Manifest
$ rpki-client -vvf rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
File: 8D47937E5FB1C1169EEAD229E680E581B175465F.mft (raw, json)
Hash identifier: aeQ4pX2N6g46AAI+pUvUiiktEtqfiijaGEzsZCE+gsg=
Subject key identifier: AD:7E:01:01:EB:4F:EC:14:9D:F0:49:AF:25:F3:B6:CA:6E:6F:CC:9D
Authority key identifier: 8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
Certificate issuer: /CN=8D47937E5FB1C1169EEAD229E680E581B175465F
Certificate serial: 2CB467587183020002B05F138F6038D6E2342493
Authority info access: rsync://rpki.co/repo/AS945/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
Subject info access: rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
Manifest number: 0160
Signing time: Sat 06 Jan 2024 10:09:46 +0000
Manifest this update: Sat 06 Jan 2024 10:04:46 +0000
Manifest next update: Sun 07 Jan 2024 11:28:46 +0000
Files and hashes: 1: 326131323a646434373a353330313a3a2f34382d3438203d3e20323131353039.roa (hash: /BwD2FrA+RtB39SFKl8GBS1LvI3e1qoPSaTCBf+4ntY=)
2: 8D47937E5FB1C1169EEAD229E680E581B175465F.crl (hash: sqjXbiER2MYvinemLCZ/74Xjb3aCUqWZOI4GNPpXYPI=)
3: 326131323a646434373a353330303a3a2f34382d3438203d3e20323131353039.roa (hash: WQa+xNGUCC35OTjNy/TsMvHRpfc6M0DvyJwpQ0fOb2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b4:67:58:71:83:02:00:02:b0:5f:13:8f:60:38:d6:e2:34:24:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D47937E5FB1C1169EEAD229E680E581B175465F
Validity
Not Before: Jan 6 10:04:46 2024 GMT
Not After : Jan 7 11:28:46 2024 GMT
Subject: CN=AD7E0101EB4FEC149DF049AF25F3B6CA6E6FCC9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:1d:1b:e0:99:86:09:69:99:9a:c9:5e:65:
cc:1f:34:f0:d5:4a:3c:ed:a7:cc:1f:ea:8e:cc:58:
6a:8f:38:64:60:e3:12:f4:27:bf:0f:8b:71:7e:97:
21:67:e2:38:aa:9f:44:89:6c:ab:8f:2e:2d:32:2a:
6a:e8:29:fc:51:38:30:78:63:a0:3e:34:f7:92:6d:
4c:25:87:2a:ce:a0:f5:f9:30:b9:d5:4a:9e:9c:8a:
3b:a6:93:70:fe:81:91:17:61:1b:7b:ef:d9:4f:51:
5f:3d:00:9e:71:2a:0c:82:df:69:7b:d9:db:17:8d:
b4:10:8e:38:b4:3b:cc:ca:2e:27:27:2a:e3:1a:c6:
be:ce:dc:9d:2b:d6:cb:54:dc:c3:4d:b9:5e:e7:ef:
31:53:d5:3a:b0:a4:75:30:da:50:cd:51:20:8a:0a:
88:e7:ad:a1:22:7a:c4:56:df:98:b0:a4:f5:16:c3:
d8:f0:b1:8c:6a:34:b6:8d:46:24:d2:5f:50:95:59:
35:5e:3d:31:b5:bc:0a:e5:a2:b3:c1:7e:e3:79:85:
1d:f6:db:4f:70:52:92:72:55:d3:bf:f6:67:15:85:
39:af:9c:cc:0a:e5:08:ad:c5:9a:61:ba:39:cb:bb:
63:a7:1d:bd:96:25:a9:33:d5:98:68:ba:44:85:a2:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:01:01:EB:4F:EC:14:9D:F0:49:AF:25:F3:B6:CA:6E:6F:CC:9D
X509v3 Authority Key Identifier:
