Manifest

$ rpki-client -vvf cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.mft
File:                     gY5eZDw9ohLSAi1mlxSwh1gVFcY.mft (raw, json)
Hash identifier:          s9l4LJeRomt+NP7qFzEBb6Y6PkeIK3mWPhrdq+YSO+o=
Subject key identifier:   8F:F6:38:AE:89:B0:2B:44:98:63:59:29:E4:1F:93:D6:92:7A:B7:13
Authority key identifier: 81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6
Certificate issuer:       /CN=818E5E643C3DA212D2022D669714B087581515C6
Certificate serial:       6C04
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer
Subject info access:      rsync://cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.mft
Manifest number:          0A6D
Signing time:             Sat 25 Jun 2022 20:00:25 +0000
Manifest this update:     Sat 25 Jun 2022 20:00:25 +0000
Manifest next update:     Sun 26 Jun 2022 02:00:25 +0000
Files and hashes:         1: aFAec0GwM_p4QB4d1Ff6KkUk25U.roa (hash: kLP/XU+i+x6CAYsSn2G/rq5MCVm6vgd+2qak+AjZ6no=)
                          2: gY5eZDw9ohLSAi1mlxSwh1gVFcY.crl (hash: hrS8RbmWWIHZR1Ww+ZsJhRj74pO/YjaS1m5l74s5pYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27652 (0x6c04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818E5E643C3DA212D2022D669714B087581515C6
        Validity
            Not Before: Jun 25 20:00:25 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=8FF638AE89B02B4498635929E41F93D6927AB713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:2c:5f:ea:89:c6:1e:f1:18:2f:57:1b:b9:
                    b0:dc:e0:77:e6:3c:41:e1:9e:9a:fa:36:79:bc:e5:
                    7b:3f:09:23:3a:24:bc:56:03:f7:79:a8:08:6c:76:
                    44:1e:f7:0c:ae:92:3d:ca:4a:7f:a2:c7:50:9e:18:
                    df:a9:76:22:c2:c9:8d:ca:ea:1a:ce:6b:68:f0:06:
                    df:05:56:96:5f:5e:f4:02:a4:8e:9e:7e:1e:bf:4b:
                    fc:89:ac:86:f8:59:c3:58:b9:be:13:34:24:b7:60:
                    07:ba:bd:7c:8f:99:b6:50:65:e7:88:ed:5c:02:6b:
                    40:e2:81:0d:29:6f:e3:43:17:c9:9d:29:2a:0b:13:
                    63:10:a6:73:52:34:f8:7d:5e:a2:c9:31:83:91:d9:
                    2a:2b:e3:54:42:2b:85:82:7c:5b:d2:28:29:6d:d9:
                    f7:dd:95:2e:fb:cf:9a:04:67:ea:23:aa:7b:e7:bc:
                    9a:b7:78:9a:82:1d:cd:ab:33:de:b3:81:b7:c2:a1:
                    18:18:1b:b6:90:91:4a:1f:71:fb:87:ff:7b:3f:56:
                    2c:ea:27:ac:0f:6c:68:c7:65:fe:95:d0:13:cd:f3:
                    8d:9b:5a:e6:f9:92:82:60:c1:79:07:25:5a:cd:48:
                    2a:73:45:71:6e:dc:e3:89:56:a0:04:40:84:07:58:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:38:AE:89:B0:2B:44:98:63:59:29:E4:1F:93:D6:92:7A:B7:13
            X509v3 Authority Key Identifier:
                keyid:81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.mft
                RPKI Notify - URI:https://cc.rg.net/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:41:a6:f0:c1:72:45:04:ee:5d:f4:fb:91:71:06:f7:1e:
         8f:38:7a:ad:42:2c:42:c3:a8:1b:e6:a9:7c:7e:1e:9a:dd:8b:
         25:0c:42:10:65:7d:42:94:19:10:77:59:a9:fe:8a:4c:fa:95:
         83:f5:eb:6b:3c:12:67:61:6b:a3:28:5c:be:f0:cb:5f:84:92:
         51:7f:1d:30:96:1d:51:b2:5a:20:a0:f8:b9:cd:50:47:0a:9d:
         4e:82:52:ef:f7:b4:65:91:ed:a9:89:6c:d9:6b:e8:9a:03:81:
         b3:d6:f5:8a:9d:4c:e5:9c:16:d6:7e:c7:70:9c:cf:8a:35:24:
         db:21:97:e6:c5:4e:29:87:09:3b:81:52:44:44:a4:2c:74:ac:
         5f:fd:a9:93:22:93:3e:f5:12:70:d6:5c:3f:8b:2b:d2:88:ed:
         c4:8b:97:5a:8c:76:9b:ab:36:20:21:fd:a9:78:b1:25:8d:4e:
         24:78:00:e4:62:33:d0:19:bc:39:af:1c:d1:23:7f:d9:35:a7:
         c9:a0:68:39:00:e6:d7:1d:31:78:2d:2a:c2:bc:e7:1c:74:2e:
         97:1d:b2:ed:ae:b0:2f:88:79:f2:c0:11:a2:f7:8e:eb:46:9e:
         53:cd:ca:05:41:43:7f:65:e7:a8:c0:f5:a6:33:97:30:a1:2f:
         b9:24:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org