Manifest
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json)
Hash identifier: 9eVUxL8ACoQMHIaZ7EZzlDNJQnsPiInH399m5D3pVUs=
Subject key identifier: 24:19:5B:0F:8B:4D:C6:E3:34:F9:EC:26:00:F2:30:85:48:57:E2:4F
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial: 64AB19CC4D4A06D54B1E81E0F3A41D4A7A090259
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
Manifest number: 0345
Signing time: Fri 31 Jan 2025 17:01:14 +0000
Manifest this update: Fri 31 Jan 2025 16:56:14 +0000
Manifest next update: Sat 01 Feb 2025 17:50:14 +0000
Files and hashes: 1: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: 3Dx9MrwmJlSexiC4AkX+YCkpXccMrukkkSZIGH658cU=)
2: 3130342e33372e34322e302f32332d3234203d3e20393435.roa (hash: 15ZkZ3TfYDgn/2NuUygkkJxkxZnGlbkkKGi5Yto7PDI=)
3: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=)
4: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: XaNBV09FvARLrTtiUD7xLrsJU5+S/V2B1ry0LCMI7Cg=)
5: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: nQN+4wOuwotL/QEiaZ7hL2BRDxbM05YmppHCrNkMcGw=)
6: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: axCh1Jfvjyo3kpc+xcRlxRF/OoZ4eTdCLlGcJynWJfw=)
7: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ab:19:cc:4d:4a:06:d5:4b:1e:81:e0:f3:a4:1d:4a:7a:09:02:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Validity
Not Before: Jan 31 16:56:14 2025 GMT
Not After : Feb 1 17:50:14 2025 GMT
Subject: CN=24195B0F8B4DC6E334F9EC2600F230854857E24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:66:3a:ad:54:1d:f1:fa:44:22:72:b5:23:
9f:fb:6d:b8:d0:b7:1b:08:d8:db:07:9a:de:aa:26:
35:77:1e:d9:c0:dd:f1:c8:f3:f9:f9:10:dd:0c:e4:
6b:84:de:9a:ed:f3:40:24:a9:a2:13:f2:14:cd:6e:
36:9b:ac:4b:16:11:66:61:c5:26:31:e4:c7:02:b3:
b2:29:0c:e1:80:01:cb:8b:72:22:ca:8f:8f:a5:87:
04:22:d2:7b:25:02:31:6d:be:e3:08:27:a3:c0:aa:
a6:99:3f:a8:05:b7:25:af:75:45:ca:36:87:73:0b:
66:5d:0d:a0:6b:0b:20:c8:89:7e:58:da:6d:43:aa:
6f:a1:fc:d6:ba:80:7e:f1:bd:51:dd:f4:54:dc:f4:
99:d8:43:58:e0:07:ba:70:ba:f9:94:a2:10:fc:10:
c8:e7:93:97:03:e8:27:2c:37:95:e8:47:84:78:f3:
54:5c:10:70:8d:a3:66:50:71:34:64:af:b2:8f:0c:
e9:ca:2e:d0:3c:cf:c5:38:43:07:31:5d:0d:bc:ad:
7a:1a:b3:3a:74:dc:fa:55:b8:e1:b0:53:2c:55:cf:
bd:19:87:51:08:2f:91:29:e5:51:10:b9:ac:20:f4:
0e:09:13:52:f1:23:d3:87:e1:d6:50:6a:6b:88:3e:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:5B:0F:8B:4D:C6:E3:34:F9:EC:26:00:F2:30:85:48:57:E2:4F
X509v3 Authority Key Identifier:
keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e6:0c:a5:2b:2c:e0:c8:c7:d4:20:22:d7:01:d8:c6:7f:2f:
9b:28:4c:4f:82:16:9c:ab:c7:41:c2:57:56:c5:01:e4:87:b6:
c2:62:1d:75:08:36:1b:ed:83:16:42:e9:53:c8:ca:74:fe:af:
78:c3:f7:ca:cf:7a:1e:01:2d:d3:0b:d3:51:15:5e:cf:88:95:
f9:4b:4a:03:0b:87:b9:12:77:bb:e7:aa:ed:e8:68:e4:54:9a:
bf:0b:91:e1:13:cd:b4:a7:26:51:99:5d:53:b7:e5:5e:c3:f1:
c9:cb:14:cf:c5:e7:75:8e:48:2c:d1:d6:26:1e:9e:f0:37:ec:
dd:f0:98:0c:f8:c2:02:77:6d:50:f2:60:da:86:46:b4:a6:c9:
a9:7e:0c:33:39:80:b7:0b:3d:ff:bc:23:4a:1d:e4:bf:15:f6:
bb:c2:76:25:8a:a7:d5:1c:4c:a9:b3:5e:08:05:33:8c:62:4e:
43:ed:00:e4:c4:a3:55:cd:c0:bb:cc:55:30:2d:5a:c7:21:e0:
6d:a2:b7:b5:c3:b8:e9:31:1c:77:be:a8:22:88:14:48:c8:33:
8e:f9:11:86:e4:36:0a:3f:65:38:0c:25:48:4f:7d:85:2c:f5:
ce:ff:80:69:06:7b:ad:d9:8f:14:f2:c3:b7:6e:3c:e4:fd:65:
24:c8:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:22:36 2025 by rpki-client