$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft File: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft (raw, json) Hash identifier: GOfkKG87onXVSu2xv+ZAcLeH/WGF3owDMYAq3JFt+yM= Subject key identifier: 87:D5:89:F2:C7:5B:FB:DD:05:57:9A:74:D5:7D:55:A7:39:EA:43:31 Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Certificate serial: 26B88DA3C656EB0C9B03D816C8144BA755C7BF6A Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft Manifest number: 0158 Signing time: Sat 06 Jan 2024 02:03:38 +0000 Manifest this update: Sat 06 Jan 2024 01:58:38 +0000 Manifest next update: Sun 07 Jan 2024 05:48:38 +0000 Files and hashes: 1: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl (hash: QIyvK3xkO2Dg05xoWRJIR6dl0x4eDpzr8IuCofoo9/o=) 2: 326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa (hash: OPKpiIytICxd1fXI6/shd9Y6hNaKZ6phQjcuVQ/5Mvc=) 3: 326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa (hash: nu5+++kxWw9PQECNq1ZJKe/zCFt9AtLZiqWeRUQoz+c=) 4: 326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa (hash: wXg0hWGMCo9QUUDWLAruK5BDXAlUjwZtw/GedGQ7Dao=) 5: 326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa (hash: zGEytrx72v5IsKxLMNPJ37Q80RR9zsST9bRQjzc7JgY=) 6: 326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa (hash: rAf/kaZyHVt4wzI82exNw4pLubTnh5F3HMFoJFFr0CA=) 7: 326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa (hash: hrV/K1u9mylSu4aGwxDnKDeCxL3FpHD1mXCFht4+Jxw=) 8: 326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa (hash: qMQqdc4Ab9Vei5b+92uDmjlLFfp+xSpnP3ImErsu6ks=) 9: 326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa (hash: wy43wGptEydfsZuozjWPq4zgxsEUh2HPRmBbhO0BrUA=) 10: 326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa (hash: fobZMngNZTRj+nfN6Ysb2Vy2HR7O86kIEi/DTkmtvRU=) 11: 326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa (hash: 1KTbx3G6shqNBW5r7QO2Sj72i8MNEEjY9pCSnZR+AEQ=) 12: 326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (hash: GkQN5b+c9nXy+XfMK7TgKY3weRqjtWJBdOPIF6k8WI4=) 13: 326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa (hash: Wenq5YWkpJjTdYcu90rIYXE6O4DINR5UI0sFPdgeTJk=) 14: 326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa (hash: feGq5cbXeIaysrMu+KdQU8IeA5cxepEx4Y2pSqq3Z00=) 15: 326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa (hash: rbKWWFXfAtnlW/UNJhYnghhr8L7ZPPwwqvcrxw1ynAQ=) 16: 326131323a646434373a383630303a3a2f34382d3438203d3e203530353535.roa (hash: yrvepgHD+EruRCBvgsxTzh1sONR0mrzhriJHFMK894g=) 17: 326131323a646434373a383630623a3a2f34382d3438203d3e203530353535.roa (hash: qxM3eV/wptiX0L4b2ALOhhP8BGnHFGlYxGnzSMdA3Fo=) 18: 326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa (hash: 32XS6Gtl0v/3cr8zAa7aW+x2lfmYcxIQY5b26ood8ro=) 19: 326131323a646434373a383630613a3a2f34382d3438203d3e203530353535.roa (hash: /cOHJR/5vVLUKJTYy5n56zDmw63N4O/Wa6PPxbWFoGs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 26:b8:8d:a3:c6:56:eb:0c:9b:03:d8:16:c8:14:4b:a7:55:c7:bf:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Validity Not Before: Jan 6 01:58:38 2024 GMT Not After : Jan 7 05:48:38 2024 GMT Subject: CN=87D589F2C75BFBDD05579A74D57D55A739EA4331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:39:8c:b1:4f:34:58:24:01:49:80:03:53: 06:8c:0a:ae:ea:f9:9c:3b:73:32:b8:cb:2b:9a:5f: 3d:ab:37:12:cc:9a:e1:83:62:01:c6:e7:d8:4a:f0: 