Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
File:                     31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json)
Hash identifier:          LeOjo0jCVAAtosNq1qkUv1dQ/fZXnTiVG2ycXr51oxw=
Subject key identifier:   2E:12:E7:A9:F8:8B:E1:66:51:BB:91:2A:04:B7:75:34:17:84:03:47
Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
Certificate issuer:       /CN=31586760843F668A816117EA02F6F30FE8F9C359
Certificate serial:       07B4A46519290B6FAB83B6AE649C877112B587A7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
Manifest number:          0220
Signing time:             Tue 19 Aug 2025 23:41:08 +0000
Manifest this update:     Tue 19 Aug 2025 23:36:06 +0000
Manifest next update:     Wed 20 Aug 2025 23:49:06 +0000
Files and hashes:         1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=)
                          2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: aQ4U0nwjXca+KpM720Tzls3iAkA35uwAMNus5Vr750I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b4:a4:65:19:29:0b:6f:ab:83:b6:ae:64:9c:87:71:12:b5:87:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359
        Validity
            Not Before: Aug 19 23:36:06 2025 GMT
            Not After : Aug 20 23:49:06 2025 GMT
        Subject: CN=2E12E7A9F88BE16651BB912A04B7753417840347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:7b:20:e5:b4:a5:48:67:c5:04:db:2f:f6:
                    46:4e:28:95:23:b9:57:1d:87:5d:e7:b9:0a:7f:69:
                    53:d5:45:a9:55:7a:b7:ee:cd:3e:5f:16:dc:b4:a0:
                    64:12:e7:9f:b6:45:4b:1b:81:c4:e5:da:9c:10:2c:
                    21:62:b8:dc:f2:04:ab:2f:79:de:33:e5:0c:e8:8d:
                    26:54:dd:48:46:26:f4:d9:0e:e2:42:6b:36:1b:3e:
                    65:f6:c5:6b:40:ea:36:22:8d:a3:c2:e1:26:f5:22:
                    42:75:14:c0:0e:7b:6f:48:be:c7:b4:77:d8:b5:52:
                    05:79:ee:a4:25:11:29:1a:57:a2:ef:39:a7:ed:79:
                    ab:25:54:14:92:f0:9b:77:cb:8f:d1:25:b5:c6:3a:
                    3a:e4:00:07:89:77:f7:93:2d:73:49:9a:ea:c3:b4:
                    a0:4a:22:03:5a:78:ce:61:c6:f4:c5:e8:fc:37:49:
                    99:ff:23:c3:ac:8b:a6:26:e2:f8:09:9e:8f:c3:9b:
                    4a:3e:c0:d4:42:04:ca:b0:be:27:ec:70:17:a3:c3:
                    4b:69:54:ae:6c:cc:99:7b:eb:00:60:77:dc:53:d4:
                    88:c7:67:d9:18:ff:25:d0:b9:42:b1:f0:0c:31:96:
                    e9:db:63:32:af:9a:66:98:e5:75:21:ce:75:ce:05:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:12:E7:A9:F8:8B:E1:66:51:BB:91:2A:04:B7:75:34:17:84:03:47
            X509v3 Authority Key Identifier:
                keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:a3:37:06:81:15:57:69:9d:20:ee:b9:5a:59:a2:9b:65:
         7b:b9:88:44:de:19:b4:69:18:13:ae:85:69:20:07:e6:ba:bc:
         06:e0:6b:2b:09:13:d3:4d:2b:af:92:04:1c:ad:53:b1:1d:dd:
         c6:1e:7f:46:37:f2:41:7b:e5:f6:5e:9b:9a:fe:cc:d7:72:96:
         6c:b3:25:29:2b:0d:f3:ab:11:97:d9:9c:56:90:09:36:6a:6f:
         d8:c4:03:56:19:b4:52:fe:ff:15:8d:74:a8:71:4d:3c:c0:f9:
         00:3f:5e:dd:71:90:17:bc:f6:8f:4c:e6:ff:ea:e6:d7:89:7a:
         8d:66:a9:82:de:14:c4:22:9e:ff:db:cf:6e:cf:20:05:7c:c7:
         40:2f:be:3a:74:76:ea:f1:22:79:cd:df:52:77:9e:3c:2d:c6:
         07:98:5d:67:06:c7:9f:b2:ec:5e:d8:e1:28:28:ac:ab:ed:3c:
         a2:4e:f4:e0:ea:a2:a2:d8:27:0f:c0:4e:ed:6c:c4:15:77:a2:
         d9:5c:dc:d1:3c:30:ac:fb:99:02:d6:ea:7f:bf:4a:ce:ae:f7:
         4d:c0:60:0c:93:4a:fc:fa:b6:93:67:f1:ff:24:14:eb:31:d2:
         3d:9b:3f:64:f6:e1:24:9e:ae:4c:26:02:52:f5:46:8f:be:9a:
         3c:0f:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:12:10 2025 by rpki-client