Manifest

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.mft
File:                     2A1A6172DA4C339FD787467E26F92A11E75DBBB3.mft (raw, json)
Hash identifier:          n7cHn2oXPGTepwQ/hdAXDab8yLzv0vEzEDh9iTWDcv4=
Subject key identifier:   39:7E:F0:24:BE:3B:96:3A:FF:B1:8B:26:FA:AC:EF:22:13:AA:39:E6
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Certificate issuer:       /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial:       0832110E5E30591E66CEC4227A426DDCFBB4216B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access:      rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.mft
Manifest number:          96
Signing time:             Fri 12 Apr 2024 22:09:35 +0000
Manifest this update:     Fri 12 Apr 2024 22:04:35 +0000
Manifest next update:     Sat 13 Apr 2024 23:00:35 +0000
Files and hashes:         1: 326131333a646638373a623465303a3a2f34382d3438203d3e203236353631.roa (hash: 2rIfQWfyugB8KJ4ORcraLjePhcddyujRPrzvhL2fCwQ=)
                          2: 326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa (hash: Sflvw3g+4p/JcpLn5fis2hHARGwZTp4pI6E8wXZnwuk=)
                          3: 326131333a646638373a623566663a3a2f34382d3438203d3e20313939303532.roa (hash: //08YaNXyJ0H/wnsOoa3OkwIqnLYyaAxlIwcRof9NZw=)
                          4: 326131333a646638373a623430303a3a2f34302d3438203d3e20323135393738.roa (hash: POSuCYrc8LgyQY5m2hYLjUVLRvuM3xcAMGX5nH1lJ8U=)
                          5: 7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer (hash: lGx6iPPejZWLEtw/2hTZyJY0aaGrG/VqLA4Yu/0igPU=)
                          6: C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer (hash: HsqNFlJ81f8KkhfRja9RG7LlQ+D2eYDB5VIXxJXJLsI=)
                          7: 326131333a646638373a623430303a3a2f33382d3338203d3e203630323233.roa (hash: zgjgDVgrrXoGLF79cBd/pc5iIf9LFMpYIttApU+OJcc=)
                          8: 2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl (hash: H+nixrQ/PdTDOBmzcD1S4aGwcKhx6SwwTN0qd/aiGN0=)
                          9: 326131333a646638373a623466303a3a2f34342d3438203d3e20313937343634.roa (hash: FHbMKcaVmtxuioXIuCfnVGh4yLoxc+cwBRT8d4IfR5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:32:11:0e:5e:30:59:1e:66:ce:c4:22:7a:42:6d:dc:fb:b4:21:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
        Validity
            Not Before: Apr 12 22:04:35 2024 GMT
            Not After : Apr 13 23:00:35 2024 GMT
        Subject: CN=397EF024BE3B963AFFB18B26FAACEF2213AA39E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:bc:69:98:5e:2d:ca:2e:e4:c7:91:ae:06:
                    c6:5a:a8:31:66:f9:0a:fe:66:a1:39:e9:cb:b4:e0:
                    cd:a6:cf:50:9e:15:ef:41:99:0f:2f:74:5f:80:ac:
                    c8:79:17:96:9f:0e:90:04:9c:11:34:f1:8e:fc:71:
                    ad:5b:af:53:c5:84:d0:54:66:0b:d2:fa:1e:bc:04:
                    1a:38:65:79:e9:79:0a:9a:ca:9d:b2:31:d6:ef:e7:
                    27:14:b4:56:12:df:70:9c:b8:44:17:c6:da:12:3c:
                    67:2a:eb:46:7d:a3:9f:82:2d:75:a2:e7:70:59:56:
                    45:70:1d:45:73:44:fd:41:77:58:5e:5d:23:dd:de:
                    cc:fd:49:0e:3d:90:70:95:83:52:45:bf:2e:fb:83:
                    e2:18:40:af:88:1a:8e:ae:5d:fe:74:ad:66:0c:78:
