Manifest
$ rpki-client -vvf rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
File: CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft (raw, json)
Hash identifier: EHEptAPWGPIoVyIyWPHdVP/T+K+w2eW7zzjSxsBP02I=
Subject key identifier: 89:05:45:56:B3:34:DD:E9:D7:0E:EA:74:C9:9C:5B:88:40:3B:53:2F
Authority key identifier: CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Certificate issuer: /CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Certificate serial: 4D8654215B899ED63608B05392E617E3286BF781
Authority info access: rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
Subject info access: rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
Manifest number: 015E
Signing time: Sat 06 Jan 2024 03:04:30 +0000
Manifest this update: Sat 06 Jan 2024 02:59:30 +0000
Manifest next update: Sun 07 Jan 2024 06:07:30 +0000
Files and hashes: 1: 326131323a646434373a383034373a3a2f34382d3438203d3e20323033383433.roa (hash: ZIqI3FI+tNz0mJv/3X3x6XQkvPBDu6nQbvuZE2iia5A=)
2: 326131323a646434373a383065343a3a2f34382d3438203d3e20323033383433.roa (hash: vFOMK9lz7jUyyorC73CXCBplIQunYr9zxyM8MxJEoO4=)
3: CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl (hash: iPxi43VFa/SVI8mNKp7ZtmD2/a/uHoa5QfIBne9/cxk=)
4: 326131323a646434373a383034373a3a2f34382d3438203d3e203331383938.roa (hash: I3eHt1KkFOZ9vYgZL5DvizKnnP1IJb7p2tTY3XyUhuA=)
5: 326131323a646434373a383065343a3a2f34382d3438203d3e203331383938.roa (hash: LYgb5pzaHPoDoCFHFjy2oyQ7mmYhorIhG8fS0Mq8Otc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:86:54:21:5b:89:9e:d6:36:08:b0:53:92:e6:17:e3:28:6b:f7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Validity
Not Before: Jan 6 02:59:30 2024 GMT
Not After : Jan 7 06:07:30 2024 GMT
Subject: CN=89054556B334DDE9D70EEA74C99C5B88403B532F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:ec:c1:cf:db:13:f2:ca:23:0f:3b:2d:41:
43:8a:70:e7:d0:76:25:a1:f0:47:a8:f7:a1:9e:2b:
88:39:0a:8e:8c:da:9f:d0:20:ad:bc:c8:6c:86:da:
c8:69:ed:40:fc:ee:9e:34:98:37:ff:95:09:cc:c0:
45:fd:5a:01:24:80:a5:5f:ff:c1:96:a0:b4:05:7d:
cf:23:d7:6f:10:62:63:02:03:48:1e:52:a1:85:49:
c8:0f:c8:a5:20:5e:b7:3b:b3:0e:04:5c:f6:69:aa:
22:ca:20:f9:21:92:b8:8e:b4:16:fc:df:c3:71:e2:
35:94:08:4a:fe:b1:47:91:f5:75:0a:31:61:09:d3:
01:d1:cb:5c:ec:61:77:ac:63:76:ec:84:3e:59:f6:
ad:2e:c5:36:48:f5:08:1d:14:42:7a:64:58:03:be:
b1:5c:0f:c1:cb:1b:ec:9e:d7:92:16:f1:0c:43:fc:
52:9d:73:f6:e5:e1:c9:72:b4:dc:68:93:8f:83:ed:
39:3b:b3:83:c8:dd:a2:e8:0b:e2:6b:22:53:bd:48:
6d:87:9b:7e:b9:d0:7d:c0:0f:2d:64:40:50:4c:24:
93:72:73:a7:fb:8c:d5:4f:8e:b4:d9:c6:df:0c:72:
2d:d7:16:1b:ba:69:ff:38:68:77:c4:65:b7:49:a9:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:45:56:B3:34:DD:E9:D7:0E:EA:74:C9:9C:5B:88:40:3B:53:2F
X509v3 Authority Key Identifier:
keyid:CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:1a:36:4e:55:1d:89:30:bd:7e:4f:e3:f2:24:8f:c5:e5:
1b:51:ae:08:c1:88:8f:ea:48:41:d6:73:d3:0e:ac:b2:f3:d5:
93:0d:df:bd:bb:ac:e0:f6:94:84:a4:3c:99:e2:71:a9:bf:ca:
e6:e1:57:77:7e:c8:da:57:4b:69:60:56:9b:cd:6c:1e:64:3d:
5c:b0:47:44:9b:bd:7b:d4:95:64:e3:d6:cf:aa:a4:c8:25:66:
15:d5:57:0c:64:f2:00:ae:89:33:78:7f:30:bc:4e:92:08:60:
be:3a:25:6c:52:39:38:40:ca:9b:c2:57:55:a1:ef:df:05:dc:
95:96:a8:6e:7c:d4:86:40:a0:f4:f7:da:3f:c4:a1:ec:82:09:
f7:f8:c4:dc:85:33:eb:81:0b:da:aa:88:4b:ca:6d:3b:c1:f7:
11:f7:50:12:3f:4b:db:ea:9e:de:54:94:75:5c:13:86:62:99:
ff:50:76:53:b3:99:96:36:ad:25:f2:3d:fc:d1:b9:5a:a1:d5:
47:4e:88:d8:93:0b:cf:a8:bd:c4:4e:69:b8:d4:05:11:35:71:
d3:2f:3f:7b:ea:ea:33:9f:dc:71:b5:e4:22:9a:d5:9c:37:a4:
1e:07:a1:4f:ed:87:f2:85:ae:55:41:5c:56:7b:d6:c1:09:3b:
ee:0c:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 26 01:59:13 2025 by rpki-client