Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File:                     10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier:          /XUyWAD+/9HyTf2wHtjDtwzPk37dM6784X4/MJA6xfU=
Subject key identifier:   3D:80:CF:FA:92:FF:13:6A:4A:42:1C:9D:96:44:E6:31:23:E9:C3:E5
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer:       /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial:       1794E8712F6BB4A16A01411501D6E281A1C30A6C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number:          0223
Signing time:             Tue 19 Aug 2025 22:21:55 +0000
Manifest this update:     Tue 19 Aug 2025 22:16:52 +0000
Manifest next update:     Thu 21 Aug 2025 01:04:52 +0000
Files and hashes:         1: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY=)
                          2: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: kJVIsU1fWTZLgqYSDQWxDIr0ltpi6emfNSbOZu2V85U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:94:e8:71:2f:6b:b4:a1:6a:01:41:15:01:d6:e2:81:a1:c3:0a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
        Validity
            Not Before: Aug 19 22:16:52 2025 GMT
            Not After : Aug 21 01:04:52 2025 GMT
        Subject: CN=3D80CFFA92FF136A4A421C9D9644E63123E9C3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:de:ca:11:ae:36:ac:ec:f2:f8:04:48:ef:
                    1e:40:ca:13:23:a7:c5:bd:79:55:3b:c4:63:36:a3:
                    c6:10:ea:24:3d:ef:9b:e0:32:94:54:c5:d2:41:f1:
                    02:a8:07:ba:7f:df:9c:02:7a:6e:75:89:72:f5:8a:
                    cf:8b:b6:e1:fe:6d:69:2a:1d:e5:f0:1e:c4:9f:f7:
                    3f:63:fb:be:6e:bb:98:df:e4:9b:46:3c:48:23:d2:
                    24:77:c6:9f:9e:f2:f3:a7:3f:f2:7d:c4:24:0f:1b:
                    10:65:ad:5b:c0:fe:c4:99:71:87:53:e1:32:0c:2d:
                    76:9e:70:1b:29:8f:94:94:d8:a1:20:12:22:14:e3:
                    b6:f9:5f:0f:c1:5a:85:b5:1b:76:a2:c2:a2:52:6e:
                    0a:4f:0f:01:0b:c2:6d:1a:51:2a:21:cd:7d:b5:c9:
                    79:28:05:fd:b0:c7:e2:49:10:c1:c8:67:0a:b0:31:
                    c8:53:fe:90:02:f6:8c:16:11:a4:61:48:55:ae:0d:
                    c6:86:d5:0c:8b:08:18:96:5e:00:2f:87:8d:6c:f5:
                    9b:c6:20:49:ef:52:bd:9b:5f:85:07:a6:77:71:3c:
                    58:37:a9:ae:53:3e:8b:90:b4:fb:5b:fa:37:c3:78:
                    c8:48:19:b6:4e:82:7e:1d:30:5f:81:5b:db:11:6e:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:CF:FA:92:FF:13:6A:4A:42:1C:9D:96:44:E6:31:23:E9:C3:E5
            X509v3 Authority Key Identifier:
                keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:d2:80:9f:6e:4f:96:6e:a9:5d:18:5c:7b:c1:fb:51:2b:
         9e:32:79:2b:73:be:7b:47:0a:34:96:f8:52:11:86:c3:f5:58:
         e1:00:42:a7:9f:6b:5b:09:7f:21:89:96:e1:1e:88:ee:0e:b8:
         48:30:b9:ea:f6:dc:51:87:91:34:ca:aa:57:22:45:21:11:91:
         be:57:2d:ce:f4:dd:00:53:82:da:f8:19:2f:02:07:4b:2c:89:
         a1:5b:55:49:c5:1c:1a:29:97:e8:3b:d1:d5:7e:8d:08:76:19:
         6f:53:3a:f2:31:b4:8f:d0:91:98:c8:bf:dd:b7:e0:0c:84:fc:
         93:40:d5:5f:27:bc:4f:8b:42:03:2b:d4:86:73:0b:41:05:5e:
         1d:86:d6:84:c6:d4:9d:46:05:61:29:26:38:dc:54:a0:4c:50:
         31:a5:92:f3:8e:52:a3:8c:be:37:51:96:57:dc:b2:8f:f0:06:
         dc:e9:b1:d5:b4:22:b9:39:36:7f:4a:09:41:f9:42:61:d3:e6:
         ae:1c:05:bc:de:85:68:97:7b:42:ed:fd:17:bc:ab:77:ee:ca:
         e8:7c:65:68:9b:b0:f0:93:e1:e6:6e:f1:a7:62:1c:e8:f8:a2:
         0a:26:f2:d7:0d:93:d1:0d:18:0e:4f:6f:c8:73:bb:e0:5a:1e:
         1d:c6:cf:06
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUF5TocS9rtKFqAUEVAdbigaHDCmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD
NkJBNkE0MjAeFw0yNTA4MTkyMjE2NTJaFw0yNTA4MjEwMTA0NTJaMDMxMTAvBgNV
BAMTKDNEODBDRkZBOTJGRjEzNkE0QTQyMUM5RDk2NDRFNjMxMjNFOUMzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+d7KEa42rOzy+ARI7x5AyhMj
p8W9eVU7xGM2o8YQ6iQ975vgMpRUxdJB8QKoB7p/35wCem51iXL1is+LtuH+bWkq
HeXwHsSf9z9j+75uu5jf5JtGPEgj0iR3xp+e8vOnP/J9xCQPGxBlrVvA/sSZcYdT
4TIMLXaecBspj5SU2KEgEiIU47b5Xw/BWoW1G3aiwqJSbgpPDwELwm0aUSohzX21
yXkoBf2wx+JJEMHIZwqwMchT/pAC9owWEaRhSFWuDcaG1QyLCBiWXgAvh41s9ZvG
IEnvUr2bX4UHpndxPFg3qa5TPouQtPtb+jfDeMhIGbZOgn4dMF+BW9sRbvFjAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUPYDP+pL/E2pKQhydlkTmMSPpw+UwHwYDVR0j
BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv
MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG
NEM2QkE2QTQyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2VjYjM0
YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEzMzlDNUJDQ0U3MDlD
QjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACOK0oCfbk+WbqldGFx7
wftRK54yeStzvntHCjSW+FIRhsP1WOEAQqefa1sJfyGJluEeiO4OuEgwuer23FGH
kTTKqlciRSERkb5XLc703QBTgtr4GS8CB0ssiaFbVUnFHBopl+g70dV+jQh2GW9T
OvIxtI/QkZjIv9234AyE/JNA1V8nvE+LQgMr1IZzC0EFXh2G1oTG1J1GBWEpJjjc
VKBMUDGlkvOOUqOMvjdRllfcso/wBtzpsdW0Irk5Nn9KCUH5QmHT5q4cBbzehWiX
e0Lt/Re8q3fuyuh8ZWibsPCT4eZu8adiHOj4ogom8tcNk9ENGA5Pb8hzu+BaHh3G
zwY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:58:14 2025 by rpki-client