Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
File:                     F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json)
Hash identifier:          Btjme8EogLEGdXf3XTOXvsM3B0e/W3K9mH5H3YUvn+Q=
Subject key identifier:   65:65:76:9B:A6:22:BF:55:55:E7:2E:0B:C6:4B:72:54:71:32:61:BE
Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
Certificate issuer:       /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Certificate serial:       7F528708523073FDE27323CFAC5ECEB791AE45DB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
Manifest number:          0116
Signing time:             Fri 31 Jan 2025 15:19:20 +0000
Manifest this update:     Fri 31 Jan 2025 15:14:18 +0000
Manifest next update:     Sat 01 Feb 2025 18:34:18 +0000
Files and hashes:         1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: f5yP5UKgCYBfIduhbRXrG3nSObLnlLYbYp7rJ7XTIGQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:52:87:08:52:30:73:fd:e2:73:23:cf:ac:5e:ce:b7:91:ae:45:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
        Validity
            Not Before: Jan 31 15:14:18 2025 GMT
            Not After : Feb  1 18:34:18 2025 GMT
        Subject: CN=6565769BA622BF5555E72E0BC64B7254713261BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:56:e1:3f:9a:02:9f:83:97:0c:79:0f:d7:
                    a2:e0:b8:0a:51:47:4b:a7:68:23:07:bd:04:82:fe:
                    84:8a:ef:b6:27:2f:10:81:b8:4b:08:0b:10:00:be:
                    0e:87:00:a2:c5:20:fc:41:e9:59:ae:da:db:06:a5:
                    60:ce:ba:b8:cb:07:0a:38:cc:d0:e9:bc:90:63:8a:
                    76:82:05:40:71:b0:27:31:a3:72:91:3f:4e:3e:c2:
                    f5:10:1a:aa:3a:c2:4f:8a:ac:88:f2:04:da:ba:e2:
                    92:5f:f7:1b:b0:b3:98:0f:40:05:b5:78:92:aa:49:
                    89:aa:72:64:fd:2d:9b:25:ed:11:fd:7e:3f:7a:84:
                    2a:7a:a6:dd:7f:4a:82:8a:a7:b5:bb:cb:6f:32:a2:
                    46:f6:fd:4b:f1:c6:fe:ea:7d:13:a7:96:70:68:f3:
                    85:b2:10:c2:e8:82:0a:4b:46:c4:32:f1:b8:9e:b6:
                    b3:10:c0:66:40:84:3a:49:29:74:1c:92:85:c9:27:
                    b8:3e:75:62:cc:a0:f3:73:0c:7d:2f:3e:11:91:86:
                    b8:ac:24:8a:11:65:e7:f1:19:03:ce:52:9d:3f:e1:
                    27:87:b2:34:8f:f6:ee:01:92:cd:a6:6e:be:dc:6f:
                    76:94:e6:ad:62:38:d4:a3:a2:bb:06:79:07:08:54:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:65:76:9B:A6:22:BF:55:55:E7:2E:0B:C6:4B:72:54:71:32:61:BE
            X509v3 Authority Key Identifier:
                keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:93:37:08:b7:89:16:7e:1d:88:df:34:7c:a9:9c:df:47:
         84:68:0c:89:8c:ef:49:d0:a9:48:80:3d:bb:d9:86:19:cf:e3:
         0a:14:5d:79:0d:f2:96:77:83:14:3b:29:55:b6:c2:3a:13:de:
         73:8b:d2:3b:03:1e:ae:df:c7:db:ee:01:94:2b:d8:a7:d6:06:
         5e:94:83:0c:13:99:a7:53:0e:54:1c:7a:48:b3:c8:d7:2d:4d:
         ae:80:46:a7:ae:c0:88:7a:61:fc:ab:85:ca:e2:4f:b7:ed:b7:
         8b:81:9e:f7:a4:8d:81:22:5f:92:8d:50:bb:18:e6:de:62:16:
         0b:09:46:f7:03:67:5c:41:91:66:70:6f:72:cf:9f:05:8c:4a:
         bb:aa:d8:bc:f7:e9:36:d0:54:eb:48:d7:1e:50:ea:e5:d1:e9:
         b9:00:8a:60:b2:6c:66:94:e6:ac:3c:a0:4a:ac:ba:94:96:d0:
         95:20:a6:fe:ff:13:54:1b:bd:d8:a0:ff:cd:9a:cd:b1:b3:35:
         6a:96:2c:97:d8:a3:a1:4e:78:a7:5a:88:27:bb:b9:96:e1:ca:
         e5:33:27:1c:fb:4b:d9:6c:04:90:58:59:3a:65:c3:91:c9:9b:
         5c:f3:96:28:66:17:de:f8:09:5b:39:69:23:58:91:13:65:60:
         cc:a6:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:04:07 2025 by rpki-client