Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
File:                     970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json)
Hash identifier:          LRjltR7SjWBBnGJqjbju2h+djGQ2gD1Q9q566JDdcUs=
Subject key identifier:   C1:EC:45:CF:28:AB:C2:B7:3A:2B:9F:31:3E:FC:B0:C7:7B:28:01:C7
Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Certificate issuer:       /CN=970AD94C83244100A97F9186D53DADAB07995EE9
Certificate serial:       64D581B7FF3FA329EA7633C8D686E084303375A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
Manifest number:          02EE
Signing time:             Thu 26 Feb 2026 21:28:56 +0000
Manifest this update:     Thu 26 Feb 2026 21:23:54 +0000
Manifest next update:     Fri 27 Feb 2026 23:51:54 +0000
Files and hashes:         1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: NBZGmgYWhKEFmeC0HEampeRjMgv91bg5GwHpVygvfVk=)
                          2: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=)
                          3: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d5:81:b7:ff:3f:a3:29:ea:76:33:c8:d6:86:e0:84:30:33:75:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9
        Validity
            Not Before: Feb 26 21:23:54 2026 GMT
            Not After : Feb 27 23:51:54 2026 GMT
        Subject: CN=C1EC45CF28ABC2B73A2B9F313EFCB0C77B2801C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:1a:4b:6b:9f:9a:e4:51:c1:60:82:fb:b7:
                    88:4f:63:74:7d:ce:62:bc:b6:a8:1c:83:56:64:09:
                    62:57:3b:55:0a:40:61:49:e1:87:28:f0:23:8c:36:
                    2c:d2:ba:85:9a:8a:51:c7:6b:1c:34:7c:66:00:54:
                    7a:57:11:15:4e:c9:b3:7c:3b:4a:95:9f:a5:fd:e6:
                    aa:30:f2:b5:9c:c4:c2:cb:d2:9f:e5:55:28:b3:8a:
                    44:c4:49:ab:cd:22:33:c1:76:c1:2c:07:38:ee:c3:
                    04:b9:9c:4e:ba:f3:20:0c:1a:20:d2:22:1c:13:ba:
                    15:5c:d4:85:67:7c:67:28:5c:a1:ab:ed:3b:90:60:
                    39:4a:87:9a:ab:52:b2:a2:7f:53:2f:70:d2:46:18:
                    d8:f0:c9:52:30:0a:22:16:4c:53:d5:e8:61:38:f4:
                    f6:79:38:49:26:2b:f2:cf:f5:85:d2:58:97:00:1c:
                    bd:a0:fc:3b:d1:da:62:9b:a6:10:aa:42:55:5a:3e:
                    0b:ca:0f:e1:4a:3e:69:44:fe:06:b7:ae:35:ec:50:
                    8b:5a:df:b1:85:7f:53:09:ca:6e:bd:18:cd:c9:91:
                    8a:fe:9b:cf:94:60:23:f6:8f:3c:86:64:68:0c:30:
                    8b:01:0b:2d:91:ff:0a:e4:63:ef:63:c5:f9:93:16:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EC:45:CF:28:AB:C2:B7:3A:2B:9F:31:3E:FC:B0:C7:7B:28:01:C7
            X509v3 Authority Key Identifier:
                keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:49:da:21:a4:10:ff:14:1b:c3:87:82:77:a8:e9:cc:4c:
         8e:10:b0:83:ef:a2:c6:04:24:ed:be:47:f0:64:29:16:b8:0a:
         b3:7b:21:66:b1:d6:9b:1f:09:7f:05:9b:b1:ab:83:47:05:e1:
         2a:41:c6:2a:aa:61:9f:4e:9e:a9:89:1b:af:a5:56:1e:cc:6e:
         03:3b:f8:02:5c:7d:30:3d:00:de:91:68:47:ec:67:7a:bd:ef:
         80:2d:ee:4c:96:80:a0:06:ac:05:82:10:7d:64:22:9b:bc:1c:
         4e:12:e9:30:6d:2f:40:1f:d9:0e:3b:44:52:a6:e8:e9:5f:22:
         fc:16:d8:cf:2f:40:00:7b:64:9e:45:e4:f0:5f:d3:88:fa:6c:
         1e:ca:0f:c2:99:a2:87:51:1e:03:93:bc:70:2f:89:04:ef:a0:
         8c:96:2d:40:c8:6a:ea:7b:6d:5c:2b:2c:4c:8a:02:b3:02:b2:
         a6:f9:09:47:7f:92:6d:03:e4:9b:3a:96:34:db:f5:99:b3:a2:
         c2:ae:fe:2f:3f:e9:29:44:a1:36:6c:81:af:05:fa:0c:e4:5f:
         84:d3:d2:c5:ee:da:f6:0d:35:3f:97:4e:16:9b:e5:3b:73:f0:
         61:1c:97:19:9f:fd:19:a9:56:d4:a7:79:aa:ae:85:17:93:c8:
         f0:fa:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----