Manifest
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft
File: 0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft (raw, json)
Hash identifier: uhVIF+2NadIXNiuxHS0+eNrnzN6O+ViYS5ZA3ZWkDHs=
Subject key identifier: 95:82:2A:FD:47:59:FD:CE:21:A5:51:77:17:C0:C1:03:38:EC:74:CF
Authority key identifier: 0D:10:E8:A7:63:BF:8B:AB:E9:6B:E7:AB:47:F9:DB:59:D9:D9:52:32
Certificate issuer: /CN=0d10e8a763bf8babe96be7ab47f9db59d9d95232
Certificate serial: 767A6C5EC38AAB42C9ECB387893A65A10D464BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRDop2O_i6vpa-erR_nbWdnZUjI.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft
Manifest number: 0348
Signing time: Fri 31 Jan 2025 08:05:47 +0000
Manifest this update: Fri 31 Jan 2025 08:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:31:47 +0000
Files and hashes: 1: AS50555.asa (hash: 6Tb3JWAiG3HB18+QURZTnhnTtpjs1INvbgLT/78hSiM=)
2: 0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.crl (hash: F2Xnm3HcuN3cdoeTeON38l4hpQi7JbHQR+8A+brNclU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7a:6c:5e:c3:8a:ab:42:c9:ec:b3:87:89:3a:65:a1:0d:46:4b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d10e8a763bf8babe96be7ab47f9db59d9d95232
Validity
Not Before: Jan 31 08:00:47 2025 GMT
Not After : Feb 1 10:31:47 2025 GMT
Subject: CN=95822AFD4759FDCE21A5517717C0C10338EC74CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:3d:71:1f:78:c4:3c:b5:d5:c6:89:0a:61:
30:1d:ee:62:90:1d:34:ea:f1:70:6e:e4:8d:dc:8f:
58:0d:42:45:46:86:49:aa:ef:02:3e:38:ff:1c:12:
1a:ee:81:91:86:a1:9b:5c:3e:c0:28:9f:63:3f:47:
31:c9:e6:c4:a7:a6:25:4f:b3:86:e7:f9:37:41:57:
6f:46:9f:1b:f7:df:42:74:d8:28:fb:ca:b4:ad:60:
30:4d:62:7c:4f:2c:e6:95:19:b5:54:15:90:b6:00:
9f:1f:8e:84:41:f4:05:42:6e:a9:ba:f3:6e:df:28:
41:3e:c8:a0:7b:91:50:85:01:5b:b5:38:a5:91:5d:
1d:4a:38:08:89:f2:f6:01:a6:96:51:e1:a5:b5:0b:
64:a3:20:f7:08:31:f0:cc:85:ba:31:c6:77:19:a4:
e8:50:18:62:7d:fc:d8:1d:90:ea:cb:af:14:c6:8e:
1e:a3:39:1d:83:36:0e:98:12:92:4c:e9:85:3f:13:
9f:8a:dc:07:82:20:3d:78:59:66:6a:f9:74:4b:8c:
50:e4:85:73:2e:f4:df:b2:ae:ba:73:41:bf:88:3f:
45:40:f8:cb:5d:ef:14:7f:26:74:25:8b:5a:cd:71:
51:da:96:83:1a:40:ac:8a:a7:78:dd:5a:b9:9c:67:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:2A:FD:47:59:FD:CE:21:A5:51:77:17:C0:C1:03:38:EC:74:CF
X509v3 Authority Key Identifier:
keyid:0D:10:E8:A7:63:BF:8B:AB:E9:6B:E7:AB:47:F9:DB:59:D9:D9:52:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRDop2O_i6vpa-erR_nbWdnZUjI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/0/0D10E8A763BF8BABE96BE7AB47F9DB59D9D95232.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f6:bd:3e:f9:8d:6b:61:49:18:07:6b:42:bf:19:be:e3:a5:
75:ee:28:88:08:02:c5:40:ba:63:3c:4b:13:48:94:f5:85:23:
9a:36:33:19:8a:e8:0e:ac:42:85:34:52:e3:02:fb:c7:c4:26:
81:55:c3:4e:90:d4:95:d8:70:e4:0e:0f:e7:1e:c7:d7:a0:64:
52:68:d5:08:a0:32:a6:9f:66:9f:2b:a2:76:f0:3b:bb:a6:04:
c8:ff:fc:9a:4d:cc:90:97:b3:50:4e:a9:b7:47:0d:d5:e7:66:
2b:93:af:e8:50:d4:df:88:d8:bc:de:c0:9e:27:da:05:30:0f:
81:7b:a1:69:16:be:c1:0f:94:cd:f4:92:5c:25:08:0e:7d:af:
64:0c:93:6e:1a:04:82:71:8b:cc:52:3a:70:6a:fc:3e:b1:13:
35:1b:9f:b6:0c:a0:84:fd:e7:cb:36:3c:53:3b:9a:aa:08:97:
a7:0a:a5:0e:9e:0d:c5:37:65:42:fb:78:3b:7c:6d:99:82:f5:
9d:1e:05:2f:7b:94:4b:44:44:e9:52:f1:fb:b2:00:4c:1a:de:
15:08:b0:98:ed:b6:12:87:6a:fc:07:88:fe:34:51:47:9c:d8:
06:f3:88:84:6d:c5:e7:4c:9b:23:8f:d1:60:7d:f2:fe:2e:61:
f3:80:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:20:37 2025 by rpki-client