Manifest
$ rpki-client -vvf rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
File: A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft (raw, json)
Hash identifier: TqBMjSwr+Nnu06X28HrIjd/md0E6kk2uniMFwPNkSa8=
Subject key identifier: 53:E3:E4:5B:57:36:6A:9D:A9:D8:F2:0A:02:2F:4E:42:C9:AC:AE:21
Authority key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Certificate issuer: /CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Certificate serial: 60796375478ADDEE9117F2A89289BBA58525CF60
Authority info access: rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject info access: rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
Manifest number: 016B
Signing time: Sat 06 Jan 2024 10:44:48 +0000
Manifest this update: Sat 06 Jan 2024 10:39:48 +0000
Manifest next update: Sun 07 Jan 2024 13:10:48 +0000
Files and hashes: 1: A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl (hash: CdCt5VzrRPWY4W7wETTARvuLdZzzOEqOWiwd/iMF+Es=)
2: 326131323a646434373a383730303a3a2f34302d3438203d3e20323030353739.roa (hash: +XAbXQdBI4cGfKL4J96Eh20Ko/gEZBf1s7mc+L0tmUM=)
3: 326131323a646434373a643030303a3a2f34302d3438203d3e20323136343132.roa (hash: xXy4yriBwbACxG2/9b2YMJO0L/gJH73Wl2NrPTm9iuQ=)
4: 326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa (hash: q31Ruf4fC3qwbVEmkGBkAa9utfcoTWGjLC1RLrsx0pY=)
5: 326131323a646434373a643030303a3a2f34302d3438203d3e20323030353739.roa (hash: nVpGVOd0OsHuhBA4CamxbWvOXXoRspiPL0YM6mzT+u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:79:63:75:47:8a:dd:ee:91:17:f2:a8:92:89:bb:a5:85:25:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Validity
Not Before: Jan 6 10:39:48 2024 GMT
Not After : Jan 7 13:10:48 2024 GMT
Subject: CN=53E3E45B57366A9DA9D8F20A022F4E42C9ACAE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:db:8b:1b:c8:9d:c7:17:c0:e4:5f:8b:5c:
c6:23:9c:89:35:6b:0e:d1:6d:0e:5a:76:a9:a0:5c:
28:86:a6:27:b0:87:f4:d8:f2:e3:92:43:5d:cf:fc:
ed:5e:bf:4c:cd:69:f8:cc:96:78:26:fa:33:b2:21:
aa:f3:5b:75:42:06:2a:e7:2c:37:e7:cc:60:f4:eb:
4d:bf:c3:58:5a:2d:bf:cf:76:19:c0:14:0a:ed:6a:
f9:98:99:c1:c3:b1:a9:ea:e3:1e:82:76:2c:06:4b:
aa:13:51:d9:67:32:f3:ab:03:55:7c:d0:02:5b:fb:
7c:64:e0:23:51:62:f6:66:ca:2c:d3:64:44:58:17:
8b:fa:72:97:72:e6:da:99:ed:2d:c7:20:86:6d:e4:
56:19:3f:99:24:82:cc:65:3e:4f:df:06:43:5f:9b:
4c:2f:1e:31:d7:06:4b:81:af:d7:8d:6a:dc:db:5b:
50:60:27:31:ef:83:0c:23:b6:07:d0:13:bc:0d:01:
a3:6c:36:71:27:41:c9:cf:75:63:a5:0a:05:a9:9d:
8e:06:2a:43:c4:e5:b0:c6:6f:1c:6b:a9:32:4f:22:
fb:93:94:de:4d:bd:42:9c:dc:d6:84:76:f8:0e:b8:
93:00:df:7e:17:ff:e2:e0:1d:ff:ec:9b:c4:7d:91:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:E4:5B:57:36:6A:9D:A9:D8:F2:0A:02:2F:4E:42:C9:AC:AE:21
X509v3 Authority Key Identifier:
keyid:A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d9:1d:2b:36:27:2e:47:e5:bb:db:54:69:10:5d:2c:b2:9a:
6b:75:2a:e0:55:7d:ba:15:75:53:69:ee:82:22:db:e7:e3:96:
0e:f1:3d:9b:78:ea:fc:5c:46:18:48:ff:f3:a6:4e:e4:b0:a7:
4e:c0:b2:db:b2:11:b7:6d:ff:37:43:e5:ed:fc:a9:88:85:55:
7e:35:fa:9a:30:29:21:3e:56:31:e1:45:09:60:57:2f:89:dd:
fd:7b:31:ed:26:a7:eb:ba:6a:8c:f6:66:43:e1:d1:51:75:43:
3c:7e:b6:ee:a2:ad:5a:ce:9c:0f:d9:50:bb:37:85:3d:92:21:
2f:e7:1f:01:c4:6f:17:2a:cc:23:59:03:98:a5:a2:a0:4f:9b:
5e:d0:f7:3b:37:11:30:a0:c0:81:6e:17:b9:ca:1e:8b:fe:15:
9f:c9:54:92:df:7f:6d:de:3a:48:0d:74:64:0c:7f:04:af:25:
fb:ce:38:ed:c1:7c:9d:f0:3e:6c:11:bf:42:5e:d8:b4:df:77:
9f:6c:8c:f1:c1:a3:e0:02:dc:9d:be:b9:18:e9:66:fa:83:92:
95:52:4f:c8:dc:9c:c5:12:34:28:a1:dc:0a:27:ce:3b:c7:c0:
8a:61:95:50:e7:a8:00:6d:c5:99:85:8a:57:c1:83:cb:7a:01:
8e:87:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 26 04:07:44 2025 by rpki-client