$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft File: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft (raw, json) Hash identifier: NN90jKtIi2G1+uyreDDpBWrDCtJpvjwE5qBcpP77chE= Subject key identifier: D5:4C:A2:86:5D:72:BB:07:FC:C4:AA:8D:0C:22:F1:A3:EE:E2:BF:B0 Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Certificate serial: 0B80AB088271F0F40B0AC3841AE141EC8A14C5C7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft Manifest number: 02B9 Signing time: Fri 27 Sep 2024 08:24:55 +0000 Manifest this update: Fri 27 Sep 2024 08:19:55 +0000 Manifest next update: Sat 28 Sep 2024 09:53:55 +0000 Files and hashes: 1: 326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa (hash: Rd+dhCr5rYQwNoo+Nfmrr7x2WYwry9aUIha3WakJOtM=) 2: 326131323a646434373a383630613a3a2f34382d3438203d3e203530353535.roa (hash: UUvAqv9dTkpD3vnCpeK0nyckqw5fsjh4xIE1BuffKT4=) 3: 326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa (hash: xB9YMf9WLWlWJJykuB4jTj50Tz2/aBV24p0/bWTRB1I=) 4: 326131323a646434373a383630623a3a2f34382d3438203d3e203530353535.roa (hash: P8JskXQq8rhMqJmwd4lSnoyKOklqs5FaDVyanSYeqcg=) 5: 326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa (hash: q33k4Pm8Tc9+J+nVAuAOoyc9sZ/RYxCpNBmpPMyinh4=) 6: 326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa (hash: WhLiHVWIRrDdTM2/q/GOyUAgwW6kR1FOY914Re+OVhA=) 7: 326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa (hash: TVIb8+DyhB/YMbNeWImxDAGqBc36mjWnaSKjIIF5q1w=) 8: 326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa (hash: 1rnTFeDfRItQJKSerIoroO/PmIgosaC04bWnM0thBoA=) 9: 326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa (hash: yvJARCYuZKCcQdrZehBg3pmqGSxsDFgahe/Ya4VuMCA=) 10: 326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (hash: g1At5H1WGB9pJd143T4S3ULq7iOWiXWKs6MoqCgmWaY=) 11: 326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa (hash: bVgB6CY0EAnJitkx1Xv6J5wT2KqsqRck5c0cRpR6E6U=) 12: 326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa (hash: Y30p0MzCB2JiuAvDBKLSZwu+ZD8hbij5EEaa/uw9slo=) 13: 326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa (hash: HoZAYr0ETH2ygTyVLT/TWLTc95YKlgYR4RlonB/RlJc=) 14: 326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa (hash: 5jqra/OjEkdlCmNdY3X6oPmDKMUiE1/Q7yXAt6z6K6A=) 15: 326131323a646434373a383630303a3a2f34382d3438203d3e203530353535.roa (hash: bCptdjmvnQpm+VU0b5omGZ2gseXuWLCMxMKaXw2vivs=) 16: 326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa (hash: KdHvWmuZQHcbpceQ+U8MEcEFLjMenHgqGnoMsp2lirk=) 17: 326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa (hash: 8eFv2RBBtby1mcmk3KpRwsZCQZSgRLjiy2M/X1iLuSk=) 18: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl (hash: s+U0QdWRe9hJDZNdSceeVtpvU/DnK6oxq8H0a4xyfqY=) 19: 326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa (hash: pSS9lyg/r63hrLK6N28zfZCmJTpAFyPUHcuhnyC7Nds=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 0b:80:ab:08:82:71:f0:f4:0b:0a:c3:84:1a:e1:41:ec:8a:14:c5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Validity Not Before: Sep 27 08:19:55 2024 GMT Not After : Sep 28 09:53:55 2024 GMT Subject: CN=D54CA2865D72BB07FCC4AA8D0C22F1A3EEE2BFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:89:13:23:33:88:ce:d5:88:ff:c8:28:21: 08:e8:d6:78:b8:66:70:f0:b3:ef:b8:cf:ab:72:16: 4f:b1:f3:0d:90:59:b8:f7:41:f0:e0:08:77:fe:3a: df:dd:d4:be:42:ed:6c:f2:0f:ae:3e:b7:6b:cd:10: e6:73:54:d8:30:b9:b7:38:96:28:44:40:fd:d9:a6: 