                    14:09:d1:81:25:7f:8e:45:73:f4:9e:de:d6:97:1b:
                    e6:4f:c7:62:19:2e:d4:9a:d1:42:b3:a0:25:f4:55:
                    a1:fb:85:a0:f3:88:9f:de:f0:ba:18:6e:0b:1b:70:
                    06:ff:02:ee:98:ba:f4:9d:c3:06:e9:e9:41:79:d3:
                    76:b1:e7:7b:6b:b3:87:da:90:8b:44:ed:7a:23:d2:
                    ea:e1:58:dd:38:bf:72:a3:64:bc:93:09:d3:e8:8f:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7E:F0:24:BE:3B:96:3A:FF:B1:8B:26:FA:AC:EF:22:13:AA:39:E6
            X509v3 Authority Key Identifier:
                keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:67:99:64:9c:ba:5c:88:7b:14:21:ff:c5:07:e7:b9:e9:37:
         63:b5:02:5d:ba:17:08:54:14:94:1b:c9:19:8b:2b:e9:a3:62:
         5e:87:a3:c0:ad:c5:0a:bd:7e:98:83:c0:02:9a:ae:c3:4e:39:
         85:15:b6:9b:d3:26:52:70:f1:8a:d7:1f:df:eb:20:8c:10:2b:
         a7:d5:b9:25:6c:e0:f3:37:62:0a:50:fd:c4:7b:0c:bd:a2:70:
         a5:5b:bf:e1:7c:ac:c4:7a:78:64:b6:b0:0c:cb:60:7e:0f:61:
         8c:53:d0:6d:ff:52:81:85:d6:dc:b4:91:71:a2:d2:02:1b:af:
         6a:0e:53:ad:3b:65:18:e3:98:32:80:5b:13:0e:2c:a1:67:41:
         8e:b1:45:39:f6:31:87:4a:bf:c0:fc:13:b1:e4:c7:f9:3d:a4:
         3f:11:51:bf:19:ab:aa:e9:16:62:8c:ba:42:85:51:e8:c5:a0:
         89:2a:44:e9:24:16:39:b9:e0:00:0c:28:67:df:91:c1:e6:d6:
         d9:56:e6:20:47:a5:1f:7c:8d:f8:9e:ca:22:ab:4a:97:6b:0c:
         4e:bb:d6:d0:99:6b:d1:74:33:33:9f:39:5e:20:7d:cf:3b:2d:
         6d:93:eb:4a:64:75:d6:b4:5e:44:ef:5a:84:08:ef:a2:6d:83:
         86:b8:65:d2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUCDIRDl4wWR5mzsQiekJt3Pu0IWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkExQTYxNzJEQTRDMzM5RkQ3ODc0NjdFMjZGOTJBMTFF
NzVEQkJCMzAeFw0yNDA0MTIyMjA0MzVaFw0yNDA0MTMyMzAwMzVaMDMxMTAvBgNV
BAMTKDM5N0VGMDI0QkUzQjk2M0FGRkIxOEIyNkZBQUNFRjIyMTNBQTM5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqw7xpmF4tyi7kx5GuBsZaqDFm
+Qr+ZqE56cu04M2mz1CeFe9BmQ8vdF+ArMh5F5afDpAEnBE08Y78ca1br1PFhNBU
ZgvS+h68BBo4ZXnpeQqayp2yMdbv5ycUtFYS33CcuEQXxtoSPGcq60Z9o5+CLXWi
53BZVkVwHUVzRP1Bd1heXSPd3sz9SQ49kHCVg1JFvy77g+IYQK+IGo6uXf50rWYM
eBQJ0YElf45Fc/Se3taXG+ZPx2IZLtSa0UKzoCX0VaH7haDziJ/e8LoYbgsbcAb/
Au6YuvSdwwbp6UF503ax53trs4fakItE7Xoj0urhWN04v3KjZLyTCdPoj983AgMB
AAGjggIkMIICIDAdBgNVHQ4EFgQUOX7wJL47ljr/sYsm+qzvIhOqOeYwHwYDVR0j
BBgwFoAUKhphctpMM5/Xh0Z+JvkqEeddu7MwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraS5uZXRpZmFjZS5uZXQvcmVwby9BcHJp
Y290LzEvMkExQTYxNzJEQTRDMzM5RkQ3ODc0NjdFMjZGOTJBMTFFNzVEQkJCMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC8yQTFBNjE3MkRBNEMzMzlGRDc4NzQ2N0Uy
NkY5MkExMUU3NURCQkIzLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraS5uZXRpZmFjZS5uZXQvcmVwby9BcHJpY290LzEvMkExQTYx
NzJEQTRDMzM5RkQ3ODc0NjdFMjZGOTJBMTFFNzVEQkJCMy5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHBn
mWSculyIexQh/8UH57npN2O1Al26FwhUFJQbyRmLK+mjYl6Ho8CtxQq9fpiDwAKa
rsNOOYUVtpvTJlJw8YrXH9/rIIwQK6fVuSVs4PM3YgpQ/cR7DL2icKVbv+F8rMR6
eGS2sAzLYH4PYYxT0G3/UoGF1ty0kXGi0gIbr2oOU607ZRjjmDKAWxMOLKFnQY6x
RTn2MYdKv8D8E7Hkx/k9pD8RUb8Zq6rpFmKMukKFUejFoIkqROkkFjm54AAMKGff
kcHm1tlW5iBHpR98jfieyiKrSpdrDE671tCZa9F0MzOfOV4gfc87LW2T60pkdda0
XkTvWoQI76Jtg4a4ZdI=
-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org