Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
File:                     1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json)
Hash identifier:          zchbGWAYFjwsmc2nsNjKr7FVtYiGQdXWHNuGFwG/8VQ=
Subject key identifier:   B7:3C:43:79:00:DB:6C:29:88:37:11:3E:A2:01:30:53:4F:DE:EF:B9
Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71
Certificate issuer:       /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
Certificate serial:       27D15F6A1D29A80A0E7EB12E0E526895D96669C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
Manifest number:          0224
Signing time:             Tue 19 Aug 2025 17:50:31 +0000
Manifest this update:     Tue 19 Aug 2025 17:45:28 +0000
Manifest next update:     Wed 20 Aug 2025 18:49:28 +0000
Files and hashes:         1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=)
                          2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=)
                          3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 7rFm4se6yGNQdebrVK090tcCRIHDunh9zf0qtvAzhUE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d1:5f:6a:1d:29:a8:0a:0e:7e:b1:2e:0e:52:68:95:d9:66:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
        Validity
            Not Before: Aug 19 17:45:28 2025 GMT
            Not After : Aug 20 18:49:28 2025 GMT
        Subject: CN=B73C437900DB6C298837113EA20130534FDEEFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:5d:af:79:30:3e:ef:92:80:d8:8e:cb:58:
                    e7:52:d9:81:84:1c:d5:93:d8:ea:7c:27:95:ed:d3:
                    62:2a:e8:dd:86:52:7e:4a:93:df:50:c6:2b:38:88:
                    99:bc:3a:52:99:0d:05:a5:7c:cf:3d:a9:55:30:36:
                    79:a4:3d:1b:e1:b8:6f:19:ea:29:b6:40:fb:f9:cf:
                    d3:60:af:cf:0c:9b:b2:fe:6b:39:dc:bd:57:36:11:
                    db:e4:55:7b:53:3f:69:d0:cb:e5:5e:8b:c0:ba:8e:
                    97:e6:23:96:07:89:38:f6:47:70:b2:a2:9c:16:4a:
                    dd:fa:d1:c8:87:3e:87:51:a9:77:74:43:f1:17:7b:
                    30:28:14:c8:51:ad:72:af:8a:98:40:64:3c:73:08:
                    49:3a:a2:7a:13:49:9f:da:a9:8d:fe:e5:e7:20:e7:
                    4f:d3:41:99:15:cc:c0:bd:85:f4:f9:50:05:ed:f2:
                    b7:9a:6e:ba:d7:00:8d:77:e1:57:cb:3c:c9:20:01:
                    cb:ac:7f:93:47:62:f0:99:c3:72:0f:6b:cb:37:8f:
                    3c:5f:82:08:fc:7a:49:57:ec:fb:e3:2d:40:05:ad:
                    90:c2:2f:df:fe:ec:31:17:a1:8f:16:5e:0b:c0:68:
                    ea:b6:17:91:82:14:4c:36:b1:3c:95:77:10:1f:4e:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3C:43:79:00:DB:6C:29:88:37:11:3E:A2:01:30:53:4F:DE:EF:B9
            X509v3 Authority Key Identifier:
                keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f5:93:b1:53:74:47:d9:61:b3:96:46:72:3f:ee:e6:40:ce:
         5e:ea:0a:f1:04:0f:20:ad:fc:c2:b2:96:e5:9b:d8:9f:39:de:
         33:61:40:1d:58:6a:45:75:41:63:c3:db:94:59:b9:90:ec:83:
         e7:39:41:65:af:7b:fb:5d:1b:aa:7c:74:54:76:a9:ed:74:dd:
         ff:ad:74:32:6c:32:2d:34:03:88:7d:93:ea:10:c2:bb:82:4f:
         fb:c6:f7:10:04:be:52:e7:20:18:da:e3:87:f9:38:e0:de:c8:
         f6:b3:f9:20:45:20:08:2b:c4:2b:8d:34:f4:d1:d8:3f:35:47:
         f8:f4:bc:6c:e3:7b:7a:59:e4:6d:8c:26:18:bc:29:80:46:22:
         b2:cb:5d:d9:30:68:1d:e9:79:b2:72:2c:90:94:9f:4c:39:75:
         0f:37:d3:37:a5:ab:7b:1e:c8:ac:f1:51:1d:6a:7c:c7:90:9d:
         08:58:45:98:74:61:90:38:c9:97:73:9e:f0:32:9a:af:f1:c6:
         73:62:d9:13:79:64:5f:35:86:77:db:d3:cd:5e:42:f5:1e:f9:
         03:1f:b2:bb:68:99:b9:ff:08:52:97:34:4b:a3:c0:14:d6:16:
         41:b2:33:81:b3:8a:03:27:58:61:28:6f:5c:58:98:d2:ad:35:
         2a:93:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----