Manifest

$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.mft
File:                     F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.mft (raw, json)
Hash identifier:          qw31OamAbnQI8wH6zuoeP0mQy+MnHBYzeYul80reCh4=
Subject key identifier:   E0:F9:BF:41:BE:0F:EE:98:F0:4D:E8:CB:9F:D4:AF:5A:B5:D7:7B:7D
Authority key identifier: F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7
Certificate issuer:       /CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
Certificate serial:       5806257CDBB696367815CB55CEDC99D28B4B4F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer
Subject info access:      rsync://rsync.krill.cloud/repo/nlnetlabs/1/F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.mft
Manifest number:          0151
Signing time:             Mon 25 Jul 2022 11:43:03 +0000
Manifest this update:     Mon 25 Jul 2022 11:38:03 +0000
Manifest next update:     Tue 26 Jul 2022 15:08:03 +0000
Files and hashes:         1: F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.crl (hash: RvrGZAo+maMQ1fTYRzxvwNTAchoap6FLFPujF8hiDf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:06:25:7c:db:b6:96:36:78:15:cb:55:ce:dc:99:d2:8b:4b:4f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
        Validity
            Not Before: Jul 25 11:38:03 2022 GMT
            Not After : Jul 26 15:08:03 2022 GMT
        Subject: CN=E0F9BF41BE0FEE98F04DE8CB9FD4AF5AB5D77B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:3e:fc:1a:1c:48:20:c9:79:c9:76:5d:bc:
                    47:d0:52:83:da:68:93:ea:7e:72:da:c9:1f:63:73:
                    18:c8:4e:fa:1c:5e:a7:c7:92:af:af:3b:e6:8c:0e:
                    3f:57:6f:f4:e3:69:79:bb:12:60:22:75:8d:8c:1f:
                    4f:9a:73:f2:8c:74:33:c1:d6:29:b2:92:ad:6e:34:
                    4f:2b:e3:b9:fc:22:81:c4:82:a5:d8:ed:d2:10:89:
                    06:b1:97:9d:b7:a3:40:a5:23:fc:13:72:6e:41:c3:
                    e2:0b:7b:2a:43:d8:6c:78:77:08:76:b9:5d:39:c5:
                    03:35:67:a0:c2:78:4f:a1:24:1f:cf:a4:2b:b2:b0:
                    6d:00:04:fc:18:25:de:39:d1:e0:0c:8b:c7:0d:18:
                    d7:67:b4:3e:38:cc:5d:b5:31:ae:4f:62:41:74:50:
                    99:ad:2d:4a:6a:23:fd:68:fd:0b:c3:b5:49:89:a1:
                    ed:56:14:e3:ee:0b:69:57:c3:c7:41:a3:e5:5f:cd:
                    f8:23:2b:87:13:b9:6a:86:2a:76:35:f4:d5:3f:ec:
                    7e:a8:ca:67:e4:11:6e:c7:93:d6:77:2b:bc:f2:39:
                    c4:34:49:2e:fd:b2:a3:5a:bd:71:c3:30:d7:d2:e2:
                    3f:03:3a:3f:7c:06:81:f6:64:0e:db:dc:19:32:fb:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F9:BF:41:BE:0F:EE:98:F0:4D:E8:CB:9F:D4:AF:5A:B5:D7:7B:7D
            X509v3 Authority Key Identifier:
                keyid:F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b8:65:54:3c:df:22:f3:d3:cc:1a:3d:0c:74:f0:fe:55:13:
         ef:1d:85:eb:e2:62:f5:9c:15:7a:29:a4:83:bc:a8:ac:e1:16:
         1f:39:4a:9a:1a:fe:a8:00:75:10:da:c6:85:bf:0e:db:b6:0d:
         6a:a4:00:b5:0e:fd:71:b3:63:e6:ae:c1:90:47:d8:c1:fb:39:
         b5:2f:a6:27:60:e6:50:2d:cb:77:6b:e8:02:a0:6a:a6:2f:5e:
         9a:85:35:2e:cd:2d:60:b6:63:9e:95:4f:17:64:e5:7b:a9:bb:
         d9:34:b8:33:18:e8:ea:11:31:48:30:ce:5e:85:07:8b:bb:ee:
         0a:6d:ac:21:39:20:65:4a:91:ab:ec:43:e3:57:a9:d9:64:b7:
         58:7f:94:4b:89:b2:65:37:4e:95:c1:be:27:aa:e0:1a:38:b9:
         53:b7:a0:f7:92:4e:f5:af:82:34:5e:24:26:af:76:3c:62:cc:
         e6:a4:99:bf:6a:da:18:6b:2c:e6:f0:ce:e0:1b:ce:84:5e:79:
         ed:6d:8a:f2:7b:86:cc:0b:e2:74:b9:a5:9a:39:28:94:b1:e1:
         d3:e3:35:d2:f7:4a:e6:f6:72:f4:18:03:97:0b:ae:11:f3:2a:
         83:3a:2d:b6:c2:02:a1:55:02:86:d9:38:2f:3f:1f:15:b1:a9:
         c9:3d:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----