Manifest
$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier: P9rECXeHxoJNAguJw5xtbo8oNhhET6g4V4Wtzc+TGbU=
Subject key identifier: 31:D2:81:2A:C7:D2:45:D6:F2:B6:06:EC:BB:88:69:28:DD:1A:4B:D9
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial: 59D392FC1ABA98A273B73B8873AB34D79123E0BC
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 05:02:11 +0000
Manifest this update: Fri 31 Jan 2025 04:57:11 +0000
Manifest next update: Sat 01 Feb 2025 07:18:11 +0000
Files and hashes: 1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: 3htjqrkOETtvCBkOdiBEFlIBWqUdmw7gxdOiciCi4Ik=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: 4JeduWc9AVkFwOkk6RdXfQieB9Mg4xbD86k9M8zW4TA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d3:92:fc:1a:ba:98:a2:73:b7:3b:88:73:ab:34:d7:91:23:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Validity
Not Before: Jan 31 04:57:11 2025 GMT
Not After : Feb 1 07:18:11 2025 GMT
Subject: CN=31D2812AC7D245D6F2B606ECBB886928DD1A4BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:a2:fc:b0:08:f6:b1:49:75:9e:a9:32:7f:
5e:e9:68:0c:f4:ea:cd:13:a5:99:60:83:ce:18:23:
61:65:0c:4b:f9:95:95:90:db:78:47:43:95:b0:fb:
25:55:88:a9:01:19:96:4c:c6:3e:99:51:ed:b6:c9:
21:7f:5b:6c:e0:3d:37:b7:4c:dc:09:d4:b8:5d:1e:
20:f6:11:46:4a:88:1f:f3:d2:e2:87:a6:6d:61:7e:
a1:5e:9f:19:e3:64:36:1b:7f:21:69:7f:1d:76:b2:
62:dc:d8:3d:87:2d:0b:8e:c2:90:25:7d:27:37:a6:
84:76:3e:87:d9:31:7b:70:79:fa:18:54:d0:d6:1f:
e7:1f:19:c7:83:af:b5:4f:3e:6d:4b:f8:28:8c:2e:
91:8a:33:1b:af:39:9b:81:db:76:be:3a:cc:2c:96:
06:c8:97:14:a4:c6:29:67:7c:67:23:d2:02:0a:94:
56:10:ad:0c:95:3c:25:97:9d:64:0b:5c:e8:99:10:
b4:c4:bc:e0:82:20:2d:bf:e3:30:4b:fb:36:5c:8c:
6b:3b:4f:68:54:39:58:61:a6:d4:f6:89:c9:88:a0:
39:4a:35:93:a0:84:eb:e1:0c:08:37:dc:c5:0a:fd:
9f:66:57:f2:24:c3:fa:aa:80:36:13:31:c1:5b:7e:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D2:81:2A:C7:D2:45:D6:F2:B6:06:EC:BB:88:69:28:DD:1A:4B:D9
X509v3 Authority Key Identifier:
keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:9b:11:e1:2f:e1:9b:5e:42:f2:4d:2b:63:18:c9:0c:67:
f6:fe:8c:77:5e:81:1c:dc:8c:9c:31:e7:bd:c6:92:99:07:e2:
c1:fc:fb:dd:be:78:bc:59:34:83:c5:7c:55:78:11:95:36:9e:
f7:bf:8c:7e:91:23:5f:7a:49:53:33:97:80:76:aa:49:f8:46:
d1:28:ac:a9:bf:0c:8e:e1:7d:cb:62:79:b1:70:6f:2a:32:f1:
70:d7:4b:29:28:b6:8e:42:35:bc:c0:ec:22:ad:bd:9c:b1:84:
bf:f9:b1:7f:96:d6:0c:51:d8:10:ab:c9:14:b8:db:e1:4b:80:
b0:39:8a:c7:4c:d8:f2:a0:2c:2e:e7:be:81:d7:45:d9:57:8f:
55:68:49:ad:47:b2:19:25:b4:6a:1d:19:dc:c7:84:87:7f:a6:
56:0b:be:6e:e9:fd:27:4c:7b:5a:d5:fe:d0:b7:ed:73:e2:4c:
f1:43:25:85:be:32:66:4c:fe:ff:af:c7:b8:46:a3:f9:7a:cf:
b7:fa:ff:2a:2c:4f:bb:8e:d3:cd:21:09:c7:22:ed:35:d8:23:
4b:73:ed:1a:f7:83:e8:13:1e:2e:d8:aa:a7:e0:99:bb:e7:41:
c1:54:bd:c0:cb:1d:76:2c:7a:01:91:45:a2:be:77:be:1a:33:
7a:d9:56:74
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIUWdOS/Bq6mKJztzuIc6s015Ej4LwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2
OThBREI5MTAeFw0yNTAxMzEwNDU3MTFaFw0yNTAyMDEwNzE4MTFaMDMxMTAvBgNV
BAMTKDMxRDI4MTJBQzdEMjQ1RDZGMkI2MDZFQ0JCODg2OTI4REQxQTRCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrG6L8sAj2sUl1nqkyf17paAz0
6s0TpZlgg84YI2FlDEv5lZWQ23hHQ5Ww+yVViKkBGZZMxj6ZUe22ySF/W2zgPTe3
TNwJ1LhdHiD2EUZKiB/z0uKHpm1hfqFenxnjZDYbfyFpfx12smLc2D2HLQuOwpAl
fSc3poR2PofZMXtwefoYVNDWH+cfGceDr7VPPm1L+CiMLpGKMxuvOZuB23a+Osws
lgbIlxSkxilnfGcj0gIKlFYQrQyVPCWXnWQLXOiZELTEvOCCIC2/4zBL+zZcjGs7
T2hUOVhhptT2icmIoDlKNZOghOvhDAg33MUK/Z9mV/Ikw/qqgDYTMcFbficBAgMB
AAGjggICMIIB/jAdBgNVHQ4EFgQUMdKBKsfSRdbytgbsu4hpKN0aS9kwHwYDVR0j
BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v
bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5
OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v
c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4
Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB
BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj
LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAAmubEeEv4ZteQvJNK2MYyQxn9v6Md16BHNyMnDHnvcaSmQfi
wfz73b54vFk0g8V8VXgRlTae97+MfpEjX3pJUzOXgHaqSfhG0Sisqb8MjuF9y2J5
sXBvKjLxcNdLKSi2jkI1vMDsIq29nLGEv/mxf5bWDFHYEKvJFLjb4UuAsDmKx0zY
8qAsLue+gddF2VePVWhJrUeyGSW0ah0Z3MeEh3+mVgu+bun9J0x7WtX+0Lftc+JM
8UMlhb4yZkz+/6/HuEaj+XrPt/r/KixPu47TzSEJxyLtNdgjS3PtGveD6BMeLtiq
p+CZu+dBwVS9wMsddix6AZFFor53vhozetlWdA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:06:57 2025 by rpki-client