Manifest

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.mft
File:                     DE6F18B461958DDD2074CB5A191A640D320BB580.mft (raw, json)
Hash identifier:          FTV/YgHI3DwRQLWaxNeSO9LJvX5rmNCNwjw2Qa9mSnI=
Subject key identifier:   3B:04:9F:A1:03:2E:58:0D:4E:37:17:C0:1A:3B:F9:79:4D:E5:D4:B0
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       0B52CA957C9C6C3333BE894DE00EF3C488E83E64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.mft
Manifest number:          B1
Signing time:             Sun 01 Jan 2023 14:11:42 +0000
Manifest this update:     Sun 01 Jan 2023 14:06:42 +0000
Manifest next update:     Mon 02 Jan 2023 14:26:42 +0000
Files and hashes:         1: DE6F18B461958DDD2074CB5A191A640D320BB580.crl (hash: m7f2ECrIa4ERa+vgxPe+/Aw5t4QxcQl21sOrjAsjJNk=)
                          2: 32332e3133322e3138342e302f32342d3234203d3e203233343730.roa (hash: Kbc2l2cgzvF3eKWgXhJFKQhZ1sNLVQqb/FbGf8EPk/g=)
                          3: 32332e3133322e3138342e302f32332d3234203d3e203631313338.roa (hash: 9Rx6YwGeO+qddrYZUR4PbxJwLzapCJol7vXRjrSVXrs=)
                          4: 3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa (hash: fNENuJH5SZb3SV87igwprZGlF1UZ/wccqYVRTJ7Fm00=)
                          5: 3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa (hash: e2n687zMium1PjPrzqJPGkMmZwnDFYMGlC2nTICiTPQ=)
                          6: 3231362e37332e3135382e302f32342d3234203d3e203233343730.roa (hash: cqJB+zUYjl3H1xdAUShGczy7UocN/cVZ+JX1OVcVjO4=)
                          7: 3231362e37332e3135362e302f32322d3234203d3e203631313338.roa (hash: D1WmJu2Dh1/OEVTcYzjb+JoPMUdgZPIp9U7J3tdWan4=)
                          8: 323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa (hash: nHcgCDXspM9nAfUC30jzFP3hk54wOvyS/oUZtnqYj+I=)
                          9: 32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa (hash: uZqEdSfaJ+VWHvjKADio/sD9lYR9NwKTHB/lXUuUrUM=)
                          10: A694D0B9587B22DCA457A78D509BBFC856B48B5E.cer (hash: I57slML6XUHAkrF7aNSE06mbdWSHCMbFEyVTvXb934I=)
                          11: 3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa (hash: DV/T7A22+0QtldDY8z1JQWvym84LDfjMRikl3L04bEw=)
                          12: 3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa (hash: ze8iahsz6r20hwfiOYIpGJF8zcd9bIOwwY8xSP/KYuU=)
                          13: 3139322e3230392e36322e302f32332d3234203d3e203631313338.roa (hash: zJvx2NebdarDHOagxK9NvSkjnZHtp70kQEGPLc7taxQ=)
                          14: 3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa (hash: R3OX0XfcEkFFAjaoz9WraY/1WKA+vU27TIIs2E22FC4=)
                          15: 3139322e3230392e36332e302f32342d3234203d3e2038313030.roa (hash: TVWrVY0GVw2hT+rKhbCkTOzTxlH3vH7v9ceaDiBIMFw=)
                          16: 3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa (hash: Mll9QG+npoxfg79tT8ZaFvjC4jC3jZevBJeLQyvKTqo=)
                          17: 3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa (hash: 0pPNjWZO6MTPIXOcYEy4NifqG4qLkg6z4aP9R+eJksA=)