keyid:8D:47:93:7E:5F:B1:C1:16:9E:EA:D2:29:E6:80:E5:81:B1:75:46:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D47937E5FB1C1169EEAD229E680E581B175465F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Rudaki/0/8D47937E5FB1C1169EEAD229E680E581B175465F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c4:b5:e1:9a:88:68:e5:4c:d9:25:bb:8d:71:8f:ae:fd:9a:
e6:e1:19:51:f8:56:07:27:58:6c:fb:33:7d:50:1f:d3:b4:41:
93:d1:20:cf:42:2e:80:4e:6e:b3:de:6c:d1:85:31:e3:53:bb:
78:8d:4a:8b:3d:65:02:43:70:52:d3:63:23:d9:ce:fe:a3:b5:
8e:f3:ac:2f:5f:0a:e1:65:a7:15:2c:1f:5b:1a:1d:5a:17:06:
22:c5:30:34:a8:3b:82:90:07:ff:77:c3:33:53:6f:d3:46:52:
77:05:c5:a7:10:12:d8:4a:48:92:26:b3:2d:6f:2a:00:65:59:
3b:5c:da:e5:ec:66:94:ce:08:31:da:ec:73:c7:01:43:26:a2:
84:88:65:db:68:32:6f:4d:12:49:34:fe:30:bc:c1:46:69:de:
8e:d0:c4:00:e5:cf:b7:a8:f7:ee:c2:73:49:5d:44:5b:c5:6f:
2d:11:6f:f9:e1:4c:91:95:70:ff:72:d5:e3:47:1e:d3:94:33:
ca:dd:de:ef:c2:ef:8d:ea:fb:12:3d:50:61:f6:f7:6d:ac:9e:
f9:62:c6:d2:87:f1:7a:10:49:22:ae:04:60:df:46:62:42:bf:
af:94:36:57:53:96:c3:35:49:f1:53:dd:3a:17:4b:c5:b6:0b:
10:44:09:3c
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIULLRnWHGDAgACsF8Tj2A41uI0JJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ0NzkzN0U1RkIxQzExNjlFRUFEMjI5RTY4MEU1ODFC
MTc1NDY1RjAeFw0yNDAxMDYxMDA0NDZaFw0yNDAxMDcxMTI4NDZaMDMxMTAvBgNV
BAMTKEFEN0UwMTAxRUI0RkVDMTQ5REYwNDlBRjI1RjNCNkNBNkU2RkNDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Xh0b4JmGCWmZmsleZcwfNPDV
Sjztp8wf6o7MWGqPOGRg4xL0J78Pi3F+lyFn4jiqn0SJbKuPLi0yKmroKfxRODB4
Y6A+NPeSbUwlhyrOoPX5MLnVSp6cijumk3D+gZEXYRt779lPUV89AJ5xKgyC32l7
2dsXjbQQjji0O8zKLicnKuMaxr7O3J0r1stU3MNNuV7n7zFT1TqwpHUw2lDNUSCK
CojnraEiesRW35iwpPUWw9jwsYxqNLaNRiTSX1CVWTVePTG1vArlorPBfuN5hR32
209wUpJyVdO/9mcVhTmvnMwK5QitxZphujnLu2OnHb2WJakz1ZhoukSFotjPAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUrX4BAetP7BSd8EmvJfO2ym5vzJ0wHwYDVR0j
BBgwFoAUjUeTfl+xwRae6tIp5oDlgbF1Rl8wDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL1J1ZGFraS8wLzhENDc5
MzdFNUZCMUMxMTY5RUVBRDIyOUU2ODBFNTgxQjE3NTQ2NUYuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUv
MS84RDQ3OTM3RTVGQjFDMTE2OUVFQUQyMjlFNjgwRTU4MUIxNzU0NjVGLmNlcjBm
BggrBgEFBQcBCwRaMFgwVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraS5jby9yZXBv
L1J1ZGFraS8wLzhENDc5MzdFNUZCMUMxMTY5RUVBRDIyOUU2ODBFNTgxQjE3NTQ2
NUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBLxLXhmoho5UzZJbuNcY+u/Zrm4RlR+FYHJ1hs+zN9UB/T
tEGT0SDPQi6ATm6z3mzRhTHjU7t4jUqLPWUCQ3BS02Mj2c7+o7WO86wvXwrhZacV
LB9bGh1aFwYixTA0qDuCkAf/d8MzU2/TRlJ3BcWnEBLYSkiSJrMtbyoAZVk7XNrl
7GaUzggx2uxzxwFDJqKEiGXbaDJvTRJJNP4wvMFGad6O0MQA5c+3qPfuwnNJXURb
xW8tEW/54UyRlXD/ctXjRx7TlDPK3d7vwu+N6vsSPVBh9vdtrJ75YsbSh/F6EEki
rgRg30ZiQr+vlDZXU5bDNUnxU906F0vFtgsQRAk8
-----END CERTIFICATE-----
Generated at Mon May 26 04:26:49 2025 by rpki-client