Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File:                     C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier:          oyf+fIDm7V4o8o80agwlWNoWWtlrvq4xs+7WUgCZamo=
Subject key identifier:   86:2A:AB:C3:41:6B:62:07:48:2F:DC:74:6B:A5:99:0C:95:E3:48:01
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       51F624D73F46905B9440134F9C0259A488EBD70F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number:          0283
Signing time:             Fri 28 Mar 2025 20:53:57 +0000
Manifest this update:     Fri 28 Mar 2025 20:48:57 +0000
Manifest next update:     Sat 29 Mar 2025 22:58:57 +0000
Files and hashes:         1: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
                          2: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: 7YHx/kxrl7PHeLh8Z7BYAnZFkdOLqFy6QAt6prBBvZA=)
                          3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: Q3QiqxUuMSp7WUu02mA+KyUsM0fons3AJE9l+1oNWeY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f6:24:d7:3f:46:90:5b:94:40:13:4f:9c:02:59:a4:88:eb:d7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Mar 28 20:48:57 2025 GMT
            Not After : Mar 29 22:58:57 2025 GMT
        Subject: CN=862AABC3416B6207482FDC746BA5990C95E34801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:78:ac:11:17:5d:0a:f6:e6:20:4b:82:01:
                    68:16:61:4f:ac:84:95:13:88:7d:f5:18:b1:7c:e8:
                    4b:bf:95:93:55:e5:10:cf:24:3e:c6:60:92:7b:c8:
                    e9:44:18:9d:a2:3f:98:aa:aa:10:36:1b:6f:fe:94:
                    de:86:19:83:e3:79:8b:6d:7b:8f:10:44:97:8f:c4:
                    b1:57:63:fb:9c:09:10:22:81:fa:c8:07:10:a9:95:
                    9a:13:ad:3b:41:8f:8e:c9:b3:1b:da:86:91:6b:c0:
                    a3:12:4e:66:54:69:a7:dc:54:a3:ab:b8:46:ce:cb:
                    c4:c8:03:c9:59:f2:a8:61:0c:c0:87:ff:9a:98:08:
                    46:87:d9:e4:4c:bb:fd:06:48:74:1d:68:67:79:e2:
                    44:d9:68:87:c7:37:e9:fd:1d:62:48:f2:9b:58:c5:
                    81:6d:c1:1d:1c:aa:01:ab:0d:a5:37:50:23:8f:d1:
                    d6:1f:89:c6:bf:87:63:ec:3f:41:92:03:9d:12:3a:
                    3b:89:ec:5a:dd:43:90:33:c6:82:b8:fc:e1:63:f4:
                    2b:12:e0:cb:ce:ff:58:6b:95:c9:c2:7e:16:6d:50:
                    a9:fa:4e:35:bd:24:08:13:78:36:b2:c5:b7:aa:50:
                    f3:c9:c8:fb:db:ce:74:10:08:e0:c4:d8:5e:49:e8:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:AB:C3:41:6B:62:07:48:2F:DC:74:6B:A5:99:0C:95:E3:48:01
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:2a:2b:01:4f:16:c6:bf:52:92:9d:5d:eb:a7:9f:62:05:
         65:ff:47:c9:22:2b:ad:38:d5:5d:bc:90:d6:37:4b:9d:25:32:
         4a:7b:3c:a6:44:69:6d:50:ea:78:5d:cf:6c:55:f3:08:ed:c0:
         94:0e:0f:91:5c:5a:57:c0:55:02:c9:1a:9b:f8:4b:d9:db:5c:
         11:fb:40:9d:c2:cd:93:f3:67:16:81:90:b3:c1:82:7a:fd:1c:
         67:8e:4b:9f:5c:a8:fe:e5:ae:c4:be:ac:bf:fa:a9:7e:cb:9c:
         12:c7:da:03:0e:82:50:aa:e0:cb:94:09:e5:53:49:f5:36:df:
         3b:bf:5f:b4:88:7e:69:25:ee:88:82:20:aa:1b:ce:e9:ae:93:
         f3:18:d0:93:67:ff:4c:8a:23:16:0c:73:95:30:10:48:0f:f8:
         7d:ea:20:e4:d8:f8:a5:a2:aa:44:ae:37:75:31:d5:12:d2:f1:
         95:83:ae:59:10:30:42:96:e4:eb:bd:cf:c3:39:6c:e7:4c:7f:
         2f:93:2f:e6:60:68:bc:b3:21:b5:7a:ea:dc:7e:24:93:57:3b:
         10:2e:76:b6:aa:ad:f5:4d:90:13:a7:5a:0c:bf:19:17:95:ce:
         cc:11:eb:db:1a:cd:b5:41:95:38:4e:c7:7d:9d:19:53:4a:66:
         7c:fb:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----