Manifest

$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft
File:                     A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft (raw, json)
Hash identifier:          T16PdTLcaIYYRtFn6DWqml623+601jigT+kZp0JzXGw=
Subject key identifier:   B7:C8:18:A2:82:D6:C7:91:E2:CE:C5:03:FB:70:1B:17:4A:A5:A5:D8
Authority key identifier: A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4
Certificate issuer:       /CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4
Certificate serial:       6E1E0A69D4BBB6073FE7637E60136C2E22B0B6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer
Subject info access:      rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft
Manifest number:          03A3
Signing time:             Sun 09 Jun 2024 18:32:19 +0000
Manifest this update:     Sun 09 Jun 2024 18:27:19 +0000
Manifest next update:     Mon 10 Jun 2024 22:27:19 +0000
Files and hashes:         1: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: qT95kixq0BHzFPE2vJrUyehuvucNJjXlM1DG+w9Pw6k=)
                          2: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: 3v7/sUja6QUO3xtJPkW6GXre1KLK7qvB7KPENWcSWhQ=)
                          3: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 7ElQasPNwa4SPlS9mxZKUgHISHUBRxtLfLADoy9of5M=)
                          4: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: auI7NEM+b0zH6+8nB0D7iSPuPK+dV5P8t5Tp8zAnI1s=)
                          5: 326130343a623930323a3a2f33322d3332203d3e203136353039.roa (hash: BQCC+OKMuk81Faj07ZZjx2P7SDBKongtQ84ip8lkEDw=)
                          6: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: w1R9WZyUdBb6Lc0YbWa1tZ7R4RMYcJ02maSfDMwqWV4=)
                          7: 5665DC4D31D2D8688792970C92271376F081D514.cer (hash: pMlpIqcyLswpJhvXr/AH7c8MKlSxPR/yHgW3u2Px+ww=)
                          8: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: tf8JMRqXljw7qscOgg/9HtnVrI1wbUu1qdEacd/xbBk=)
                          9: 326130343a623930323a3a2f33322d3332203d3e203134363138.roa (hash: BdIXKvOKCCcQmAebD8NWQLbAX1Z8wHn8mwlCBu8/C3c=)
                          10: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: AC09WpnaKzfgsS/xkiNmmFdsgbwHvAbjA5XSHYZbi88=)
                          11: A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl (hash: Lr4/XON5MdElkOZiRSmiv2DPfpFKz75b/7Om1Yueqvk=)
                          12: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: PQqUgTvM7ETeWVignn6eJgWllMredVRO5ZH2rhFjrpk=)
                          13: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: SWUG37car5l0A/TpLhoLLdjzhGw06y1FDsQ3WqIFwrg=)
                          14: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: Lq39teJkQUoxkRoHaZie26pVPfuCHpWCWnFEpbaNv+8=)
                          15: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 1q2TA9Ws/R5JE5uOmwwwCoRVkc8OHlVVHaxeWJ2op98=)
                          16: 326130343a623930353a3a2f34382d3438203d3e203134363138.roa (hash: 6p4aFGl0dNowe4dDEzVpdf9C/WfLOZ1eqTuby7Oka6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1e:0a:69:d4:bb:b6:07:3f:e7:63:7e:60:13:6c:2e:22:b0:b6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4
        Validity
            Not Before: Jun  9 18:27:19 2024 GMT
            Not After : Jun 10 22:27:19 2024 GMT
        Subject: CN=B7C818A282D6C791E2CEC503FB701B174AA5A5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:91:d8:a8:18:d7:19:13:55:87:ac:59:52:
                    26:70:48:8c:38:e5:c8:86:95:99:1b:79:22:07:04:
                    89:5d:94:c2:98:1c:d7:5d:54:da:68:7f:c5:0c:f8:
                    1e:b4:2b:91:ea:0f:8f:8e:21:bf:5f:ef:7c:20:e8:
                    ec:d4:4b:12:e5:a6:c9:2b:df:56:60:3b:c2:9b:79:
                    42:df:9f:05:30:e5:88:f7:bd:ed:75:24:4f:db:61:
                    b1:8c:71:49:4b:9f:98:32:47:8e:00:3a:bb:83:60:
                    11:14:ff:25:cb:f2:7e:6d:df:b2:8e:61:69:cc:68:
                    94:c8:ba:6c:67:81:72:53:91:82:bf:e8:20:30:ce:
                    df:96:35:12:30:83:ac:15:bb:90:45:53:8d:38:4a:
                    b7:cc:0e:41:00:74:a7:7e:20:a7:ab:96:df:6b:73:
                    94:6e:94:df:e8:d8:6d:57:7d:81:a0:b7:b6:11:1c:
                    a3:b4:4d:54:89:b8:f9:41:51:1b:f1:2f:0e:d3:cc:
                    e2:c8:c5:f2:47:03:db:d3:e4:0a:6f:24:1e:6a:5b:
                    f9:c9:41:ba:b6:60:f4:fe:32:69:c6:4e:aa:12:a2:
                    be:f7:05:9e:1b:04:7b:ab:e1:23:87:93:cd:3b:9f:
                    d7:b4:ae:73:b6:e4:25:7d:9e:0e:86:64:0d:fb:a9:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:18:A2:82:D6:C7:91:E2:CE:C5:03:FB:70:1B:17:4A:A5:A5:D8
            X509v3 Authority Key Identifier:
                keyid:A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:43:3c:55:18:be:07:9f:65:0a:06:4b:bd:39:4d:b1:e6:62:
         cb:52:15:0d:a2:35:c2:5c:00:30:e1:53:82:a7:b4:b5:97:ef:
         ac:72:f3:fb:29:10:b2:c1:2a:ff:ce:23:69:e1:a8:cb:7b:84:
         d1:01:b6:97:3b:97:83:c8:b8:a5:19:0e:be:21:4c:d5:40:ed:
         f6:ee:43:47:fc:57:92:9c:1f:60:e4:01:c1:e7:40:04:ac:10:
         7f:c5:3d:57:20:97:31:14:cf:97:b5:56:ca:a0:33:41:37:26:
         dc:6c:92:fa:3b:3b:ea:c8:50:7a:f1:25:5d:e2:bc:e4:8a:3a:
         4f:91:7f:6f:ec:8f:53:6f:0b:1b:ee:d7:c2:54:b3:d7:13:a5:
         31:b3:2e:c7:4e:0f:2f:fc:97:5f:8f:33:76:3e:51:87:66:2c:
         63:e7:29:96:95:99:3e:f7:4d:07:92:89:67:10:46:a9:8d:67:
         08:1d:23:89:fe:5f:b0:d4:d3:be:f0:e5:09:45:53:f6:b5:f1:
         0f:4b:4c:35:e7:00:51:ec:e7:94:6d:52:6e:91:4b:3e:9e:5e:
         0b:fa:bd:9b:4e:2e:64:23:8f:ff:5f:a6:ad:8c:fd:92:ae:fa:
         cf:2e:9b:c6:a9:84:24:5b:92:95:f2:49:95:10:45:b8:e6:15:
         17:1c:8a:d0
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUbh4KadS7tgc/52N+YBNsLiKwtr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgxZWIzYTVlYjNkZjYzNDU1MWE5MDcyMmJjNjNhZDdl
MDIyY2FjNDAeFw0yNDA2MDkxODI3MTlaFw0yNDA2MTAyMjI3MTlaMDMxMTAvBgNV
BAMTKEI3QzgxOEEyODJENkM3OTFFMkNFQzUwM0ZCNzAxQjE3NEFBNUE1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlZHYqBjXGRNVh6xZUiZwSIw4
5ciGlZkbeSIHBIldlMKYHNddVNpof8UM+B60K5HqD4+OIb9f73wg6OzUSxLlpskr
31ZgO8KbeULfnwUw5Yj3ve11JE/bYbGMcUlLn5gyR44AOruDYBEU/yXL8n5t37KO
YWnMaJTIumxngXJTkYK/6CAwzt+WNRIwg6wVu5BFU404SrfMDkEAdKd+IKerlt9r
c5RulN/o2G1XfYGgt7YRHKO0TVSJuPlBURvxLw7TzOLIxfJHA9vT5ApvJB5qW/nJ
Qbq2YPT+MmnGTqoSor73BZ4bBHur4SOHk807n9e0rnO25CV9ng6GZA37qRp7AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUt8gYooLWx5HizsUD+3AbF0qlpdgwHwYDVR0j
BBgwFoAUqB6zpes99jRVGpByK8Y61+AiysQwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcnN5bmMua3JpbGwuY2xvdWQvcmVwby9ubG5l
dGxhYnMvMS9BODFFQjNBNUVCM0RGNjM0NTUxQTkwNzIyQkM2M0FEN0UwMjJDQUM0
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUI2enBlczk5alJWR3BCeUs4WTYx
LUFpeXNRLmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5jOi8v
cnN5bmMua3JpbGwuY2xvdWQvcmVwby9ubG5ldGxhYnMvMS9BODFFQjNBNUVCM0RG
NjM0NTUxQTkwNzIyQkM2M0FEN0UwMjJDQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkM8VRi+B59l
CgZLvTlNseZiy1IVDaI1wlwAMOFTgqe0tZfvrHLz+ykQssEq/84jaeGoy3uE0QG2
lzuXg8i4pRkOviFM1UDt9u5DR/xXkpwfYOQBwedABKwQf8U9VyCXMRTPl7VWyqAz
QTcm3GyS+js76shQevElXeK85Io6T5F/b+yPU28LG+7XwlSz1xOlMbMux04PL/yX
X48zdj5Rh2YsY+cplpWZPvdNB5KJZxBGqY1nCB0jif5fsNTTvvDlCUVT9rXxD0tM
NecAUeznlG1SbpFLPp5eC/q9m04uZCOP/1+mrYz9kq76zy6bxqmEJFuSlfJJlRBF
uOYVFxyK0A==
-----END CERTIFICATE-----
Generated at Mon Jun 10 15:24:34 2024 by rpki-client on console-ams.rpki-client.org