Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          PxFx5CSoon3A4J1LI4VN0TL+E9WWjpW586ISJ1g08g0=
Subject key identifier:   08:64:B1:EC:72:6A:9C:13:EF:DA:50:EB:AF:CD:75:C4:C1:0A:E4:5D
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       23AD2D970B7D7D265773F41C5A87044FD78F96FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          03D9
Signing time:             Fri 31 Jan 2025 15:03:49 +0000
Manifest this update:     Fri 31 Jan 2025 15:03:49 +0000
Manifest next update:     Tue 04 Feb 2025 15:03:49 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: E80zF+zpHDJUSINVkcO1jl/rVfkeZQBrwoqZ1M4JVcg=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 5YpwdW+xKiqsP4ThHpOs0QefQFaLxtpTe5/mS42+RNI=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: 3lXT6hs0oYXp5hbA9/qR5XY3jr1zOFTNp6Qy5cGsDv4=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: GZ0yO8xpshaLToUtFKu1TLXO30szo/jxowtjNdKhXT4=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: y9DS/9U0Bm+Vmeq2ISKvhA02+Jc6dqH3Kv6Ti4IFVeQ=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: XMZLSiYgPA8NA7veqwjCRAQcYnw2BJJV5hS77kzSJfI=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: dkPgCA6F98bNA9PM/sUtiIehC2c71zAa0HIEED43PCQ=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: HMagwAQwCd2No9J1zc7yJCv2yq8ZaGvm9m63NYO2sTM=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: ivHmyesen3rA80XIJF+2JwjCqV2adbIMTsVGYEGtQ2k=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: GcPRLUO1i8eta3kUtv/vPty4N9t8wZrvHRHFdGQHfCY=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: VuQGcwYD+6jy9W3sPAkTkXlQsywrVXm/fsA3IhuatAM=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: 8h1Hp/7XiPO7CEP6OPkSbox86MFWNhgtlK/cu5cxKr4=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: ZewET1uEBGLcNNcQQ7hG4YLysMagdnPDTMJn51uUvMM=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: O4I8aPz0mNwVu/+BfxeM+jBYftl55rm/HZsQgIrImok=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: ExNwT0Hb/1xwB1rWgjTsRI+WJ7eC69X7Nl14d1/IBmw=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: tK7Vg3AiHGP9idHTY5I/OavgKWH0KsGNssjAr36ZrfI=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: Bn59N8LU+NhSxBvyGVBoLNo5CG5yn7Tm6vPfKkV4PiA=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: 4ySp1svFhCkdpOI6sirVxL1DbXa3WnzoSfwDJqHAFvg=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: hK8MT6w6Y/92/CTUwoimhL6OcdqHQU0UVRyCjEsx4Ns=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: HVa+3GIXD/l3WQiPyqcBeblqnChcswswroI3BwnErVg=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: w+eGGhKP5wv8Il21W8aQLxxq3uohN/oNBVQGEdTKuac=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: bPZBGXJAaZcVmFZ6a56kEVLF8TbqMiDHD7mYsyum7i8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ad:2d:97:0b:7d:7d:26:57:73:f4:1c:5a:87:04:4f:d7:8f:96:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Jan 31 15:03:49 2025 GMT
            Not After : Feb  4 15:03:49 2025 GMT
        Subject: serialNumber=86b15bcfbafdb4a0b37f35bfdf8515adc18b453eac5c7e69b9e2c25acfa7dc24, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b0:d4:e7:c6:2c:d0:d3:7a:da:a4:fe:af:52:
                    f3:9f:ef:e9:33:83:5c:0b:d2:d2:91:d6:22:38:af:
                    c2:50:7f:5e:07:0d:2a:27:9e:e9:b3:30:35:d0:73:
                    b6:61:13:c0:7a:43:56:78:ea:7d:ac:a3:8d:ca:52:
                    da:fa:1c:dc:ba:b6:42:26:0b:34:a7:dd:7f:46:72:
                    ce:65:f5:cb:07:3c:8b:7d:9b:6d:6d:18:35:8e:51:
                    33:31:f3:a5:bc:8f:0d:53:e0:0a:cf:2f:11:fb:91:
                    a5:c4:9f:87:b9:32:1b:93:ad:53:eb:20:42:04:a4:
                    8d:b0:e0:7e:b9:22:b7:96:2e:06:1a:74:37:b6:14:
                    2c:30:f6:03:a3:a5:a2:67:7a:21:c6:2c:25:1e:f3:
                    46:91:1b:0c:90:bd:3c:a1:d5:30:ec:95:7d:35:f8:
                    3b:d8:43:32:cf:da:e0:1d:66:59:08:f2:f3:b7:e3:
                    85:7d:1c:a2:1c:42:c1:fa:ec:ed:bd:08:ac:cd:2c:
                    f6:22:88:89:bf:aa:85:77:f9:23:e9:10:98:cc:9b:
                    04:66:01:7e:5b:1b:42:85:7f:23:e9:37:2e:1b:6b:
                    9d:68:fe:75:7b:e3:a7:73:91:d1:58:93:f7:e0:14:
                    64:bb:b4:77:3e:39:ed:9d:ba:d0:e9:b8:e6:98:67:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:64:B1:EC:72:6A:9C:13:EF:DA:50:EB:AF:CD:75:C4:C1:0A:E4:5D
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:af:19:45:fe:fc:f6:84:36:68:e8:19:c8:d4:d1:3a:6a:
         d0:40:14:fd:5a:67:f3:ac:46:f7:9b:68:90:27:e3:6b:da:c7:
         cd:2d:41:22:d3:4b:b4:a8:45:85:d5:72:c5:8d:33:e2:59:c3:
         1f:24:28:f7:7f:a1:24:22:91:3b:1c:a5:46:37:46:51:31:fb:
         14:08:11:dc:99:9b:4d:40:51:c1:67:e0:d8:fe:35:c1:b6:8f:
         99:82:34:2f:42:dc:08:28:ae:2c:1f:11:df:d5:42:20:e9:3e:
         b5:44:1f:36:c8:09:b9:4e:fa:ef:13:18:1d:9b:43:f0:01:dd:
         09:64:8a:32:62:6c:23:de:b8:8a:70:1b:33:a8:bc:8f:51:38:
         d0:b6:a2:34:aa:96:6d:df:3a:e8:70:be:67:52:24:c2:60:3d:
         c9:dc:f9:9f:ea:67:a6:77:a8:69:cb:36:23:e9:97:33:66:0b:
         4c:c2:a5:93:cd:11:08:c7:3c:ba:f1:af:8f:5c:dc:25:1b:4e:
         4b:e9:38:e0:24:5d:9e:1f:08:b2:3b:dc:fa:48:e3:82:ff:9b:
         0e:bf:19:af:ac:ab:31:60:78:f3:d6:f0:73:b4:fc:f9:de:75:
         e9:aa:e4:64:09:0a:2c:56:02:a5:cb:1a:9e:a8:51:60:cd:39:
         c5:de:2d:02
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUI60tlwt9fSZXc/QcWocET9ePlvswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDEzMTE1MDM0OVoX
DTI1MDIwNDE1MDM0OVowejFJMEcGA1UEBRNAODZiMTViY2ZiYWZkYjRhMGIzN2Yz
NWJmZGY4NTE1YWRjMThiNDUzZWFjNWM3ZTY5YjllMmMyNWFjZmE3ZGMyNDEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bDU58Ys0NN62qT+r1Lzn+/pM4Nc
C9LSkdYiOK/CUH9eBw0qJ57pszA10HO2YRPAekNWeOp9rKONylLa+hzcurZCJgs0
p91/RnLOZfXLBzyLfZttbRg1jlEzMfOlvI8NU+AKzy8R+5GlxJ+HuTIbk61T6yBC
BKSNsOB+uSK3li4GGnQ3thQsMPYDo6WiZ3ohxiwlHvNGkRsMkL08odUw7JV9Nfg7
2EMyz9rgHWZZCPLzt+OFfRyiHELB+uztvQiszSz2IoiJv6qFd/kj6RCYzJsEZgF+
WxtChX8j6TcuG2udaP51e+Onc5HRWJP34BRku7R3PjntnbrQ6bjmmGdc/QIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFAhksexyapwT79pQ66/NdcTBCuRdMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHHGrxlF/vz2hDZo6BnI1NE6atBAFP1a
Z/OsRvebaJAn42vax80tQSLTS7SoRYXVcsWNM+JZwx8kKPd/oSQikTscpUY3RlEx
+xQIEdyZm01AUcFn4Nj+NcG2j5mCNC9C3AgoriwfEd/VQiDpPrVEHzbICblO+u8T
GB2bQ/AB3QlkijJibCPeuIpwGzOovI9RONC2ojSqlm3fOuhwvmdSJMJgPcnc+Z/q
Z6Z3qGnLNiPplzNmC0zCpZPNEQjHPLrxr49c3CUbTkvpOOAkXZ4fCLI73PpI44L/
mw6/Ga+sqzFgePPW8HO0/Pnedemq5GQJCixWAqXLGp6oUWDNOcXeLQI=
-----END CERTIFICATE-----