40:b1:39:45:38:bb:22:6e:a0:fa:71:57:45:12:e2: 04:70:53:ce:50:75:55:5c:79:b2:80:61:83:9e:ae: b5:0d:f6:cf:fa:a1:7e:7d:3c:87:2a:96:d7:1a:3b: 1f:94:ed:6f:d7:3e:ec:ae:dc:9d:ad:da:04:d3:c4: ea:10:9a:4b:77:7c:32:28:da:92:d3:4e:f2:c8:e7: cd:35:1e:7d:09:d6:6e:bb:6b:58:db:4c:1b:68:a0: f6:f7:fe:98:cf:13:2c:6a:ab:07:74:58:f8:11:9b: b7:0e:c4:52:1f:e1:a5:6a:af:dd:d2:9c:06:ec:c3: fd:b3:a4:1f:17:24:a1:93:03:32:e2:86:88:56:7b: 7b:ec:54:89:ae:1d:2e:45:6c:51:b5:1c:49:20:4d: 94:90:74:4e:c0:38:51:e6:ee:52:6f:8b:10:68:93: 2a:24:f2:55:b1:7e:4f:33:96:60:08:19:89:82:fc: 0b:42:bb:be:a1:76:21:b4:02:28:e3:d5:7c:ab:c6: 2e:23:06:93:1b:24:ca:fb:f3:28:09:cb:ed:a7:85: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D5:89:F2:C7:5B:FB:DD:05:57:9A:74:D5:7D:55:A7:39:EA:43:31 X509v3 Authority Key Identifier: keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:da:20:de:3f:df:e4:20:79:22:b0:56:98:9b:b5:92:4f:13: b1:9b:4d:7c:d6:4b:da:fd:37:84:73:a0:4e:19:50:34:d7:b6: 06:59:13:c6:de:60:53:da:c3:04:c0:1e:95:e7:26:93:8d:31: e6:62:45:1e:7e:bb:91:eb:72:ae:40:ca:f1:ca:3b:d6:68:23: 2d:c4:63:24:7b:51:0b:41:82:cf:40:16:74:8e:f0:b2:3f:1b: fe:0b:4b:88:dc:65:d6:dc:ce:65:3b:ee:26:6a:51:40:86:17: 47:57:29:61:b8:9d:83:13:bf:66:10:9f:ab:58:1c:a8:1e:01: bd:48:1b:1c:da:4e:8a:05:9b:9b:78:b6:85:12:7c:81:96:db: 6c:30:c0:ac:7b:94:d6:2c:7a:05:2e:81:4a:9a:de:8a:a8:fd: 10:d8:0e:f8:bf:84:60:a1:62:41:52:da:dd:c8:db:0e:24:60: 52:b9:a6:26:1f:b0:45:41:df:be:b8:06:0f:a9:a7:71:bf:59: 7e:75:ad:72:7e:f4:fd:11:44:1f:3e:ff:8b:d5:87:b5:16:f5: eb:7e:4c:87:ec:65:6d:4d:84:fe:68:b9:64:97:f1:6e:57:d6: 55:f4:27:35:10:d1:21:55:21:e0:88:a5:ef:f4:73:a3:42:da: 72:ee:27:09 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJriNo8ZW6wybA9gWyBRLp1XHv2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFD RENDNThBMzAeFw0yNDAxMDYwMTU4MzhaFw0yNDAxMDcwNTQ4MzhaMDMxMTAvBgNV BAMTKDg3RDU4OUYyQzc1QkZCREQwNTU3OUE3NEQ1N0Q1NUE3MzlFQTQzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtTmMsU80WCQBSYADUwaMCq7q +Zw7czK4yyuaXz2rNxLMmuGDYgHG59hK8ECxOUU4uyJuoPpxV0US4gRwU85QdVVc ebKAYYOerrUN9s/6oX59PIcqltcaOx+U7W/XPuyu3J2t2gTTxOoQmkt3fDIo2pLT TvLI5801Hn0J1m67a1jbTBtooPb3/pjPEyxqqwd0WPgRm7cOxFIf4aVqr93SnAbs w/2zpB8XJKGTAzLihohWe3vsVImuHS5FbFG1HEkgTZSQdE7AOFHm7lJvixBokyok 8lWxfk8zlmAIGYmC/AtCu76hdiG0Aijj1Xyrxi4jBpMbJMr78ygJy+2nhaf7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUh9WJ8sdb+90FV5p01X1VpznqQzEwHwYDVR0j BBgwFoAUAodsEZJMvaAb4a05oyBs+s3MWKMwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdM YWlyLVRFU1QvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1 OEEzLmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBr aS5jby9yZXBvL0FTOTQ1LzEvMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZD RkFDRENDNThBMy5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu YzovL3JlcG8ua2FnbC5tZS9ycGtpL0tlYXRvbkFHTGFpci1URVNULzEvMDI4NzZD MTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFDRENDNThBMy5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALPa IN4/3+QgeSKwVpibtZJPE7GbTXzWS9r9N4RzoE4ZUDTXtgZZE8beYFPawwTAHpXn JpONMeZiRR5+u5Hrcq5AyvHKO9ZoIy3EYyR7UQtBgs9AFnSO8LI/G/4LS4jcZdbc zmU77iZqUUCGF0dXKWG4nYMTv2YQn6tYHKgeAb1IGxzaTooFm5t4toUSfIGW22ww wKx7lNYsegUugUqa3oqo/RDYDvi/hGChYkFS2t3I2w4kYFK5piYfsEVB3764Bg+p p3G/WX51rXJ+9P0RRB8+/4vVh7UW9et+TIfsZW1NhP5ouWSX8W5X1lX0JzUQ0SFV IeCIpe/0c6NC2nLuJwk= -----END CERTIFICATE-----Generated at Mon May 26 04:10:43 2025 by rpki-client