Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
File:                     1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json)
Hash identifier:          Fiqq9vdIe/+YflnM07azohmrYl3hgwHk8Q9gD3eazkc=
Subject key identifier:   C6:9E:60:38:B3:D5:2E:37:44:D7:34:2C:13:58:9F:EE:AE:4A:06:9C
Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Certificate issuer:       /CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Certificate serial:       6AB20DF487224AFD49D2731FE52AC829C759B95C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
Manifest number:          0220
Signing time:             Wed 20 Aug 2025 01:12:09 +0000
Manifest this update:     Wed 20 Aug 2025 01:07:06 +0000
Manifest next update:     Thu 21 Aug 2025 03:55:06 +0000
Files and hashes:         1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: oPuA7WR9tnFxDUEoSJNQb+OuwF9Rl0BoYXhj7jU1CPs=)
                          2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b2:0d:f4:87:22:4a:fd:49:d2:73:1f:e5:2a:c8:29:c7:59:b9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
        Validity
            Not Before: Aug 20 01:07:06 2025 GMT
            Not After : Aug 21 03:55:06 2025 GMT
        Subject: CN=C69E6038B3D52E3744D7342C13589FEEAE4A069C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:c5:e1:ac:39:f9:13:9a:b9:22:a4:9c:cd:
                    fb:1c:1f:9b:98:45:d4:9a:77:3c:87:86:d4:39:fa:
                    7b:97:b9:81:5b:08:c8:f9:7a:e3:43:87:22:61:21:
                    49:64:e7:e0:00:de:75:32:4d:af:71:0e:51:ae:dc:
                    6b:12:da:7a:85:7f:ed:6c:ee:3c:8f:08:e8:69:12:
                    a7:4d:a4:fd:5c:91:1e:0e:63:95:d6:80:bb:78:d5:
                    6e:7f:a6:3f:c3:a8:63:d0:fc:26:cf:f2:41:d8:e1:
                    c0:e5:22:45:b1:14:89:8f:4b:06:bb:a1:c2:72:65:
                    46:dd:22:69:0d:b7:f6:34:73:39:80:ce:f8:f6:7b:
                    d8:2c:d4:04:bd:0e:c7:a8:72:58:ec:cc:87:3c:e9:
                    f4:b0:cf:f5:1c:27:e4:e6:f5:41:0d:3b:7a:ea:21:
                    16:5d:a8:d7:58:70:b7:7f:7d:a0:fc:5f:24:77:cd:
                    51:91:f7:79:c6:4c:87:10:7b:2e:da:ff:8a:35:18:
                    23:b5:cc:b9:49:19:f3:0b:08:de:6a:06:6e:b8:16:
                    55:bf:45:08:64:b7:65:9e:23:2e:ae:7e:e2:18:ae:
                    6e:fe:5c:4d:e0:0e:74:42:d5:c8:ef:dd:18:88:6d:
                    ce:81:06:6f:74:dd:d0:39:8e:59:c9:1e:33:29:d0:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:60:38:B3:D5:2E:37:44:D7:34:2C:13:58:9F:EE:AE:4A:06:9C
            X509v3 Authority Key Identifier:
                keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:83:7d:7f:81:18:5f:bf:9e:32:04:eb:b5:f5:f3:84:b1:
         00:45:d8:3a:8e:ba:bf:ff:8d:29:9c:16:a2:3b:30:58:10:28:
         e9:0f:3a:ba:65:70:c9:2e:62:e2:eb:b8:69:e8:ef:4c:83:20:
         75:91:b5:40:a5:bd:da:e5:43:32:10:ff:dc:00:d6:77:a4:47:
         f4:ed:c5:ef:88:ea:e4:e6:75:01:77:51:9c:eb:83:d3:82:65:
         c7:53:34:a4:dd:97:ee:ae:52:43:26:fb:91:e7:c7:8e:44:e4:
         76:33:1b:3c:2e:4a:64:65:c5:6c:65:ae:94:3d:ff:ca:58:68:
         4a:59:8d:ec:56:ed:85:95:88:4b:95:99:9e:71:70:42:20:a3:
         76:ec:9e:38:04:c6:1e:10:c1:7c:b7:7d:0f:f2:75:1e:3a:d1:
         f4:9f:6f:fa:2f:c3:6e:42:3a:c6:d6:b1:58:2f:b2:75:76:76:
         c2:80:1c:37:f7:3d:7a:67:7e:80:7a:a2:bd:73:d6:53:0b:71:
         b4:dc:d9:41:3d:0b:29:c9:51:3d:8e:79:57:4b:d8:9b:62:43:
         28:54:0b:7b:8d:bf:da:e2:0e:63:2c:da:36:7a:66:0a:99:00:
         b1:09:f8:21:ba:b6:33:d9:cb:6f:c8:ac:0c:22:a9:48:b2:ed:
         c9:98:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:34 2025 by rpki-client