Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File:                     1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier:          yG5I3su5PiQlXNctiV3K3pXXHYmxwxSOCHPQ1uIsX/Q=
Subject key identifier:   DD:35:30:1B:70:E4:B0:73:32:A1:73:7A:BB:14:A7:24:A0:1B:5B:9F
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer:       /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial:       099352714CB3BBF70BAB6D5422A4FC9D3208D708
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number:          0118
Signing time:             Fri 31 Jan 2025 14:29:03 +0000
Manifest this update:     Fri 31 Jan 2025 14:24:01 +0000
Manifest next update:     Sat 01 Feb 2025 15:08:01 +0000
Files and hashes:         1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: LoqAfVImKg9ma2K+9Exwc+DYsfzqN2piz4fidaq2ioQ=)
                          2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rM7Iz0AdMAoRVTiJd3bICea3rYWVyAIw/EdVZlqCGD0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:93:52:71:4c:b3:bb:f7:0b:ab:6d:54:22:a4:fc:9d:32:08:d7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
        Validity
            Not Before: Jan 31 14:24:01 2025 GMT
            Not After : Feb  1 15:08:01 2025 GMT
        Subject: CN=DD35301B70E4B07332A1737ABB14A724A01B5B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:8c:d3:7e:c6:07:f8:c9:48:ef:70:de:27:
                    c7:8b:53:1b:3f:a5:7d:2f:a3:11:75:8a:65:a0:40:
                    16:71:6e:01:17:bf:11:ff:3c:62:8c:ed:41:1e:cb:
                    3e:df:0f:3f:09:9b:ab:a8:35:02:04:46:02:04:5a:
                    05:4f:2c:4d:61:3d:54:5e:17:29:6e:4e:d3:2d:7c:
                    21:f5:65:3e:dc:58:4d:ed:94:b1:f2:82:bb:81:26:
                    e5:8d:0a:27:82:76:66:64:f9:f1:05:b5:38:5a:3e:
                    f9:45:39:e2:5c:57:84:a6:f1:b4:01:c9:eb:49:9c:
                    ff:4b:15:0f:cb:19:70:d9:22:cc:44:22:00:4b:b8:
                    bd:92:7a:a3:42:04:96:92:c8:55:c9:32:64:27:be:
                    06:a2:30:59:c6:85:b4:ec:7e:16:6d:5e:58:d3:5d:
                    68:30:8f:ae:20:f7:90:58:a5:30:54:f7:63:7b:42:
                    c7:00:c1:70:a0:de:43:42:c0:11:ef:62:e0:6f:fc:
                    14:7e:62:f8:6c:77:d0:74:47:f2:38:90:54:b5:f8:
                    6f:68:20:b8:15:02:76:1a:78:fd:fd:70:94:e4:43:
                    5a:d8:3a:a7:b3:b4:7b:5c:a1:d5:4d:a2:cf:bb:33:
                    3b:5b:31:06:d1:f0:88:60:e5:87:d8:cd:9e:c3:4b:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:35:30:1B:70:E4:B0:73:32:A1:73:7A:BB:14:A7:24:A0:1B:5B:9F
            X509v3 Authority Key Identifier:
                keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d9:c1:80:49:c6:16:ff:fb:26:9e:e9:60:73:6c:fe:2c:6b:
         71:6f:7d:31:21:b0:d4:08:d9:d8:30:f5:d5:93:50:e8:7a:fd:
         13:27:74:fd:60:5b:cc:6a:b4:34:d8:fe:0c:69:3a:c1:52:48:
         db:4d:89:ce:2d:ce:2e:46:3c:e2:70:61:9d:db:9b:09:9d:8c:
         db:ec:b1:c2:06:23:95:67:45:75:04:5b:a5:d7:2c:ec:65:b6:
         af:93:5c:c3:5f:d9:55:e2:0d:89:cb:e1:d5:43:76:61:93:c5:
         43:b3:66:24:fa:7d:ec:cb:0b:8f:e0:22:f7:98:9a:a2:91:ec:
         25:38:16:79:f2:ea:14:25:58:95:cc:00:7d:a5:64:a6:5d:55:
         ed:7b:f7:d5:eb:f3:87:6b:1a:0c:12:df:a8:50:82:5f:fc:5f:
         2b:29:94:45:2b:cb:ca:d1:b4:71:7a:70:a4:5f:cb:d5:17:fd:
         9f:c6:19:1a:97:b4:d4:d4:50:cc:f0:04:83:56:b9:86:88:53:
         dc:6f:99:5b:ef:f6:8d:2b:f5:93:62:77:a4:9e:f6:fc:35:c8:
         ec:c4:5e:2e:68:7d:d0:dc:84:36:70:11:e3:12:b8:a7:71:29:
         ce:5c:dd:63:03:dd:64:a0:69:62:d4:3d:94:df:b0:af:b2:5a:
         b4:14:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:05 2025 by rpki-client