Manifest

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
File:                     7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json)
Hash identifier:          6RBXGV6ST4Gx22deTy7weCuF67AzHYfh5+PmsxnlBfg=
Subject key identifier:   3C:06:2D:D6:37:69:AB:29:73:5B:26:24:2E:27:10:F1:AC:E7:4F:F2
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       4CD7C070CAB42C4CF22A02094E46A92ACCDBCDA8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
Manifest number:          03A7
Signing time:             Tue 15 Apr 2025 12:55:59 +0000
Manifest this update:     Tue 15 Apr 2025 12:50:59 +0000
Manifest next update:     Wed 16 Apr 2025 14:31:59 +0000
Files and hashes:         1: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=)
                          2: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=)
                          3: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: uNw/kLw0kX3LBhsW7bTT12bF+ptq4VaBXUevV2vQ/iM=)
                          4: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=)
                          5: 3130342e33372e34322e302f32332d3234203d3e20393435.roa (hash: 15ZkZ3TfYDgn/2NuUygkkJxkxZnGlbkkKGi5Yto7PDI=)
                          6: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=)
                          7: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d7:c0:70:ca:b4:2c:4c:f2:2a:02:09:4e:46:a9:2a:cc:db:cd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Apr 15 12:50:59 2025 GMT
            Not After : Apr 16 14:31:59 2025 GMT
        Subject: CN=3C062DD63769AB29735B26242E2710F1ACE74FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:ef:67:1e:b0:8d:73:c4:b1:a8:10:d7:f0:
                    3a:c8:63:9f:64:85:d1:f7:0c:00:fe:d0:a9:0c:d7:
                    d4:5a:a5:68:1c:4e:05:41:75:12:7d:78:11:f9:73:
                    15:dc:66:ab:f9:8f:6a:1c:2d:39:07:83:4a:d2:19:
                    9b:a5:5a:88:68:28:4c:55:1e:1a:68:6d:02:84:b1:
                    21:7a:9b:88:50:01:80:f8:d8:23:0d:dc:34:ac:de:
                    dc:6a:0a:7d:26:a5:d0:37:b0:4a:d8:0c:d5:d8:67:
                    55:9c:1c:fc:2d:c5:a8:b1:4c:01:14:bd:ea:5e:6d:
                    e7:1a:af:48:2f:0d:c3:6a:33:44:ba:34:4c:0a:f5:
                    02:bf:0f:e9:58:a7:f7:ae:e9:0e:7f:11:22:27:90:
                    be:04:3b:6f:0c:b5:ff:1b:e3:79:28:99:53:36:c2:
                    7a:80:17:36:a3:2e:5c:ee:76:cd:ca:50:5f:3f:e2:
                    14:da:0e:38:ca:15:21:9a:94:9b:7c:b5:20:0b:8d:
                    43:ff:e7:7c:53:95:d8:d1:3f:80:1a:59:28:3e:88:
                    ae:64:e4:35:1f:b2:70:7d:86:8e:a6:4e:00:2c:2c:
                    44:e8:fd:08:ac:c3:75:c1:8f:cb:aa:ea:e5:ee:68:
                    52:22:69:b7:03:74:f2:d7:cd:74:70:91:08:2b:6e:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:06:2D:D6:37:69:AB:29:73:5B:26:24:2E:27:10:F1:AC:E7:4F:F2
            X509v3 Authority Key Identifier:
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fc:ac:bf:04:8a:fe:92:9d:99:8a:7f:4d:81:f7:92:82:7a:
         8a:44:8e:b6:4d:7a:82:b9:82:92:7c:7e:b1:86:e9:b8:ba:b2:
         69:13:b1:71:26:dd:00:60:60:c9:ee:5e:cb:3c:ce:51:79:38:
         85:13:d4:ac:fd:bd:ab:cd:c9:91:25:4e:bf:4b:74:22:5b:c4:
         09:bb:4c:c8:19:34:ed:bf:14:2f:33:d5:17:59:8e:ca:99:ff:
         d0:0d:3e:d9:e0:07:18:be:fd:5b:78:82:21:7c:77:1c:64:0f:
         35:5d:29:6a:5f:9f:d8:92:65:3d:c6:7e:17:85:b8:63:dd:fb:
         ff:6e:ed:39:4d:46:f8:85:71:f1:d3:83:e8:ac:2f:18:bd:e0:
         4c:62:61:84:da:52:3a:02:90:d8:1d:4f:e4:01:77:a9:40:16:
         fb:93:95:11:1a:8b:22:db:ae:53:c2:58:af:4b:8b:2f:97:2b:
         d6:1c:73:ff:c3:e6:49:a8:8b:40:5c:af:88:63:52:dd:71:4b:
         83:d3:87:92:65:71:86:6e:2c:3a:71:ff:db:d7:2c:8c:5e:26:
         14:03:37:ca:2f:ba:7c:66:f9:2b:3b:50:91:4e:ba:13:1c:b6:
         da:bf:78:72:26:85:dc:57:c4:14:72:f5:45:29:2b:8f:28:1b:
         b5:96:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----