74:05:77:29:06:22:43:58:fa:9f:f3:55:0d:94:e2: 14:3b:ba:48:c9:8e:93:a9:0e:83:5e:82:76:a2:9a: 7a:05:cc:e5:41:e5:ec:18:5e:c6:16:ee:4e:b1:75: 18:19:81:b1:46:b1:33:74:3c:d6:f8:62:72:f4:36: 5c:5b:07:fe:d4:c9:40:18:6d:d9:ab:a2:a7:b4:7e: a9:e0:c5:1c:c7:3b:78:26:81:d3:b4:4c:0a:fc:6a: 08:29:09:d3:a2:2b:e8:4e:13:c1:df:7a:73:69:16: 26:de:70:b3:9e:c7:ee:5b:4c:f6:11:87:d8:03:f6: c8:fe:24:3a:12:3d:60:c5:57:55:b0:39:d5:bb:42: b7:a7:32:7f:75:e8:82:af:79:a7:c6:1b:1f:d6:50: cc:41:5a:9d:aa:d4:71:1f:8f:26:87:28:f4:78:8b: 14:6e:e0:5c:89:0d:c2:69:35:58:d9:60:94:8b:14: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4C:A2:86:5D:72:BB:07:FC:C4:AA:8D:0C:22:F1:A3:EE:E2:BF:B0 X509v3 Authority Key Identifier: keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:8a:f8:89:39:e4:bc:7f:ea:0c:24:64:ce:a2:3c:d7:7f:db: 7e:1d:98:ac:f8:6f:0e:58:68:53:36:68:bb:fc:97:20:e0:fe: c7:9d:eb:54:11:5e:52:f7:fa:c3:af:a2:e4:51:7d:6b:8e:9b: bc:5b:bb:fe:c0:fc:f4:07:7e:43:de:81:f1:3f:88:da:06:a4: 1d:1b:8e:29:57:08:03:53:91:be:44:76:4a:4e:8b:dc:ae:57: 1f:cf:bc:b6:f1:c0:f4:b2:10:63:10:6a:d5:0b:3c:88:17:25: 5e:f4:06:b6:3b:08:76:40:1b:27:40:c4:7f:4b:b3:63:f0:50: cd:65:1b:34:93:3a:9d:eb:ee:80:86:b6:13:04:4e:61:dc:3f: 8c:71:c3:c4:98:3c:8f:8a:53:7c:ce:b5:ea:94:24:16:87:3e: 93:0c:ff:1e:73:63:a4:ca:01:da:c2:31:3b:64:b3:58:83:88: ef:b0:c4:8b:4d:d8:65:86:ea:22:ef:30:07:98:cd:8d:01:c9: 28:04:3b:f3:77:51:47:27:8d:f6:b0:17:81:9e:a4:88:5c:40: 9b:d6:89:d4:8a:cf:2b:dd:28:9e:d5:4b:2e:d9:9e:5e:df:cd: 1e:95:cd:de:69:da:6d:63:bd:ae:53:cb:81:1f:07:ef:a3:31: a2:d6:d6:a6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUC4CrCIJx8PQLCsOEGuFB7IoUxccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFD RENDNThBMzAeFw0yNDA5MjcwODE5NTVaFw0yNDA5MjgwOTUzNTVaMDMxMTAvBgNV BAMTKEQ1NENBMjg2NUQ3MkJCMDdGQ0M0QUE4RDBDMjJGMUEzRUVFMkJGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRIkTIzOIztWI/8goIQjo1ni4 ZnDws++4z6tyFk+x8w2QWbj3QfDgCHf+Ot/d1L5C7WzyD64+t2vNEOZzVNgwubc4 lihEQP3ZpnQFdykGIkNY+p/zVQ2U4hQ7ukjJjpOpDoNegnaimnoFzOVB5ewYXsYW 7k6xdRgZgbFGsTN0PNb4YnL0NlxbB/7UyUAYbdmroqe0fqngxRzHO3gmgdO0TAr8 aggpCdOiK+hOE8HfenNpFibecLOex+5bTPYRh9gD9sj+JDoSPWDFV1WwOdW7Qren Mn916IKveafGGx/WUMxBWp2q1HEfjyaHKPR4ixRu4FyJDcJpNVjZYJSLFBbBAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQU1Uyihl1yuwf8xKqNDCLxo+7iv7AwHwYDVR0j BBgwFoAUAodsEZJMvaAb4a05oyBs+s3MWKMwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdM YWlyLVRFU1QvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1 OEEzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzov L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4ZmRlZWMwYzAx OTAzM2RiZGVjYzRmYTQvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNG QUNEQ0M1OEEzLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j Oi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdMYWlyLVRFU1QvMS8wMjg3NkMx MTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1OEEzLm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4r4 iTnkvH/qDCRkzqI813/bfh2YrPhvDlhoUzZou/yXIOD+x53rVBFeUvf6w6+i5FF9 a46bvFu7/sD89Ad+Q96B8T+I2gakHRuOKVcIA1ORvkR2Sk6L3K5XH8+8tvHA9LIQ YxBq1Qs8iBclXvQGtjsIdkAbJ0DEf0uzY/BQzWUbNJM6nevugIa2EwROYdw/jHHD xJg8j4pTfM616pQkFoc+kwz/HnNjpMoB2sIxO2SzWIOI77DEi03YZYbqIu8wB5jN jQHJKAQ783dRRyeN9rAXgZ6kiFxAm9aJ1IrPK90ontVLLtmeXt/NHpXN3mnabWO9 rlPLgR8H76MxotbWpg== -----END CERTIFICATE-----Generated at Fri Sep 27 20:06:47 2024 by rpki-client on console.sobornost.net