
Manifest
$ rpki-client -vvf rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
File: 40C513034911811188EE6887BB01091E1FE7EE0D.mft (raw, json)
Hash identifier: UTyEEOQ8RFyg4aWbBwSC0Yc3rIx3+Ox8jEZy87pMVhQ=
Subject key identifier: 14:28:67:04:C9:90:3A:35:33:44:BB:DA:5A:9F:53:93:00:DA:3C:45
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 3FF9B198582320B082CB6C298AE0D3B19872A382
Authority info access: rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
Manifest number: 015F
Signing time: Sat 06 Jan 2024 10:09:46 +0000
Manifest this update: Sat 06 Jan 2024 10:04:46 +0000
Manifest next update: Sun 07 Jan 2024 10:44:46 +0000
Files and hashes: 1: 40C513034911811188EE6887BB01091E1FE7EE0D.crl (hash: m0JfJUssudUSgGuQxWXuauMuZS9O0gzfcufYNzt3jLo=)
2: 326131323a646434363a316666663a3a2f34382d3438203d3e20323136313233.roa (hash: qQigDxbgqh1dn9l57biUXEVA9ZWdhqI9Klz2hils5bE=)
3: 326131323a646434363a316666653a3a2f34382d3438203d3e20323135393933.roa (hash: TzhvlfNzezP7KSKt17zQfPjRLFP4e64a8u7L8RBHtk4=)
4: 326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa (hash: dxEiHHxyduAr1ALkA+xdtGMhtU8fcI+5V8ZzRUAYE7s=)
5: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (hash: 5JQRwx05KroqF5LRUmHACPBSci1N7ua9zdV5lqtXOuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f9:b1:98:58:23:20:b0:82:cb:6c:29:8a:e0:d3:b1:98:72:a3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: Jan 6 10:04:46 2024 GMT
Not After : Jan 7 10:44:46 2024 GMT
Subject: CN=14286704C9903A353344BBDA5A9F539300DA3C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:18:d0:af:f5:2e:59:3d:73:d9:c2:05:62:
35:ee:de:cb:01:d5:8f:f4:51:42:e9:f8:8c:1c:02:
83:0e:23:bb:47:92:1a:08:6c:61:ce:88:44:e0:0b:
4a:5d:92:d3:4e:af:ba:0d:63:d4:f5:1e:7f:83:81:
44:ed:50:c4:8b:4e:57:51:b3:0c:58:76:08:1c:04:
db:11:ef:bb:5d:50:88:52:ca:64:79:4a:37:89:32:
fa:fa:ff:97:20:17:e8:c4:90:f7:7b:60:64:a7:10:
42:33:7d:d4:78:08:6c:f4:fa:72:ba:03:32:d2:4c:
98:63:fa:87:ef:d8:bc:0f:78:96:4a:ef:0c:c9:86:
fc:17:dc:5d:3c:0e:f1:6d:7e:14:c6:9c:0f:05:8b:
a4:ab:35:f7:0a:84:50:51:36:a9:3d:72:84:44:1b:
02:0c:89:52:8d:e5:27:4e:4e:10:5d:5e:ff:33:f5:
da:53:8e:72:e6:5c:9b:68:b4:08:8e:3d:06:e3:4a:
7e:9e:df:f8:9e:15:24:b9:1b:48:e9:9d:be:62:14:
87:7b:06:cb:e2:5c:ef:d9:47:a1:a3:9e:cc:3e:f9:
e7:83:9c:7a:e0:44:19:af:0f:c7:3c:79:a3:cd:f8:
74:ef:22:c3:80:d2:d6:d4:77:50:99:af:0b:dd:d5:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:67:04:C9:90:3A:35:33:44:BB:DA:5A:9F:53:93:00:DA:3C:45