                          18: 3231362e37332e3135392e302f32342d3234203d3e203631313338.roa (hash: Br4absea3kiGpGq4Fqh5sfZJ/UD/29j3QRvj3thk2u4=)
                          19: 3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa (hash: VyMnERdbYxVViEHLx3+SS99pV3mPn3J5jdbaVBDV9WI=)
                          20: 3231362e37332e3135372e302f32342d3234203d3e203631313338.roa (hash: kBHPD7/Qo2OL6S25+l4ArNftCTgFCIRfhOP4m/ujQwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:52:ca:95:7c:9c:6c:33:33:be:89:4d:e0:0e:f3:c4:88:e8:3e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Jan  1 14:06:42 2023 GMT
            Not After : Jan  2 14:26:42 2023 GMT
        Subject: CN=3B049FA1032E580D4E3717C01A3BF9794DE5D4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:88:00:ec:83:46:aa:ac:db:4e:19:e7:fe:da:
                    8c:ad:ee:9e:47:5d:1c:7d:3a:bf:7d:58:d7:05:68:
                    e6:dd:5c:b1:6b:79:9a:be:d4:d5:b6:d7:2f:ad:f2:
                    b0:e1:9a:ad:4b:37:5d:40:de:c2:ca:20:fc:e3:85:
                    34:fe:db:d4:4f:65:1b:47:53:eb:94:7b:b8:c2:cc:
                    18:5d:4d:ee:7c:ed:01:b4:2a:46:7c:35:cf:80:c1:
                    2f:ff:6a:87:c7:31:8d:b0:ed:cc:16:21:26:eb:85:
                    09:33:b9:a1:c6:e4:91:eb:a6:a8:f1:61:23:79:82:
                    81:db:23:9c:bc:d1:fb:89:a2:ad:32:7d:c1:1a:0f:
                    ab:84:20:71:1c:0b:fd:69:9d:5c:e3:1f:33:04:de:
                    4d:13:56:1e:e5:b2:df:be:fe:e8:76:c6:1d:10:d2:
                    9f:cd:f5:01:c9:92:70:d7:3b:92:e5:ce:af:d6:6b:
                    57:59:37:fe:f0:03:ef:b9:0f:d3:12:ee:c6:d9:a9:
                    f4:d9:39:22:ed:19:f2:0e:a1:8b:85:74:a5:d4:d1:
                    26:bf:ff:ef:7b:0f:43:cf:00:e5:3a:73:02:9b:e1:
                    0a:c9:5d:61:94:4f:c9:05:a7:b9:f7:5b:7d:42:4b:
                    e1:b0:73:ba:c0:b4:1a:c6:7e:53:a1:17:66:09:3d:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:04:9F:A1:03:2E:58:0D:4E:37:17:C0:1A:3B:F9:79:4D:E5:D4:B0
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c0:52:f2:fe:76:78:ec:5f:c7:08:e2:3d:2c:62:7c:50:d4:
         08:6f:f9:53:59:21:61:7d:5d:a1:2d:cd:96:91:d7:e0:b5:64:
         35:a8:dc:57:a4:73:61:ac:a8:60:ae:12:67:f1:8d:4c:4a:7f:
         de:00:f3:ad:48:61:b0:05:48:33:17:14:2c:eb:0f:13:1a:19:
         07:2c:1c:de:90:e2:9d:95:bc:af:7a:c0:c8:fb:d9:d2:64:e2:
         da:05:43:20:5f:68:e7:1a:3a:75:7e:65:67:10:43:1d:65:76:
         c7:d5:c5:80:14:00:ea:50:38:1e:8c:55:dd:24:97:95:9a:e1:
         2c:fc:fd:0f:6e:a5:cc:6b:f4:7a:b6:13:31:2b:2f:5a:2d:27:
         f8:a6:4c:9f:ce:23:5d:6b:5b:a8:e0:61:f1:78:29:a2:77:cd:
         84:4f:8c:57:73:f2:05:b7:05:5b:60:86:16:ce:ef:92:b6:74:
         84:4c:09:fc:64:cd:19:cf:ae:a3:4d:2b:49:89:a5:a6:db:ec:
         f6:e4:8c:15:8f:16:2b:9b:e7:2e:53:03:e8:af:a2:d1:fd:d1:
         f1:7a:3d:81:69:ca:04:e2:32:d9:dd:9b:4c:1b:85:9f:28:b1:
         ae:a6:03:94:1f:ff:0a:ad:60:31:47:00:88:68:c2:34:7b:39:
         e1:7c:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org