Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json)
Hash identifier:          8H6TXUAjXdjbx2QhbdzPUkISDgtqWQmoj0VbOvt7bkQ=
Subject key identifier:   C5:22:0F:AF:DD:E0:CE:2F:50:79:C3:A2:A5:C9:05:81:4C:11:53:E0
Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Certificate issuer:       /CN=44C4C913D58F5EF847996241E969B60A1E3F1389
Certificate serial:       42A10202A209E4CE1D20093C314919EC541B6473
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
Manifest number:          0117
Signing time:             Fri 31 Jan 2025 04:38:28 +0000
Manifest this update:     Fri 31 Jan 2025 04:33:26 +0000
Manifest next update:     Sat 01 Feb 2025 05:42:26 +0000
Files and hashes:         1: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: 7hFQ2fphXwahaMoTubiz5LcppCCDV985Dg0s/VHtMx8=)
                          2: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: CtT06XF+wHp0bDZY3GIazeRfTza/X82k9WsawhzPe+s=)
                          3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:02:02:a2:09:e4:ce:1d:20:09:3c:31:49:19:ec:54:1b:64:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Validity
            Not Before: Jan 31 04:33:26 2025 GMT
            Not After : Feb  1 05:42:26 2025 GMT
        Subject: CN=C5220FAFDDE0CE2F5079C3A2A5C905814C1153E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:4b:e0:d7:10:bc:41:06:40:f0:03:e4:c2:
                    1f:d2:6c:7b:ac:d2:87:f9:9f:62:c5:05:80:9d:4e:
                    62:49:1d:55:92:3c:7c:08:82:95:b0:77:a3:5f:bc:
                    97:d0:22:27:d7:a5:18:61:49:95:d1:53:61:b3:8f:
                    41:6c:05:75:5d:bb:c7:55:af:c9:cc:da:f6:17:66:
                    56:66:60:8a:19:20:2b:e4:4d:fe:02:e6:59:3d:b9:
                    4d:1f:86:24:62:96:f2:b5:ba:df:4b:88:b4:11:c8:
                    50:dd:90:51:b7:f3:d4:05:35:2a:ca:98:8d:7e:26:
                    a5:b3:3b:9f:e2:d3:a5:12:75:60:61:b5:0d:a1:4d:
                    79:1f:3f:66:fc:d7:c4:3e:11:81:a9:02:69:0e:09:
                    1c:a0:b7:90:e3:25:4a:46:77:f2:4b:5c:96:f5:77:
                    26:3c:1b:35:fe:0d:2c:2d:86:9a:b8:d2:02:9d:a9:
                    d8:43:f3:82:88:ee:02:53:d1:01:1c:2d:de:8a:e0:
                    3d:5c:a5:54:dc:ed:90:f0:4e:f9:a0:6a:b3:9d:fa:
                    b7:d7:0a:31:3e:dd:ec:0e:15:94:8c:30:3c:c9:c6:
                    c3:2d:dc:e1:71:34:cf:5a:c3:ca:3d:28:ca:0c:0f:
                    b6:76:b8:05:13:a8:8a:85:c2:1e:f7:d4:8c:06:0c:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:22:0F:AF:DD:E0:CE:2F:50:79:C3:A2:A5:C9:05:81:4C:11:53:E0
            X509v3 Authority Key Identifier:
                keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:a8:d7:81:9d:72:2c:23:d5:03:51:f3:b2:ba:71:84:5c:
         fb:46:2a:ea:90:21:6c:97:a1:a8:4f:35:c1:90:80:98:3d:bb:
         08:6f:09:d6:bd:2f:81:1f:ae:41:4f:5b:15:54:02:a7:f6:34:
         c5:c6:a2:a4:bd:bf:43:aa:4f:0f:a1:66:8e:24:bc:5f:b5:dc:
         7a:3e:2d:0e:98:7a:78:50:98:e1:eb:a5:b0:51:dc:e3:d8:71:
         37:40:39:55:07:7e:37:a2:2d:e8:a2:ec:67:4a:58:ff:5a:d9:
         d7:9b:b9:75:c5:0b:a6:e5:ec:0f:2c:12:42:b4:a8:73:ae:54:
         98:07:3d:06:2f:63:7d:53:83:60:40:f7:7c:34:f1:17:98:e9:
         4e:60:13:e2:56:27:e2:00:31:4c:be:71:d2:0c:4b:89:d0:a2:
         ce:be:e4:84:a0:8e:27:d3:34:15:9b:6e:26:be:62:f2:cf:ce:
         f9:e0:f4:f4:23:3c:b2:77:31:7b:6c:7f:52:5e:a9:ec:d1:fb:
         22:3d:5b:30:ee:8d:18:5e:47:8c:f5:0a:b5:30:b2:ab:04:e5:
         71:ca:21:6d:99:1e:d6:89:b9:ec:6f:a9:7c:78:cc:cf:79:96:
         e2:23:29:be:ea:ed:a0:a5:2f:52:b6:c0:0e:05:86:33:8f:ad:
         ab:89:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:00:20 2025 by rpki-client