Manifest

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
File:                     D4606AE6F18838E2257D55ABB500636F509236E3.mft (raw, json)
Hash identifier:          lfxLV2Q+vY9CvinTW2MgJxb/fRxLdLjJRofq+afCX4g=
Subject key identifier:   8C:4C:4D:5A:58:24:BD:6D:EC:CA:A2:1B:44:65:FB:4C:25:DA:7A:0B
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Certificate issuer:       /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial:       216B9C131ABB7127E697E89D5C21645E3EAFA106
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
Manifest number:          16B1
Signing time:             Thu 30 Jan 2025 09:53:36 +0000
Manifest this update:     Thu 30 Jan 2025 09:48:36 +0000
Manifest next update:     Fri 31 Jan 2025 11:29:36 +0000
Files and hashes:         1: D4606AE6F18838E2257D55ABB500636F509236E3.crl (hash: 36Xi9WPndpegzLK2/lxF5mIPm+E2DGOE/PZFyN4+Hpk=)
                          2: 323630323a663833643a39303a3a2f34382d3438203d3e203437303635.roa (hash: QNHf8yDF9a9U8XEDgEpQhHJIaTDb2TFXyYPRzrcBwu8=)
                          3: 323630323a663833643a3a2f34302d3438203d3e203133353237.roa (hash: 0EyT4KIH23HNam/uNIaOZNYn7AjH/08rfgpbBQQxByU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6b:9c:13:1a:bb:71:27:e6:97:e8:9d:5c:21:64:5e:3e:af:a1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
        Validity
            Not Before: Jan 30 09:48:36 2025 GMT
            Not After : Jan 31 11:29:36 2025 GMT
        Subject: CN=8C4C4D5A5824BD6DECCAA21B4465FB4C25DA7A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:24:56:66:52:04:07:27:52:e7:ac:09:68:
                    d1:a4:52:4c:93:a2:d6:52:f9:96:d3:51:d6:ef:73:
                    ed:73:96:d0:29:56:02:f3:de:11:8a:86:f1:be:ba:
                    3e:a7:ba:bb:52:00:ab:42:91:ea:86:c6:e6:7c:ba:
                    d9:a1:3f:e0:db:9e:bf:a0:f1:78:6f:41:b3:e3:c6:
                    76:9a:ba:99:ff:58:52:d2:47:fa:e9:16:cb:de:ce:
                    5d:5b:3c:cd:7d:16:2b:90:8b:f7:32:a8:82:52:dc:
                    15:ab:dc:75:bc:53:dc:5d:46:4d:c3:10:3d:6e:99:
                    7e:9f:76:1c:f8:87:81:b3:7b:e0:c9:25:c4:b8:c6:
                    c4:b5:a8:a8:33:4b:e7:d5:55:51:f0:e2:89:15:a0:
                    1f:60:1f:2a:99:3b:cc:75:59:f4:27:15:1b:ef:0b:
                    08:e9:35:fc:af:11:53:2e:94:41:42:22:d7:15:4f:
                    f3:ca:6e:92:63:2e:92:74:2d:d9:6b:ee:5c:a3:58:
                    3c:7c:12:a2:d6:e7:85:7d:1c:ff:85:03:56:16:63:
                    9f:c7:c0:1a:e5:70:1f:50:0e:ec:e8:8f:6d:a6:68:
                    49:91:44:b8:72:dc:f1:49:30:79:2e:84:15:01:b2:
                    ba:3b:5d:63:9f:c2:69:9f:da:b5:f0:fd:2e:db:4b:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:4D:5A:58:24:BD:6D:EC:CA:A2:1B:44:65:FB:4C:25:DA:7A:0B
            X509v3 Authority Key Identifier:
                keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:de:84:25:25:01:9f:df:84:cb:44:9d:0d:b8:ed:ea:94:
         3d:f5:13:c9:23:26:57:14:09:69:68:05:cb:18:c2:de:8c:ea:
         68:95:d6:9a:39:34:19:b2:66:87:f8:e2:c7:c0:16:b8:71:09:
         4d:c3:7e:a6:66:37:c1:64:83:56:21:ec:d9:48:e5:d2:93:10:
         7a:2a:80:a3:cb:f7:a1:7e:91:d8:a0:84:6a:a4:c5:2e:bd:2a:
         36:d3:84:0c:bf:a6:e0:27:d8:f3:53:9d:a0:be:22:d2:f5:53:
         7e:ad:42:86:01:7d:85:c9:35:3c:d8:b1:66:3b:a1:50:6b:91:
         bc:28:8e:25:08:0c:22:e1:1c:52:bc:0f:95:50:f2:68:08:de:
         35:69:4f:b5:b3:6d:e1:49:34:d3:5f:18:bc:2c:1b:59:3b:3e:
         88:c0:e5:ae:36:88:74:5a:57:cb:a3:04:fc:bd:cb:16:54:b8:
         a0:65:d1:8d:be:89:b1:f8:7c:cd:4a:7c:c9:64:7c:6e:2e:d7:
         77:42:31:eb:cd:21:58:55:30:85:93:7a:e6:28:eb:a7:36:2f:
         a1:8d:3f:bc:ad:8a:65:44:45:42:2b:29:93:23:f9:e5:15:3b:
         10:16:e0:8e:59:c3:39:cf:58:05:3c:d4:ce:fe:94:72:02:16:
         e2:d6:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----