Manifest

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft
File:                     0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft (raw, json)
Hash identifier:          7WPFAvjZ/6bVhLUHyd5Bmryuvb/VgjOGqypM8EgL28I=
Subject key identifier:   82:57:85:4A:3E:3E:3D:BC:75:9A:97:4B:46:DF:68:D4:23:62:46:F5
Authority key identifier: 0D:10:E8:A7:63:BF:8B:AB:E9:6B:E7:AB:47:F9:DB:59:D9:D9:52:32
Certificate issuer:       /CN=0d10e8a763bf8babe96be7ab47f9db59d9d95232
Certificate serial:       16B3B82400BE1C01F1E64EFEA596FA4718FBF725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRDop2O_i6vpa-erR_nbWdnZUjI.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft
Manifest number:          03AA
Signing time:             Sun 13 Apr 2025 04:08:57 +0000
Manifest this update:     Sun 13 Apr 2025 04:03:57 +0000
Manifest next update:     Mon 14 Apr 2025 04:49:57 +0000
Files and hashes:         1: 0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.crl (hash: 2dI0wBu3WfXwp+fHdqejgcF86e0OhyTpQp7Prh+7n8s=)
                          2: AS50555.asa (hash: 6Tb3JWAiG3HB18+QURZTnhnTtpjs1INvbgLT/78hSiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b3:b8:24:00:be:1c:01:f1:e6:4e:fe:a5:96:fa:47:18:fb:f7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d10e8a763bf8babe96be7ab47f9db59d9d95232
        Validity
            Not Before: Apr 13 04:03:57 2025 GMT
            Not After : Apr 14 04:49:57 2025 GMT
        Subject: CN=8257854A3E3E3DBC759A974B46DF68D4236246F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:32:4a:44:de:cd:ac:f2:97:12:7b:31:42:
                    98:ab:31:73:87:19:6a:9c:8f:6c:7e:91:38:11:49:
                    b1:69:b9:f1:e1:80:f3:c2:37:97:87:fc:57:92:70:
                    7c:dd:91:be:50:02:42:5b:46:80:5f:87:98:d1:62:
                    24:38:83:07:92:17:57:95:78:ca:35:e7:b2:e3:4c:
                    f9:7c:e9:cf:a5:e5:7e:82:56:1c:88:4c:47:2e:cd:
                    cf:2b:4a:e5:5c:af:8d:0c:4e:48:de:56:e6:bb:55:
                    a5:54:17:f3:49:08:b9:28:68:04:5d:11:36:1f:89:
                    59:42:75:4a:27:48:5b:b7:87:1c:bb:41:d9:bf:68:
                    30:17:7f:91:f6:84:59:7b:bc:55:9e:9a:e9:a2:04:
                    e5:62:69:6f:3d:f9:ff:58:8d:81:ab:ac:e1:f7:37:
                    9b:38:2d:94:5d:ab:c3:db:85:eb:c2:9c:f5:aa:7f:
                    2a:81:5d:34:a8:59:2c:5f:5b:cb:91:9a:29:5b:5f:
                    0a:ca:62:58:2f:1f:e5:06:9e:02:b0:a8:55:6c:cd:
                    39:89:95:f5:cd:6f:cf:f5:fb:99:fd:b0:2c:07:82:
                    3c:d6:01:f3:59:7e:5a:ad:f1:6e:e4:8f:40:f1:bd:
                    9f:be:ee:b1:a3:ad:95:ef:7f:40:98:7a:4d:f3:2a:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:57:85:4A:3E:3E:3D:BC:75:9A:97:4B:46:DF:68:D4:23:62:46:F5
            X509v3 Authority Key Identifier:
                keyid:0D:10:E8:A7:63:BF:8B:AB:E9:6B:E7:AB:47:F9:DB:59:D9:D9:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRDop2O_i6vpa-erR_nbWdnZUjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:ed:e8:9e:c4:f1:c2:19:83:d0:01:ad:3f:ad:12:75:d5:
         c3:b6:b5:a0:5c:d9:0c:64:d5:5d:1e:8b:34:55:28:74:67:91:
         22:a9:6c:d8:97:cb:68:cd:49:3a:2b:87:5d:24:c2:4e:b3:0a:
         bf:9c:85:3e:62:a2:de:ba:ba:23:ce:1e:a5:e5:a9:34:03:57:
         1b:60:17:48:1a:a7:ff:98:f7:dd:44:69:08:7a:de:89:b5:06:
         86:5a:60:58:8c:8d:54:61:fc:3c:92:30:60:9c:5c:63:38:62:
         45:1c:0f:25:6b:71:4e:45:3c:0b:1e:83:d0:01:9d:59:16:ef:
         0c:25:49:70:4e:3c:a0:20:a2:c6:ae:69:50:ca:18:0e:72:9b:
         17:bd:30:a8:c7:78:fd:63:80:3e:fb:06:6f:36:97:a7:a2:7d:
         21:71:0c:2f:5e:c8:8e:a6:a2:6f:2f:44:8d:99:02:e2:e6:f0:
         08:f3:46:41:f7:c3:75:3f:50:a2:7e:56:ec:54:8b:5a:ca:a8:
         ad:ea:d7:62:fd:78:24:d8:c8:86:e7:37:68:7a:6e:15:e2:9f:
         95:96:9c:95:58:70:0a:17:a4:f8:25:ab:b8:71:a0:58:fc:36:
         bb:4b:29:f3:67:bd:d3:4a:39:f0:a2:45:a5:e5:ff:db:ff:54:
         a3:67:84:c9
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUFrO4JAC+HAHx5k7+pZb6Rxj79yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQxMGU4YTc2M2JmOGJhYmU5NmJlN2FiNDdmOWRiNTlk
OWQ5NTIzMjAeFw0yNTA0MTMwNDAzNTdaFw0yNTA0MTQwNDQ5NTdaMDMxMTAvBgNV
BAMTKDgyNTc4NTRBM0UzRTNEQkM3NTlBOTc0QjQ2REY2OEQ0MjM2MjQ2RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsTJKRN7NrPKXEnsxQpirMXOH
GWqcj2x+kTgRSbFpufHhgPPCN5eH/FeScHzdkb5QAkJbRoBfh5jRYiQ4gweSF1eV
eMo157LjTPl86c+l5X6CVhyITEcuzc8rSuVcr40MTkjeVua7VaVUF/NJCLkoaARd
ETYfiVlCdUonSFu3hxy7Qdm/aDAXf5H2hFl7vFWemumiBOViaW89+f9YjYGrrOH3
N5s4LZRdq8PbhevCnPWqfyqBXTSoWSxfW8uRmilbXwrKYlgvH+UGngKwqFVszTmJ
lfXNb8/1+5n9sCwHgjzWAfNZflqt8W7kj0DxvZ++7rGjrZXvf0CYek3zKoVpAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUgleFSj4+Pbx1mpdLRt9o1CNiRvUwHwYDVR0j
BBgwFoAUDRDop2O/i6vpa+erR/nbWdnZUjIwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdM
YWlyLVRFU1QvMC8wRDEwRThBNzYzQkY4QkFCRTk2QkU3QUI0N0Y5REI1OUQ5RDk1
MjMyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRFJEb3AyT19pNnZwYS1lclJf
bmJXZG5aVWpJLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j
Oi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdMYWlyLVRFU1QvMC8wRDEwRThB
NzYzQkY4QkFCRTk2QkU3QUI0N0Y5REI1OUQ5RDk1MjMyLm1mdDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvbt
6J7E8cIZg9ABrT+tEnXVw7a1oFzZDGTVXR6LNFUodGeRIqls2JfLaM1JOiuHXSTC
TrMKv5yFPmKi3rq6I84epeWpNANXG2AXSBqn/5j33URpCHreibUGhlpgWIyNVGH8
PJIwYJxcYzhiRRwPJWtxTkU8Cx6D0AGdWRbvDCVJcE48oCCixq5pUMoYDnKbF70w
qMd4/WOAPvsGbzaXp6J9IXEML17Ijqaiby9EjZkC4ubwCPNGQffDdT9Qon5W7FSL
WsqorerXYv14JNjIhuc3aHpuFeKflZaclVhwChek+CWruHGgWPw2u0sp82e900o5
8KJFpeX/2/9Uo2eEyQ==
-----END CERTIFICATE-----