffl4g1ilG1l5/B+kC7djnpjUVSHg7XLmPYAhjYI=)
                          3: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: OX3RHdtuqmLEvG1ZYjgRikhuEWksaQB7VsQm/hmQ+LY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:64:21:c7:38:e6:5f:57:1b:a8:b9:04:5d:28:80:48:4d:5e:66:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
        Validity
            Not Before: Jan 31 06:41:32 2025 GMT
            Not After : Feb  1 06:55:32 2025 GMT
        Subject: CN=BBBB41BA3BA5DD501D83A8F3307D9C89446405CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:d5:7a:d9:43:95:c0:d2:55:5d:88:83:5d:
                    e5:89:76:cf:52:04:b1:ea:a4:7f:3b:06:c3:e9:6a:
                    d0:c8:ee:54:23:87:c2:43:c1:a6:79:10:ba:f7:40:
                    16:4f:0a:66:00:2a:fd:cc:93:e4:1b:a8:f4:fc:79:
                    02:09:b8:90:61:4c:6d:48:75:53:f0:94:ff:59:07:
                    8d:de:16:f8:77:35:9c:a1:e0:4a:1e:aa:a1:21:d9:
                    8d:7b:c9:f9:7e:e3:83:e4:50:8d:9c:c5:4f:1f:ac:
                    86:6e:08:5a:8e:33:b7:19:2e:e7:d5:2a:f5:7e:ae:
                    40:c7:d5:55:73:ab:de:29:b2:78:b1:9d:93:60:19:
                    02:dd:fc:96:d1:86:1b:1f:eb:40:84:bc:cd:56:fc:
                    ae:62:36:30:92:23:16:0e:19:3c:46:30:1b:2e:6c:
                    83:a0:78:1d:10:d6:de:09:fd:74:a6:b1:62:4c:c0:
                    f7:97:d8:30:58:e3:d9:db:fb:4e:ed:7f:3a:39:8c:
                    7b:3c:81:62:89:95:36:4d:52:48:19:66:8d:05:fc:
                    12:a2:f5:48:bf:36:3f:8a:fb:8f:fb:e5:21:0c:e2:
                    8e:f2:f3:89:8b:2c:42:3a:83:30:56:87:b2:4f:9a:
                    e3:93:62:36:c0:41:25:92:06:b5:35:cb:c0:26:44:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BB:41:BA:3B:A5:DD:50:1D:83:A8:F3:30:7D:9C:89:44:64:05:CA
            X509v3 Authority Key Identifier:
                keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:02:e3:89:7a:4c:c6:c1:6e:f3:4b:86:90:8a:68:81:ef:
         1c:49:2f:9b:4e:38:a7:0f:42:18:c0:b9:4c:2f:14:f5:b4:40:
         6f:2c:6c:7c:f1:45:69:9d:b4:8f:8e:0a:a3:90:88:8f:44:ff:
         d1:ca:e3:13:9c:7c:ee:89:ea:07:d6:45:34:16:da:4b:c1:72:
         b3:e5:f5:42:84:58:45:82:5c:a0:b1:61:48:08:2d:f1:91:10:
         02:ca:3e:d5:c2:d8:6c:a7:fc:14:13:12:96:5e:3f:92:aa:7d:
         33:b2:bd:7d:2e:51:17:2d:5a:49:f0:d3:5e:df:62:da:8e:83:
         c3:c3:66:7b:21:29:6a:40:cf:db:c1:12:dd:69:0e:54:76:70:
         62:15:ba:cd:84:fa:b4:28:87:77:fb:86:10:e8:80:e8:dc:28:
         da:31:2d:db:eb:bd:c9:e9:b9:6f:a7:88:17:b5:ca:83:84:6a:
         f9:b4:a1:c7:f2:84:47:88:05:64:5f:f3:2c:9f:6d:74:1c:ce:
         3f:c2:0e:7d:1a:cd:eb:7a:8e:28:1d:bc:a3:64:b0:42:c6:dd:
         5a:73:e6:6d:a6:cd:5f:49:97:8a:94:6a:17:6d:8c:38:6d:b4:
         d0:d8:5b:e7:8c:72:ae:a4:19:fc:ec:5b:94:e4:8d:91:c5:04:
         3b:26:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----