Manifest

$ rpki-client -vvf rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.mft
File:                     1717ACD294A2C988167DF42BBB5A5E20A0C2831B.mft (raw, json)
Hash identifier:          +ZuxDxLn1hbK0SQsxEMIzMBNUiOcQ01PW5cj22asXMs=
Subject key identifier:   73:2C:DA:5A:5B:33:87:C8:A4:8A:A7:74:7E:31:E9:11:3A:D1:5B:39
Authority key identifier: 17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
Certificate issuer:       /CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
Certificate serial:       5B3178E9158B3C0E0F09525AD68A918ECDEE3D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer
Subject info access:      rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.mft
Manifest number:          12
Signing time:             Fri 27 Sep 2024 03:41:42 +0000
Manifest this update:     Fri 27 Sep 2024 03:36:42 +0000
Manifest next update:     Sat 28 Sep 2024 05:41:42 +0000
Files and hashes:         1: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: 6Ff7tqBVo7aM9VuSvQlcyaTGcKmiVTY6pgu+/vkIW/8=)
                          2: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: UoUvgP/RsM+fe8LwnG/NqqjEcX0evozV/nW/NPn0nOo=)
                          3: 326131343a373538303a353030303a3a2f33362d3438203d3e20323134333434.roa (hash: 8+6DNoZtEuZSVKkuqjVnWs3ZNLLkvMGgkFN9dnweazU=)
                          4: 326131343a373538313a393930303a3a2f34302d3438203d3e20323134333434.roa (hash: HLxCUgoob742X1p+a7LwEWfiHDiCcJy+S9naKJ1Ek0Y=)
                          5: 1717ACD294A2C988167DF42BBB5A5E20A0C2831B.crl (hash: lNNMXwWOurkDQKaT6H1HAumHEwWGBP2LbJdDwfO6s8o=)
                          6: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: vzz8HbXQycIZzt8IpHCNUM96L5G7QS/02ga5So2wKMs=)
                          7: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: opQlS/ifnvodDo8aY/zMERuQYonmP+ktzj+DbpBuapk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:31:78:e9:15:8b:3c:0e:0f:09:52:5a:d6:8a:91:8e:cd:ee:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
        Validity
            Not Before: Sep 27 03:36:42 2024 GMT
            Not After : Sep 28 05:41:42 2024 GMT
        Subject: CN=732CDA5A5B3387C8A48AA7747E31E9113AD15B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:72:cd:de:27:94:e9:88:e4:7c:f9:64:68:
                    d6:c5:c0:80:84:ed:b6:64:2c:1d:de:e4:64:1a:fd:
                    7a:fa:6a:cc:60:80:30:a8:7b:c8:d0:97:05:a1:be:
                    1e:e4:31:4f:c5:3e:17:75:98:e7:e7:a4:6d:98:1b:
                    89:8a:23:c7:81:19:95:b2:14:0f:4a:37:56:b2:0f:
                    58:af:94:e3:07:58:7a:6d:ba:fc:2c:ae:6f:e6:06:
                    db:f1:f5:3f:82:ed:32:f0:33:d0:6b:a1:f1:c0:50:
                    7a:7a:63:f7:c9:92:8a:c1:59:33:23:44:ca:ce:6d:
                    e7:37:a4:16:f8:3b:87:26:e6:c5:63:78:26:59:35:
                    94:3a:1d:bf:73:6d:10:57:7e:f6:84:5f:75:94:27:
                    19:11:39:44:bb:61:e1:01:51:54:87:cb:ff:be:fb:
                    0e:d8:a2:4c:84:d9:8d:f5:91:9e:6e:bd:30:8c:41:
                    55:ec:db:bd:cc:8a:60:43:c3:4e:2a:e1:7a:55:52:
                    e6:c9:79:84:d5:3d:62:16:fa:80:a2:b7:5c:14:43:
                    21:19:e3:cc:12:2e:05:1f:67:09:a9:63:ea:4a:3c:
                    2f:5e:13:cb:8a:f1:0d:56:8d:0f:f3:1d:4c:bc:4c:
                    6f:92:3e:90:19:bc:ee:f0:ac:43:3c:ec:c9:d1:d7:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2C:DA:5A:5B:33:87:C8:A4:8A:A7:74:7E:31:E9:11:3A:D1:5B:39
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:e1:07:ac:ed:f5:2a:ac:dc:45:4a:be:63:11:23:74:dd:
         a7:85:de:be:16:ac:b9:d8:12:fc:40:e5:05:b3:7a:67:e1:a5:
         fa:24:92:ac:63:ab:d2:96:ab:ea:3d:81:20:45:38:74:cb:22:
         2f:8f:e6:67:1d:dd:a4:4f:43:e9:84:58:4e:16:4e:74:de:50:
         e8:ea:50:12:09:47:f6:2c:12:54:32:70:bd:0a:de:34:e3:8c:
         40:28:a0:55:cb:42:15:a0:2d:0b:e6:86:35:68:76:9f:fd:73:
         31:aa:45:e4:1a:5e:86:17:71:9f:7f:8e:9a:8b:75:11:a8:cf:
         48:1d:12:c7:34:eb:1f:05:1d:eb:9e:9c:dd:09:f9:70:d1:51:
         df:08:d1:26:f0:c3:e6:71:ab:ca:91:c1:d3:dc:e1:22:1b:3a:
         ec:23:a3:26:31:3d:c6:9a:ef:17:dc:0b:33:61:48:e8:58:ec:
         d6:71:be:b7:39:cc:cc:73:7c:0f:3d:71:58:51:ef:d9:df:ae:
         18:33:73:68:33:86:78:f9:92:fa:c5:4d:a0:9d:f0:82:5a:da:
         90:82:31:78:e7:bf:42:28:2d:23:3e:21:bb:12:3c:5c:92:64:
         50:d2:e1:57:41:2b:dc:0a:5f:df:fb:4d:98:7c:e4:1b:8f:bb:
         05:b1:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:13:30 2024 by rpki-client on console.sobornost.net