Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/33/C9786D63C87D85D441146724ECFAC93527EF6FD5.mft
File:                     C9786D63C87D85D441146724ECFAC93527EF6FD5.mft (raw, json)
Hash identifier:          6yuebWzGTONFYXQs6SovD8csp/ymj0OnM8uMAYp+nRE=
Subject key identifier:   97:2F:1B:D8:8F:9B:C1:76:4A:B0:50:B7:03:0F:50:1A:DD:81:57:0E
Authority key identifier: C9:78:6D:63:C8:7D:85:D4:41:14:67:24:EC:FA:C9:35:27:EF:6F:D5
Certificate issuer:       /CN=c9786d63c87d85d441146724ecfac93527ef6fd5
Certificate serial:       0556FE0A35904F8DF227CE8108FE1F251F174CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXhtY8h9hdRBFGck7PrJNSfvb9U.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/33/C9786D63C87D85D441146724ECFAC93527EF6FD5.mft
Manifest number:          01CB
Signing time:             Sun 17 Apr 2022 07:40:00 +0000
Manifest this update:     Sun 17 Apr 2022 07:35:00 +0000
Manifest next update:     Mon 18 Apr 2022 08:20:00 +0000
Files and hashes:         1: 3139322e3130392e3233332e302f32342d3234203d3e203433393539.roa (hash: 0WLUfQ+WQdOmrvmL7LOuvHNyDt9ZKZ+yW7pPNNnNbwM=)
                          2: C9786D63C87D85D441146724ECFAC93527EF6FD5.crl (hash: jwSPFH3gxaHnhh7dzebTfaoz9KSlkXt2ZIM8q3ekspA=)
                          3: 3139322e3130392e3233322e302f32342d3234203d3e2034373835.roa (hash: iBFtue1b0xfczjIyjLrqBwciKimFTnl1tO6jnCg++LI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:56:fe:0a:35:90:4f:8d:f2:27:ce:81:08:fe:1f:25:1f:17:4c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9786d63c87d85d441146724ecfac93527ef6fd5
        Validity
            Not Before: Apr 17 07:35:00 2022 GMT
            Not After : Apr 18 08:20:00 2022 GMT
        Subject: CN=972F1BD88F9BC1764AB050B7030F501ADD81570E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:38:5c:ad:32:bf:3a:c5:19:38:f8:f7:50:
                    db:a1:81:6c:e2:01:66:5a:6b:f7:c6:3b:36:4a:5f:
                    bd:7e:cd:47:51:cc:41:6d:a8:2e:1a:b9:c9:1c:1c:
                    b0:8b:ed:3c:8e:02:ae:61:78:87:2d:e0:8e:f5:7a:
                    2b:62:ad:5a:23:26:ec:7b:b6:d0:51:9d:0c:8a:b6:
                    36:5f:23:43:f1:7e:d3:63:16:0b:70:1b:77:2d:92:
                    ee:b4:b1:4c:86:84:e5:8c:86:ce:5c:6d:36:24:97:
                    f0:a5:b7:bb:a0:62:77:d0:15:5c:47:2f:3b:03:44:
                    c5:d0:2a:8c:cb:51:eb:55:15:bc:0a:b8:b9:33:88:
                    0a:5a:5a:93:b0:57:12:ea:d6:f7:73:6a:53:2c:8f:
                    2b:66:31:0a:ba:c4:82:90:d5:ef:c5:26:94:4c:0d:
                    30:aa:45:ca:e9:cd:5a:88:b7:36:53:4a:53:8b:4f:
                    37:ad:03:e4:37:78:59:9b:64:37:27:ba:5d:5b:98:
                    46:4c:d6:f9:ee:53:d4:c0:88:81:cd:c0:30:bb:a2:
                    3d:dd:b9:d8:46:bb:61:bd:88:54:9e:bf:f8:b5:30:
                    bc:b4:ce:57:53:ff:64:14:cb:23:b4:0a:11:69:7a:
                    d8:45:fb:04:32:ff:6b:27:7f:6c:39:47:20:e8:01:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2F:1B:D8:8F:9B:C1:76:4A:B0:50:B7:03:0F:50:1A:DD:81:57:0E
            X509v3 Authority Key Identifier:
                keyid:C9:78:6D:63:C8:7D:85:D4:41:14:67:24:EC:FA:C9:35:27:EF:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/33/C9786D63C87D85D441146724ECFAC93527EF6FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXhtY8h9hdRBFGck7PrJNSfvb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/33/C9786D63C87D85D441146724ECFAC93527EF6FD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:e5:95:07:6f:23:86:c8:e1:bd:41:7d:9d:59:f6:55:90:
         49:7a:de:ed:3d:8c:23:01:48:41:0f:62:98:9c:fd:62:6b:1e:
         b7:f2:39:d5:32:65:70:b2:64:f3:04:41:ed:33:8b:66:0f:71:
         ee:4f:20:68:2a:e4:f3:42:4e:9d:89:09:38:d3:03:33:4e:24:
         32:94:a1:21:22:f3:71:2d:54:4d:db:3b:65:17:7f:34:c0:ed:
         a7:27:5e:4d:43:1c:22:c3:0e:8d:3f:9c:8f:4b:07:bb:f7:12:
         23:aa:70:03:dc:bb:c5:2a:36:ee:b0:5c:5a:98:21:4c:c0:fd:
         cb:fe:06:a4:4f:80:c2:f0:a8:57:e7:cd:22:9a:f5:a5:bd:68:
         95:88:41:9b:8d:a7:58:29:eb:d7:63:c6:74:b9:f4:24:6a:eb:
         74:93:a1:80:6f:f4:ee:3a:c4:2b:d0:9c:6d:0c:d7:e5:86:fd:
         33:b3:55:42:dd:00:d6:4a:0f:ba:aa:47:3b:6c:6a:29:49:f6:
         58:34:07:35:89:37:8a:4d:6c:02:5e:8a:30:87:61:4a:49:de:
         85:c6:54:a7:7e:cd:ce:e0:1b:7a:df:35:7e:91:05:4e:2f:9a:
         02:31:a0:c2:31:03:62:aa:bf:79:61:f6:7d:71:ca:29:06:7d:
         f5:a9:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-fra.rpki-client.org