Manifest

$ rpki-client -vvf rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.mft
File:                     B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.mft (raw, json)
Hash identifier:          kzwBNq8TV8x8epcdvHN4+Hz0TOudXc5NjUVs4scH350=
Subject key identifier:   B7:71:09:AB:1A:0B:8F:1B:D6:90:15:63:B3:18:AD:95:58:2C:DF:DA
Authority key identifier: B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71
Certificate issuer:       /CN=B07BA3B6FEC519AF5118588A2B0548B01F7AEE71
Certificate serial:       21B31E24BA8518697EB1B19CAFED40A41CF5CC83
Authority info access:    rsync://rpki.co/repo/AS205432/0/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer
Subject info access:      rsync://rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.mft
Manifest number:          0124
Signing time:             Mon 27 Nov 2023 12:45:34 +0000
Manifest this update:     Mon 27 Nov 2023 12:40:34 +0000
Manifest next update:     Tue 28 Nov 2023 15:45:34 +0000
Files and hashes:         1: 326130353a646663373a333630303a3a2f33392d3339203d3e20323030343437.roa (hash: mWSFx/JMkLAS6pyyNoeW9J82ibc+GD2MtFUI2sKA5WM=)
                          2: B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.crl (hash: h9ILTIAPPGSuM2FcohvyxWwnT5A6afZQUm1jdnANtdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:1e:24:ba:85:18:69:7e:b1:b1:9c:af:ed:40:a4:1c:f5:cc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B07BA3B6FEC519AF5118588A2B0548B01F7AEE71
        Validity
            Not Before: Nov 27 12:40:34 2023 GMT
            Not After : Nov 28 15:45:34 2023 GMT
        Subject: CN=B77109AB1A0B8F1BD6901563B318AD95582CDFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:f7:f8:25:b4:53:15:bf:28:5c:71:e8:e5:
                    07:5d:36:b8:83:c9:98:77:69:a2:ee:0f:ac:7d:df:
                    97:20:c0:2f:31:05:6e:42:a8:e8:62:11:f1:c7:26:
                    cc:5e:a2:8a:f5:88:58:2f:eb:94:88:58:62:d7:fc:
                    9d:f7:53:62:42:14:3a:08:d1:79:9b:1a:a3:48:74:
                    e5:2d:c5:f0:ef:27:a4:9b:40:11:7a:78:12:e0:5b:
                    2b:22:9c:78:35:3e:a7:38:d6:1d:79:d3:1b:a4:ab:
                    e1:ad:e8:29:ae:ca:3b:de:30:98:42:82:fe:96:3f:
                    fe:13:1b:01:2c:29:78:1d:58:81:cd:ea:5c:28:7c:
                    c6:bd:ac:93:c5:69:b6:e3:dd:34:29:2d:0e:78:39:
                    50:d1:a9:44:d2:f6:d7:20:4e:ef:18:6f:77:7d:10:
                    e6:b8:56:86:36:aa:b9:6d:5c:c0:a3:3e:48:e2:6e:
                    ed:80:40:2d:e5:b1:ec:3b:94:eb:9a:5a:f9:87:13:
                    03:f5:85:62:a9:0e:b5:e4:36:00:db:14:c7:b5:c1:
                    25:0f:1a:9b:1d:81:89:86:2f:ee:3c:84:6d:0f:09:
                    7f:b3:1e:a1:c0:3b:d0:a3:cc:e3:88:06:89:d6:7a:
                    79:48:aa:79:b1:80:c7:56:d4:73:84:bf:e3:ce:05:
                    3b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:09:AB:1A:0B:8F:1B:D6:90:15:63:B3:18:AD:95:58:2C:DF:DA
            X509v3 Authority Key Identifier:
                keyid:B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:62:95:8e:f3:ec:d2:ce:b6:f1:0f:65:5a:3c:ca:a9:d6:d5:
         5a:7e:b8:54:6d:a6:22:95:70:89:6a:79:28:38:3d:3e:72:38:
         f7:4f:28:1c:23:12:24:3f:9c:e6:17:b7:41:03:d6:74:e9:a7:
         64:22:10:ca:21:8a:3b:a4:67:be:74:91:c8:fc:cb:7a:9a:ed:
         80:31:51:8e:6c:57:45:36:70:cd:9b:d6:d8:39:d0:7b:bd:8a:
         e7:00:a3:ba:c2:7b:1c:0c:a4:4b:56:5d:3c:81:e3:64:2a:84:
         04:ca:db:43:6b:eb:1c:b5:68:64:c7:3d:ab:02:9b:9a:e9:5a:
         b4:46:34:61:28:ad:83:9d:f0:50:a8:17:c3:48:95:3d:f9:07:
         7f:3d:2a:e7:ca:77:60:ee:0d:c7:ab:cd:9d:92:f5:52:c4:10:
         53:37:ae:90:a8:fb:33:c3:2e:2d:59:18:c4:46:76:01:ee:9f:
         fc:7e:18:38:ef:35:9b:e9:ca:a3:12:a8:c2:94:be:8a:9c:e8:
         10:1a:9d:fa:97:f6:81:56:52:e0:b4:94:85:45:68:24:d6:a5:
         74:06:69:99:cd:38:8e:c9:73:71:6b:6d:72:59:ad:e3:80:a5:
         66:e5:22:93:ba:35:4c:68:dc:81:ac:e0:54:a2:d9:26:5d:56:
         ec:fd:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----