Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
File:                     1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json)
Hash identifier:          kq4grgXWHEm3KNmsO3EhMyeEag4WE24VaimpPGkkkiE=
Subject key identifier:   86:A2:A2:70:25:05:3A:30:AC:31:C0:69:D4:0A:52:FB:82:90:C0:0A
Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
Certificate issuer:       /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Certificate serial:       20E01D17986A971D19CD0FCA5370BD477E3D08D8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
Manifest number:          021F
Signing time:             Wed 20 Aug 2025 04:29:56 +0000
Manifest this update:     Wed 20 Aug 2025 04:24:54 +0000
Manifest next update:     Thu 21 Aug 2025 07:55:54 +0000
Files and hashes:         1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=)
                          2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: 8M/leweQ2+/ft2mMHEAE+i9QiTOSyjbqm8LtYKe89tQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e0:1d:17:98:6a:97:1d:19:cd:0f:ca:53:70:bd:47:7e:3d:08:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
        Validity
            Not Before: Aug 20 04:24:54 2025 GMT
            Not After : Aug 21 07:55:54 2025 GMT
        Subject: CN=86A2A27025053A30AC31C069D40A52FB8290C00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:2b:56:fc:3e:04:58:ba:b1:66:da:ed:a0:
                    79:9f:72:ea:f2:72:5c:6a:57:3d:1f:e9:a8:a4:47:
                    dc:1f:b8:32:a6:b9:77:d0:c2:61:a9:3e:55:4c:d9:
                    98:28:8b:8f:60:6a:45:15:d1:38:09:ce:e2:6c:05:
                    89:b8:f3:05:03:84:15:48:a3:f2:c6:4c:e1:ed:4f:
                    32:75:73:41:92:e9:f2:85:85:db:18:32:1b:45:5a:
                    f3:ef:50:96:da:01:e7:07:39:42:17:17:20:62:7c:
                    c3:13:67:12:a8:6c:ac:81:2b:00:16:1b:54:d6:77:
                    3e:4a:6e:04:5f:4c:6c:09:79:34:bf:42:27:6f:e9:
                    06:47:31:7a:f8:05:14:cc:38:be:a7:22:94:18:da:
                    ea:51:19:de:ce:d7:e6:cd:7d:25:1a:89:8d:83:97:
                    5e:cb:de:05:53:dc:46:63:5b:82:d0:74:61:4f:97:
                    25:6a:18:c4:10:ad:47:a2:f1:ed:5b:07:85:1e:0b:
                    c3:fb:77:2e:38:c2:c0:f7:9a:ad:63:e2:ee:12:f9:
                    85:6a:a6:ef:73:ca:54:ed:c8:d8:35:86:52:d1:4d:
                    af:3c:c0:8c:95:ea:03:d1:b3:24:72:e3:b4:f2:b0:
                    6a:aa:18:7a:ac:e5:40:e3:1d:08:21:5d:15:b3:2c:
                    9b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:A2:70:25:05:3A:30:AC:31:C0:69:D4:0A:52:FB:82:90:C0:0A
            X509v3 Authority Key Identifier:
                keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:70:95:f9:5d:39:ed:8e:82:ff:88:94:66:b3:16:a5:42:
         20:b7:6d:48:ff:a6:17:d8:d5:b9:1e:fe:b9:bd:e0:b1:6c:96:
         9f:cc:d8:09:cb:b4:7d:0a:87:f6:b1:56:51:52:66:e4:56:5c:
         6e:65:31:17:29:20:57:d2:24:77:82:49:0d:1f:99:72:32:b0:
         61:ab:8c:f9:2a:16:d9:2d:af:25:e1:3f:7c:5c:8c:91:87:b7:
         38:0d:0f:42:b9:a7:92:d6:c3:f8:b3:87:10:aa:f9:34:57:e2:
         f4:eb:4c:db:95:74:53:6c:fb:26:18:9f:78:42:93:68:e1:cc:
         a2:c0:db:15:61:4c:84:48:57:0d:33:d4:88:fa:63:cf:c6:1f:
         9c:b3:aa:33:0a:c4:73:3e:a9:ec:df:fb:86:03:cc:6e:0a:9c:
         b1:18:fc:1a:48:9b:3e:c3:e2:46:a5:24:89:36:cf:0b:8a:f1:
         aa:34:ad:e1:25:d3:95:65:48:6b:3c:56:94:4f:ac:77:85:b0:
         73:1d:08:de:d1:be:53:b1:d8:2b:d1:e1:cd:fd:8b:26:2d:ed:
         48:82:a1:93:aa:53:2f:a6:59:c8:6f:15:dd:0f:2a:84:9a:ee:
         0d:b2:a0:85:b1:e4:81:ba:e6:b8:c5:2f:c3:bc:b9:0a:c8:bb:
         90:50:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:23:34 2025 by rpki-client