Manifest

$ rpki-client -vvf rsync.miralium.net/rpki/Miralium-Research-RPKI-CA-P1/0/4325F80E3C03287D3E64736D074A5FA8620F3A79.mft
File:                     4325F80E3C03287D3E64736D074A5FA8620F3A79.mft (raw, json)
Hash identifier:          7PQp34132waSZPYqowP3uG8M5LsjYqkqzUkcPTZQG8M=
Subject key identifier:   02:CB:2C:52:C0:F5:93:C2:40:25:52:CD:7B:64:E4:9C:C5:46:A2:B2
Authority key identifier: 43:25:F8:0E:3C:03:28:7D:3E:64:73:6D:07:4A:5F:A8:62:0F:3A:79
Certificate issuer:       /CN=4325F80E3C03287D3E64736D074A5FA8620F3A79
Certificate serial:       4313C13422A8964A4C14C80829449D65D563FE59
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/4325F80E3C03287D3E64736D074A5FA8620F3A79.cer
Subject info access:      rsync://rsync.miralium.net/rpki/Miralium-Research-RPKI-CA-P1/0/4325F80E3C03287D3E64736D074A5FA8620F3A79.mft
Manifest number:          03
Signing time:             Thu 27 Jun 2024 22:07:21 +0000
Manifest this update:     Thu 27 Jun 2024 22:02:21 +0000
Manifest next update:     Sat 29 Jun 2024 01:39:21 +0000
Files and hashes:         1: 4325F80E3C03287D3E64736D074A5FA8620F3A79.crl (hash: nrIZ59iMrEPhn21D4WoYfBSdnxqw5PYTRdVnrqElbTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:13:c1:34:22:a8:96:4a:4c:14:c8:08:29:44:9d:65:d5:63:fe:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4325F80E3C03287D3E64736D074A5FA8620F3A79
        Validity
            Not Before: Jun 27 22:02:21 2024 GMT
            Not After : Jun 29 01:39:21 2024 GMT
        Subject: CN=02CB2C52C0F593C2402552CD7B64E49CC546A2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:b2:8b:0b:c8:62:00:f2:02:bd:08:47:8d:
                    5e:38:2a:41:50:24:48:8d:6d:ba:1c:5d:23:a7:cf:
                    ec:10:98:19:43:e3:18:28:9c:0f:f2:68:9f:51:74:
                    b5:7e:a6:bb:db:5c:08:87:ef:ec:b6:a5:4f:ac:1f:
                    50:b4:e4:a2:fd:1b:70:97:fc:e6:97:63:8e:9d:1e:
                    2d:f6:79:61:8c:3c:d7:a3:63:6b:a8:6f:3c:8b:00:
                    7f:fc:6b:e8:98:69:c5:08:98:25:80:05:d6:d9:d7:
                    6f:13:dc:1d:49:35:07:73:00:0b:03:22:29:3c:55:
                    c3:02:ba:e1:03:15:81:9d:e9:51:fa:83:a1:e2:d5:
                    c3:99:cd:aa:af:d3:66:0a:47:4a:45:6e:fa:2b:7d:
                    5c:9a:d9:de:d6:68:27:b6:4f:79:a1:9b:9b:58:94:
                    40:53:e7:bd:29:d5:8a:5d:54:e7:26:a6:12:7f:aa:
                    b6:88:63:3b:e0:0f:bc:e4:87:7c:b4:89:d3:e4:30:
                    21:47:d2:0f:5f:30:8b:5c:5c:cd:cd:46:d7:60:5b:
                    87:1b:cd:54:4b:64:78:08:40:96:50:e0:c2:08:3a:
                    bf:85:6b:14:2b:1f:41:98:5b:f9:6b:75:85:46:0d:
                    3a:eb:b6:0e:52:31:4e:4c:4c:94:21:00:19:d2:6e:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:2C:52:C0:F5:93:C2:40:25:52:CD:7B:64:E4:9C:C5:46:A2:B2
            X509v3 Authority Key Identifier:
                keyid:43:25:F8:0E:3C:03:28:7D:3E:64:73:6D:07:4A:5F:A8:62:0F:3A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.miralium.net/rpki/Miralium-Research-RPKI-CA-P1/0/4325F80E3C03287D3E64736D074A5FA8620F3A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/4325F80E3C03287D3E64736D074A5FA8620F3A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.miralium.net/rpki/Miralium-Research-RPKI-CA-P1/0/4325F80E3C03287D3E64736D074A5FA8620F3A79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3e:5a:b0:33:c8:5b:5c:ec:dd:5f:a6:58:ba:a1:82:43:58:
         53:31:bb:29:cd:bb:be:17:37:fb:2c:5b:26:0a:5d:d6:be:02:
         62:2c:27:0a:1a:d6:6c:06:92:c2:d9:af:0b:ca:47:3d:b1:e0:
         29:b5:c4:53:aa:c9:eb:6e:e4:af:a2:12:b7:8f:32:07:df:99:
         4b:b0:b6:bd:93:f8:60:bc:f2:60:f0:d2:3a:a3:c4:19:46:82:
         a0:84:d1:35:1d:bf:95:95:94:9e:2e:68:3f:ef:55:3b:99:dd:
         dd:81:97:d5:36:4f:38:d3:f0:88:d6:65:ef:77:52:23:ae:ce:
         5d:5d:18:33:2e:af:81:e2:31:42:9e:86:3d:6d:d8:50:53:71:
         26:cc:d9:ca:de:8d:01:02:61:34:11:2d:e3:1b:59:ee:3d:f9:
         1b:56:93:26:e8:ba:85:6a:f8:a6:19:87:47:30:a7:e1:61:1e:
         a1:91:4b:b4:e1:83:bd:8e:86:a1:4c:66:da:1b:ac:00:e2:e7:
         0b:2a:5c:41:8c:9a:f8:1a:e3:fb:f0:ea:f0:d0:c8:51:77:24:
         08:97:ef:33:c4:b0:7f:b3:46:fa:cd:c8:56:bc:33:2f:ff:8a:
         f7:0e:28:e4:95:4e:85:cb:bc:d1:98:d4:8c:3e:16:d3:6b:01:
         87:9a:1b:8a
-----BEGIN CERTIFICATE-----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