Manifest

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/1/D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.mft
File:                     D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.mft (raw, json)
Hash identifier:          JjE6c+yx+XI32Facc1/1b8MVWlFosrAIXXlWx35gsNQ=
Subject key identifier:   23:34:C5:2F:76:1C:18:68:B6:64:E7:E7:45:F7:82:73:64:59:C7:11
Authority key identifier: D8:AB:F4:98:6E:E9:E9:3C:6A:BA:7C:3C:21:F2:53:70:4B:33:97:F5
Certificate issuer:       /CN=d8abf4986ee9e93c6aba7c3c21f253704b3397f5
Certificate serial:       06F67AC6707B4F20E5B02C3CB6BCF2CF9E9A2712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Kv0mG7p6Txqunw8IfJTcEszl_U.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/1/D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.mft
Manifest number:          80
Signing time:             Fri 19 Apr 2024 14:33:53 +0000
Manifest this update:     Fri 19 Apr 2024 14:28:53 +0000
Manifest next update:     Sat 20 Apr 2024 16:51:53 +0000
Files and hashes:         1: AS60223.asa (hash: /B1J/0QeH199YNB8g6bBlnyzVYXPuAOcl9SCz3Bwwlk=)
                          2: D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.crl (hash: s6cfuLjgMUhNk9fv3xh+ZhyiSUwqEJbTHavO/IPqnOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f6:7a:c6:70:7b:4f:20:e5:b0:2c:3c:b6:bc:f2:cf:9e:9a:27:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8abf4986ee9e93c6aba7c3c21f253704b3397f5
        Validity
            Not Before: Apr 19 14:28:53 2024 GMT
            Not After : Apr 20 16:51:53 2024 GMT
        Subject: CN=2334C52F761C1868B664E7E745F782736459C711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:1f:71:bd:30:94:2b:d1:73:d5:9b:73:3e:
                    b1:82:a5:91:64:11:71:15:d8:ff:94:39:f6:0e:3a:
                    1e:b3:5e:53:b1:d8:4b:78:63:4b:3d:2c:6e:8b:1a:
                    8d:c7:50:d9:5d:97:1b:5d:f6:f4:3c:c3:76:dd:df:
                    12:33:12:ef:11:9b:0f:44:df:c2:d9:2f:ce:9e:d8:
                    1c:8b:f8:b9:bf:8f:b5:6b:44:9d:1e:75:8d:42:14:
                    ac:18:65:de:a1:96:d8:87:71:ce:94:e5:15:c8:39:
                    c6:db:f6:56:2e:9b:29:5f:8f:f7:29:f1:f6:bc:85:
                    40:5b:8c:b6:45:31:42:d2:6b:b7:93:06:85:3a:35:
                    2e:18:94:46:21:42:2e:d9:da:df:78:97:8a:3c:b9:
                    0b:d6:3d:b8:d5:ac:33:f7:42:d7:55:37:a3:5e:79:
                    40:b8:c3:8b:3f:01:14:e7:7a:2f:bd:af:9a:ec:fa:
                    9b:30:b5:62:fc:74:08:e3:f7:57:19:8a:af:82:7c:
                    e0:ee:37:ee:85:24:40:05:bb:80:e3:ce:68:7b:55:
                    fb:a4:ce:69:9e:5a:bb:8f:5a:80:0a:3e:df:ea:e1:
                    40:cf:1c:d9:72:6b:cb:92:83:b9:07:84:d1:36:9b:
                    ed:15:46:70:5d:91:01:4f:f7:67:37:c2:f3:b8:60:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:34:C5:2F:76:1C:18:68:B6:64:E7:E7:45:F7:82:73:64:59:C7:11
            X509v3 Authority Key Identifier:
                keyid:D8:AB:F4:98:6E:E9:E9:3C:6A:BA:7C:3C:21:F2:53:70:4B:33:97:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/1/D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Kv0mG7p6Txqunw8IfJTcEszl_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/1/D8ABF4986EE9E93C6ABA7C3C21F253704B3397F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:b7:c1:e0:30:49:0d:ca:be:d2:52:88:57:be:91:95:7e:
         4d:32:7d:55:e1:99:2f:41:19:11:ea:8c:58:4b:43:c9:15:b0:
         e0:46:89:ce:28:bc:f3:07:0c:61:7a:ff:80:4c:51:4b:dc:95:
         79:5e:ef:54:93:cf:6a:27:fd:53:ed:f4:eb:e0:be:02:1c:d7:
         ea:c8:98:61:f6:03:45:ad:35:62:78:4d:b5:40:fa:ce:33:5f:
         96:17:9b:1a:bf:5a:ea:5f:5a:34:83:ce:3d:81:c4:06:0d:37:
         e7:59:aa:0c:1c:46:05:82:ec:07:b1:c7:69:99:a6:ef:bc:52:
         ea:55:bd:eb:1f:be:26:49:0e:86:90:45:9d:ec:a6:0a:5a:40:
         93:1f:1d:fd:e1:a2:5d:72:42:a8:32:11:0e:fa:fb:1b:a6:d1:
         a9:c9:a0:00:bc:3c:c8:e5:10:0c:05:68:d9:5a:7d:d8:4e:ee:
         89:08:f3:9d:19:eb:3f:e1:2d:88:ff:06:57:16:09:9d:bf:c6:
         b4:f3:4a:fd:03:66:08:45:38:ab:ad:21:7e:a2:df:47:9c:9e:
         e2:d8:44:ce:d9:43:b3:c2:ca:9d:c6:c2:57:aa:7d:0b:a1:ee:
         c7:07:0e:02:e1:e0:ff:f9:a6:10:05:8e:60:b8:5b:0a:06:9f:
         23:6a:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----