Manifest

$ rpki-client -vvf rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
File:                     0BA092A249853546648DF8B6E31CB87E0161491F.mft (raw, json)
Hash identifier:          H927pKUJNFX2EAoEKiI8SpVYaWTntV+9POthQpIJHs8=
Subject key identifier:   E0:3E:C2:58:2B:AE:15:1D:B2:D2:98:5B:F0:C4:07:AE:AC:08:AE:0E
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       3C15C9BD1CEFB1BA33D3D3FE4F612639CCDF2F62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
Manifest number:          01E3
Signing time:             Mon 25 Nov 2024 16:47:01 +0000
Manifest this update:     Mon 25 Nov 2024 16:42:01 +0000
Manifest next update:     Tue 26 Nov 2024 20:04:01 +0000
Files and hashes:         1: 323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa (hash: tGOQDYuScWN9wD1T/8Tdekn0jzXwiIi+fLzo6hd8M+Q=)
                          2: 323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa (hash: E+wAG+tbfGTByugDT0Zho2AFTTTADzb6mlDpfojQfWI=)
                          3: 323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa (hash: l21M2v9CW09OTsPsok2VDG8aNVY8DcR+Ph1B2PtT5GI=)
                          4: 323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa (hash: GPdJR8dpkdj/j4UOXI4w5Y7Q40UOEz7dtMilLlOZOeE=)
                          5: 323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa (hash: RXB+NtOgEXsL/QrsomTImRF9ZuplO84EeFkToGX4G/k=)
                          6: 323630373a373463303a3a2f33322d3438203d3e203535323031.roa (hash: drJcUWG30PO7Wi0QSKyrOm+EL437iLwp+nO8/umRA9k=)
                          7: 323630373a373463303a3330303a3a2f34302d3438203d3e2037303138.roa (hash: +pBTsqq7IvTRSarpXoeM2sRWxfnNzLFcbaXwP0S5iRY=)
                          8: 0BA092A249853546648DF8B6E31CB87E0161491F.crl (hash: rjThdh88Fw5TpFIep6PQmnWuJQJG4kQ0u4+9Vuz3DF4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:15:c9:bd:1c:ef:b1:ba:33:d3:d3:fe:4f:61:26:39:cc:df:2f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Nov 25 16:42:01 2024 GMT
            Not After : Nov 26 20:04:01 2024 GMT
        Subject: CN=E03EC2582BAE151DB2D2985BF0C407AEAC08AE0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:4a:3c:4d:7c:9d:0d:3d:0e:aa:63:75:3b:
                    ff:da:82:1f:31:c1:ad:46:58:93:ea:1f:cf:de:97:
                    c0:14:18:82:4d:48:39:ca:96:03:35:9b:0b:a5:15:
                    89:3e:0e:b4:fa:8f:fb:69:86:3b:f3:39:5c:f3:36:
                    31:b7:45:01:39:14:6f:51:0d:57:a7:44:25:a4:c1:
                    d2:d7:63:bd:49:0a:25:89:6f:b3:91:a7:14:45:70:
                    8a:39:83:bf:3f:e0:a1:81:db:42:75:39:37:5f:dd:
                    50:3b:de:99:8e:43:00:37:2c:ff:4d:b8:e5:16:80:
                    2d:40:e9:e3:80:b7:29:b8:c6:21:88:a6:b4:24:a6:
                    58:8e:13:04:c4:f0:8c:98:ae:50:f3:14:30:2b:c2:
                    c6:08:c7:44:a3:af:88:d0:04:5d:e1:06:8a:1e:9a:
                    1b:57:85:c3:ca:a1:f1:05:c0:33:80:c1:8b:45:f6:
                    c0:4a:7b:59:80:4c:69:d2:54:a6:aa:ca:4a:4d:ce:
                    ae:a0:10:fe:30:48:f7:08:c3:13:ac:ed:f9:9a:cb:
                    4c:7c:3d:06:e0:b2:cc:d5:8d:2d:de:23:3a:51:5c:
                    7d:3d:b3:31:1f:5e:d2:fb:28:35:8e:03:38:e7:c3:
                    f5:e2:55:5c:be:be:ba:78:af:26:10:30:af:4c:0a:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3E:C2:58:2B:AE:15:1D:B2:D2:98:5B:F0:C4:07:AE:AC:08:AE:0E
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:d0:a9:9b:62:63:01:a0:fc:5d:af:25:96:42:91:fd:60:
         5a:01:fe:32:5a:ed:e1:71:5e:85:aa:e4:44:8a:0a:1f:57:80:
         f5:62:ae:cf:f7:a7:6f:13:6e:9c:e4:03:6f:68:8f:9a:19:aa:
         70:52:72:78:54:ee:8a:a3:28:b5:04:f5:24:5e:52:b2:a5:1a:
         1b:df:9a:e2:af:e6:2f:4f:69:38:d7:5d:36:8c:c0:eb:05:9e:
         95:e7:f7:05:50:4c:4c:70:a6:cf:96:b1:a5:b8:97:0f:b0:7d:
         a3:db:c9:f3:94:78:ad:eb:e9:91:0e:57:93:37:8d:1d:0b:35:
         05:1a:6f:a3:2f:70:84:6c:95:c0:8e:83:45:ae:e7:30:91:d2:
         fa:f5:d5:1f:16:50:20:c9:68:e2:89:14:cb:3d:33:04:f1:bd:
         3e:9a:40:0a:31:78:47:77:6f:0e:30:6b:ed:6b:26:6f:30:e2:
         40:90:6f:3a:ae:1e:5c:91:70:54:3d:e9:d1:3b:8f:56:fc:23:
         ff:58:8a:d6:4f:7b:8e:fa:c3:a3:4e:97:46:f3:da:84:6f:8d:
         8c:eb:cc:9f:c7:e3:cb:b0:8f:4e:fd:4f:20:cd:c5:61:23:80:
         68:59:3b:54:b8:55:31:ab:87:c3:ae:d4:00:43:bf:2d:d9:eb:
         be:9e:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----