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:23:6e:01:92:01:4d:92:53:24:7c:66:42:7d:0c:40:c9:d7:
00:97:bf:f7:a2:38:9e:d6:d2:80:1e:cf:df:97:37:b0:13:da:
af:c1:e1:3a:b7:da:2b:0c:44:79:b4:f6:1c:07:cb:52:2d:2d:
07:62:5b:e9:14:d6:13:ee:34:9b:ce:c6:6d:38:84:1b:10:ac:
b2:3b:1f:df:d2:6d:06:99:8a:68:57:06:56:32:ce:8b:d5:89:
b1:a4:60:4e:f5:43:c1:7f:8e:1a:1d:5b:de:cb:36:0f:12:40:
f2:a6:8d:2c:01:10:19:ce:28:8d:32:e1:8d:be:cc:36:c0:ab:
86:49:59:7e:93:0a:9e:e7:92:43:25:39:ad:cf:9d:fd:2e:a7:
f3:87:e9:74:95:f2:42:bd:c7:8e:90:58:de:3e:7e:99:fb:84:
b8:50:22:d7:17:9c:2c:b5:ae:a3:00:c7:23:bf:65:bd:e6:e5:
e4:ea:1a:4c:68:42:19:0f:9d:3b:fc:7d:70:4f:c9:e3:54:b7:
14:1d:97:17:11:2f:ae:ce:e4:8b:b0:98:04:3f:b9:72:45:b1:
74:93:59:d2:0a:af:c0:58:a3:31:8e:1e:05:7b:e7:f5:9c:90:
28:6e:cc:0e:86:e2:66:d6:fe:73:24:f2:83:c5:fa:21:a2:66:
86:0e:be:24
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUP/mxmFgjILCCy2wpiuDTsZhyo4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDNTEzMDM0OTExODExMTg4RUU2ODg3QkIwMTA5MUUx
RkU3RUUwRDAeFw0yNDAxMDYxMDA0NDZaFw0yNDAxMDcxMDQ0NDZaMDMxMTAvBgNV
BAMTKDE0Mjg2NzA0Qzk5MDNBMzUzMzQ0QkJEQTVBOUY1MzkzMDBEQTNDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsqRjQr/UuWT1z2cIFYjXu3ssB
1Y/0UULp+IwcAoMOI7tHkhoIbGHOiETgC0pdktNOr7oNY9T1Hn+DgUTtUMSLTldR
swxYdggcBNsR77tdUIhSymR5SjeJMvr6/5cgF+jEkPd7YGSnEEIzfdR4CGz0+nK6
AzLSTJhj+ofv2LwPeJZK7wzJhvwX3F08DvFtfhTGnA8Fi6SrNfcKhFBRNqk9coRE
GwIMiVKN5SdOThBdXv8z9dpTjnLmXJtotAiOPQbjSn6e3/ieFSS5G0jpnb5iFId7
BsviXO/ZR6Gjnsw++eeDnHrgRBmvD8c8eaPN+HTvIsOA0tbUd1CZrwvd1XLfAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUFChnBMmQOjUzRLvaWp9TkwDaPEUwHwYDVR0j
BBgwFoAUQMUTA0kRgRGI7miHuwEJHh/n7g0wDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL1NpbXBsZS8xLzQwQzUx
MzAzNDkxMTgxMTE4OEVFNjg4N0JCMDEwOTFFMUZFN0VFMEQuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUv
MS80MEM1MTMwMzQ5MTE4MTExODhFRTY4ODdCQjAxMDkxRTFGRTdFRTBELmNlcjBm
BggrBgEFBQcBCwRaMFgwVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraS5jby9yZXBv
L1NpbXBsZS8xLzQwQzUxMzAzNDkxMTgxMTE4OEVFNjg4N0JCMDEwOTFFMUZFN0VF
MEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQDsI24BkgFNklMkfGZCfQxAydcAl7/3ojie1tKAHs/flzew
E9qvweE6t9orDER5tPYcB8tSLS0HYlvpFNYT7jSbzsZtOIQbEKyyOx/f0m0GmYpo
VwZWMs6L1YmxpGBO9UPBf44aHVveyzYPEkDypo0sARAZziiNMuGNvsw2wKuGSVl+
kwqe55JDJTmtz539Lqfzh+l0lfJCvceOkFjePn6Z+4S4UCLXF5wsta6jAMcjv2W9
5uXk6hpMaEIZD507/H1wT8njVLcUHZcXES+uzuSLsJgEP7lyRbF0k1nSCq/AWKMx
jh4Fe+f1nJAobswOhuJm1v5zJPKDxfohomaGDr4k
-----END CERTIFICATE-----
Generated at Mon May 26 04:12:07 2025 by rpki-client