Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          KHBjyhX6SU9Lrl0kId5xWHlHx9ZqjQCIR1UBfw9kCAg=
Subject key identifier:   38:A9:41:9D:DE:60:89:92:AE:E2:00:2F:75:AB:EC:4B:DF:71:E0:F5
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       7A1C570B86C83037F060B0592AD1E4E195A71CF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          05AD
Signing time:             Fri 31 Jan 2025 13:18:16 +0000
Manifest this update:     Fri 31 Jan 2025 13:13:16 +0000
Manifest next update:     Sat 01 Feb 2025 15:16:16 +0000
Files and hashes:         1: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: aBdDS6GrqBz2pYvAehQXWgBWcDDBIaKdKK9Nym5jFLQ=)
                          2: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: 8WGGny+jtgmSnuXipWNSY1ESLZ/IHyh7iVF3qoveYM0=)
                          3: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: mWOCGazmmN9HKvk6zthJ9bxFkIrT9iWTS+f5xfw8s6s=)
                          4: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: 4yKK7RQLbJBx+gt7T7QZgKRPOxG5R1dHZfrXztWXnbY=)
                          5: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: f2FBviAJM9nDrbOq27nSeNTQJT9zRNj0KswKLgIhEgE=)
                          6: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: BXr190YMJHQxmWlxeRnUrhn/SSQploVAKewTY5AAwas=)
                          7: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: KI2kjcb07IKesGZMinnaOEsz6/06bdA9BT5qaeeOZmU=)
                          8: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: sjhpTTvgo1FU3FaH8+zye7CEY4XTySIpONdDjAMSaqY=)
                          9: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: OAx44UBQtqTx/sf7Ypb1JySuUeicgRwCGdCfYQjlgWk=)
                          10: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: /Wmkfbw/QLEaUfwznC2lEulj1F/OKW4GZn9Xm/KPUG0=)
                          11: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: RoPjCRMghwCK+9v8LueB1XO0CyHUDX9hongUtmgU4JA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1c:57:0b:86:c8:30:37:f0:60:b0:59:2a:d1:e4:e1:95:a7:1c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Jan 31 13:13:16 2025 GMT
            Not After : Feb  1 15:16:16 2025 GMT
        Subject: CN=38A9419DDE608992AEE2002F75ABEC4BDF71E0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:ee:bb:f5:1e:43:25:e2:84:e4:3e:ca:2a:
                    dc:4d:56:d5:6c:6c:cd:0c:fa:3d:c1:49:2c:55:7c:
                    0c:b5:bb:ee:16:14:97:77:5e:75:23:7d:37:b7:75:
                    56:07:d8:8c:1b:c2:15:d6:ef:19:22:fe:09:0b:ce:
                    99:41:76:b3:38:fa:00:1c:a0:db:cc:dc:6c:71:da:
                    11:b0:4f:69:ef:fc:61:61:44:7d:1e:ac:c5:d3:6c:
                    75:b3:66:39:a3:1d:a5:bf:be:ee:f3:b2:4c:16:e1:
                    23:c0:c9:24:8d:7a:89:26:90:db:2c:c0:29:63:c9:
                    64:41:8e:b2:e5:2c:99:a2:52:ef:ac:86:e6:56:4c:
                    57:d7:29:81:07:e7:67:a5:3e:e0:a0:9d:b8:2f:01:
                    3b:d9:4d:ba:b0:da:be:7b:e9:81:21:5d:8b:bd:2a:
                    71:4d:ed:81:a9:ed:98:18:62:5d:d1:39:7f:b7:c3:
                    87:f7:1c:95:90:35:5d:8b:12:38:21:76:7a:4e:38:
                    c3:b6:97:9b:b5:41:c6:5f:c2:26:ed:2d:6c:19:7d:
                    10:4c:25:85:21:ad:07:6e:43:9a:58:87:8a:bb:df:
                    7a:08:73:25:13:ee:b4:88:ae:e9:9b:32:dc:a1:67:
                    17:05:59:d1:a8:8b:c3:7d:7d:9a:85:92:79:f2:4e:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A9:41:9D:DE:60:89:92:AE:E2:00:2F:75:AB:EC:4B:DF:71:E0:F5
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:b0:3c:72:79:49:29:70:c8:9a:0f:10:a2:64:57:7e:2c:
         5e:c5:3d:66:b4:69:b4:b8:9c:1d:2c:2a:0c:1a:cf:ae:08:b2:
         46:1b:2e:20:b1:4a:c5:6e:c9:d3:ca:c4:ea:64:7d:82:d8:1e:
         8f:d1:4e:96:2e:b7:a9:ba:72:d2:00:14:f9:c7:fc:cb:41:41:
         5a:cb:13:d0:11:1a:09:07:8f:2b:53:81:b5:2c:6c:7e:c8:c8:
         8f:11:77:47:c3:7c:ee:e5:a2:77:51:82:87:46:02:fc:40:01:
         95:36:a5:fc:a9:82:b5:1e:48:ea:a9:05:24:af:06:c1:2f:2f:
         3f:1e:43:a0:b6:d8:46:21:9f:5e:59:dd:ac:39:e8:42:20:d2:
         38:87:18:92:32:2c:08:67:ed:2f:5b:20:13:91:9c:f7:80:e8:
         f6:e2:f3:b0:4e:e8:5f:68:88:66:53:35:1c:71:4e:ec:af:ac:
         30:4a:1c:6e:c2:f7:14:19:87:78:fa:cb:40:89:c2:ba:96:a2:
         6d:1e:df:a3:26:be:49:e9:54:a2:76:36:bb:db:05:00:74:0a:
         79:d8:fe:39:0b:86:e8:a1:8a:3f:6f:ce:c6:dd:a3:05:c5:9d:
         8d:aa:fa:dc:4f:19:75:82:3f:90:5a:1a:75:d1:95:27:22:80:
         60:99:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:29 2025 by rpki-client