Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
File:                     DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json)
Hash identifier:          omP0M3zwv6BhLoXVsHPmESE+ChIIj+w/vWverSh2ylE=
Subject key identifier:   52:4D:79:8A:63:5B:56:82:A9:41:10:AD:97:EC:49:D8:EE:C6:04:45
Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1
Certificate issuer:       /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1
Certificate serial:       14E80411ED264BC1E9F0EE8C24F716E6D2BE1B9F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
Manifest number:          0221
Signing time:             Tue 19 Aug 2025 23:01:27 +0000
Manifest this update:     Tue 19 Aug 2025 22:56:25 +0000
Manifest next update:     Thu 21 Aug 2025 00:47:25 +0000
Files and hashes:         1: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: gnw5Bq+MwMdg91mo4z/WU+shH4OfVtD0s/ht33tOIA0=)
                          2: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e8:04:11:ed:26:4b:c1:e9:f0:ee:8c:24:f7:16:e6:d2:be:1b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1
        Validity
            Not Before: Aug 19 22:56:25 2025 GMT
            Not After : Aug 21 00:47:25 2025 GMT
        Subject: CN=524D798A635B5682A94110AD97EC49D8EEC60445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:fb:ae:76:95:b3:25:d5:56:55:3e:94:ad:
                    29:45:4d:2f:2d:84:cb:ab:bc:00:58:be:df:9c:e5:
                    ec:01:26:50:d0:d2:7e:53:6d:46:a3:6a:56:b8:3d:
                    4c:2f:8d:2c:6f:a5:87:c4:fc:43:b4:5f:21:cd:b0:
                    d5:61:9d:e4:f8:2c:18:a6:f1:69:8b:43:3c:7a:16:
                    f6:95:86:a1:e3:22:6f:f6:dc:bb:d5:54:2e:17:53:
                    1b:ba:66:f8:9a:43:e2:05:da:8f:d6:39:f1:51:42:
                    b2:c2:ee:e2:fa:47:94:73:17:c5:68:73:67:d4:29:
                    89:35:0a:e0:90:bd:a5:e2:2c:0e:38:2a:57:33:42:
                    b9:54:f2:41:d6:aa:25:47:c8:64:47:2b:9f:d7:a7:
                    b7:aa:1a:0a:13:41:b0:dc:d5:76:39:88:4c:28:f4:
                    f2:16:4d:08:70:3a:a5:65:a8:cd:6a:f8:c0:9b:2c:
                    50:cc:79:17:e1:b1:5c:86:a9:38:02:08:88:62:e2:
                    a1:10:9c:fb:50:d2:f8:b3:d7:4f:5a:1d:61:be:51:
                    4d:bc:b4:30:78:60:48:f8:e8:e9:9a:29:9e:0b:24:
                    85:24:e8:36:d9:6f:bb:58:a5:de:ab:2c:a8:6d:f0:
                    54:2a:c4:b7:8f:6e:90:96:ee:3c:c3:15:97:81:b9:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4D:79:8A:63:5B:56:82:A9:41:10:AD:97:EC:49:D8:EE:C6:04:45
            X509v3 Authority Key Identifier:
                keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:91:d4:a1:14:75:0b:20:6a:24:c8:a2:fa:70:d4:31:1e:c1:
         37:ab:fa:4b:ef:cd:c9:5a:68:b7:df:0a:83:00:7b:17:06:81:
         33:6f:aa:9b:97:35:0e:01:0f:9e:a1:ae:65:01:4b:77:19:71:
         3d:22:4f:e8:d3:9a:d4:5d:6d:58:ac:01:c3:05:bb:9f:b2:80:
         06:b0:bc:ca:a8:c0:eb:f6:c6:70:a4:4d:16:25:cc:70:8e:96:
         9b:b9:71:2b:2c:87:12:91:8e:25:12:f0:8a:e2:c0:b2:1c:47:
         8d:e3:be:ac:93:02:11:22:3d:3c:65:0a:ea:65:08:7c:e8:15:
         73:1a:2e:3a:c7:b3:22:c5:59:e9:d6:58:95:2d:9e:3d:ef:8d:
         4c:8f:bc:2b:95:8d:09:aa:ef:7d:b1:81:38:3e:dd:a3:03:e5:
         8f:e1:08:08:f2:3c:44:56:33:71:3f:27:01:a5:27:01:1c:72:
         a0:d0:1b:28:8a:2e:38:da:95:da:b4:aa:b8:1e:c8:1a:6a:3b:
         44:f0:cf:c8:91:af:a5:f2:4a:1e:0d:f4:f5:6a:2a:a2:de:5c:
         a0:1a:48:5c:02:5a:d5:80:86:94:88:2b:65:75:91:5d:f9:24:
         f1:30:fc:b0:05:7f:c4:db:98:88:10:66:70:5d:7f:f4:df:f2:
         49:09:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:40:00 2025 by rpki-client