Manifest

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.mft
File:                     5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.mft (raw, json)
Hash identifier:          NPUVPfA7NiJt9YggeKcO7/sLLJOjhiOjYXfoAT6LgTc=
Subject key identifier:   99:63:51:4B:DF:CE:C6:BC:93:A9:E2:C2:A1:FE:9D:4A:85:BD:7E:32
Authority key identifier: 54:63:A0:40:A4:DF:40:E0:D6:FA:4C:F7:D7:9B:C3:85:4E:70:5A:BD
Certificate issuer:       /CN=cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d
Certificate serial:       03D35CB9E17537C51EC990856BAC1A3EA65898B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.mft
Manifest number:          08FD
Signing time:             Tue 15 Apr 2025 18:12:40 +0000
Manifest this update:     Tue 15 Apr 2025 18:07:40 +0000
Manifest next update:     Wed 16 Apr 2025 20:15:40 +0000
Files and hashes:         1: 323630373a396130303a3a2f33322d3332203d3e203335393136.roa (hash: k0hwosRfhq966UL7pp40uopdlp1L+Xz4Uu3Rw444G2M=)
                          2: 5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.crl (hash: ec0Bc7e0iTm5d6yuRZIQfige18nSURfqH4qveFZsm1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d3:5c:b9:e1:75:37:c5:1e:c9:90:85:6b:ac:1a:3e:a6:58:98:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d
        Validity
            Not Before: Apr 15 18:07:40 2025 GMT
            Not After : Apr 16 20:15:40 2025 GMT
        Subject: CN=9963514BDFCEC6BC93A9E2C2A1FE9D4A85BD7E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:57:47:55:70:d9:d8:f6:5d:88:1f:81:c7:
                    6e:12:da:b3:77:1b:d5:ff:cf:b0:dd:31:0c:04:b8:
                    bb:cb:f6:4b:0b:77:13:fe:24:75:77:57:b0:7a:1b:
                    89:46:bd:f3:07:ab:09:39:e6:66:f2:4c:90:db:76:
                    2c:44:be:ee:fe:13:65:28:09:86:7c:34:fa:ea:e9:
                    f0:19:82:ee:84:64:75:78:84:3d:b9:c3:b5:00:3f:
                    bd:bc:60:a9:da:37:86:80:1e:9f:bd:10:f1:e0:e6:
                    42:39:c1:42:aa:91:ff:fd:bf:1f:89:dd:6f:37:b0:
                    21:37:9d:c7:6d:7f:a3:96:fc:93:32:11:41:04:e9:
                    da:5e:25:7d:d1:e7:72:bf:ab:d3:95:1f:ae:a4:55:
                    56:bc:39:4e:12:0a:6e:d1:cb:3c:a4:ab:a3:d9:c7:
                    d4:23:52:32:9b:17:bb:19:2f:dd:3b:54:0a:b2:28:
                    0e:95:be:64:60:e3:b0:4d:04:f5:94:96:0b:8e:9d:
                    ac:0c:10:e5:13:4d:42:0a:7d:67:49:9c:87:69:39:
                    82:29:6c:fb:49:fa:07:0b:53:20:15:2c:05:8e:62:
                    a9:ef:b7:60:39:6e:99:51:6a:eb:20:07:f9:33:7a:
                    bf:4e:da:81:cf:52:67:0d:e8:a4:a2:98:bf:2d:d2:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:51:4B:DF:CE:C6:BC:93:A9:E2:C2:A1:FE:9D:4A:85:BD:7E:32
            X509v3 Authority Key Identifier:
                keyid:54:63:A0:40:A4:DF:40:E0:D6:FA:4C:F7:D7:9B:C3:85:4E:70:5A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:e2:e4:50:53:bc:cf:c2:3f:63:a2:36:d6:2c:45:26:4a:
         18:f6:cd:ca:17:81:6a:9b:95:5d:53:d8:dd:4c:39:5c:61:c2:
         6b:69:61:2a:db:64:d3:3e:c7:e5:81:61:bf:7e:16:f7:a8:30:
         fc:af:f1:fa:73:36:a9:f9:9e:7b:2a:9b:10:ed:e1:d9:2c:36:
         94:77:d5:d4:32:5f:ec:75:9d:a3:0e:13:4d:b0:c9:d3:d1:60:
         2e:a2:90:d2:48:4e:f3:56:01:b8:6c:18:d5:9d:da:71:77:6c:
         ea:fe:58:66:bb:78:86:26:ce:0c:51:be:bc:60:38:54:02:da:
         d5:98:9a:06:e1:ac:ac:71:cc:72:ee:3d:ee:b7:89:f7:b0:4e:
         c5:ab:1c:17:b0:f3:1a:45:78:ca:da:75:c4:cb:6f:3c:f9:bc:
         b2:29:05:67:c0:5d:db:dc:65:9f:23:05:ed:07:f8:4a:d6:41:
         17:c5:c4:77:ea:a6:72:cf:15:ef:8f:be:a5:40:5e:f7:17:0b:
         f1:f6:72:7a:ab:96:e2:2f:0b:f9:10:ab:d8:71:c8:8b:eb:77:
         a8:60:e7:22:b3:c1:c3:83:32:34:41:f2:b3:52:a8:5f:f7:7c:
         d3:1b:4c:b8:05:43:14:fc:01:e8:13:47:45:ec:d4:f6:ea:10:
         52:86:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----