Manifest
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
File: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json)
Hash identifier: /k0Boe0cXN2kVh2FEic+b5KD9+67CeidD8F+ED2y7kI=
Subject key identifier: 28:83:C0:38:48:C6:C1:E1:B6:B3:5A:0D:23:1F:BE:8F:0A:AE:7B:BA
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial: 13BD49F8AC0282E8348E3DCA49E7432112817347
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
Manifest number: 068F
Signing time: Fri 31 Jan 2025 13:08:14 +0000
Manifest this update: Fri 31 Jan 2025 13:03:14 +0000
Manifest next update: Sat 01 Feb 2025 16:10:14 +0000
Files and hashes: 1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=)
2: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=)
3: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: 9tXRZQgSFHNcIfeRop8aMfs/mkZb76RLfzbzDN9GGEY=)
4: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: 8QVCMDLnS11SQrypKxLd72TeREEes+YvpfjJxDpBZ84=)
5: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=)
6: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: 4PYyqHgudJq8Vi/yzOkDgCunzmO8swrJSBCK7XhcPJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bd:49:f8:ac:02:82:e8:34:8e:3d:ca:49:e7:43:21:12:81:73:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Validity
Not Before: Jan 31 13:03:14 2025 GMT
Not After : Feb 1 16:10:14 2025 GMT
Subject: CN=2883C03848C6C1E1B6B35A0D231FBE8F0AAE7BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:c8:fc:d9:b4:e5:36:0f:78:34:6d:62:34:
55:6f:1f:7e:71:db:b6:45:ed:bd:c6:26:84:24:39:
e4:fc:3d:f3:01:27:53:5f:46:32:46:fe:c8:f3:39:
ba:25:38:38:7c:b1:20:0a:04:18:6b:45:e8:08:ff:
54:66:98:45:99:e0:f1:fd:32:ac:86:a3:d4:97:27:
7f:8c:e4:57:36:6e:c3:06:1f:f6:2a:db:76:4f:e8:
40:f8:2a:06:57:22:63:4c:c6:c8:73:e3:66:4c:3c:
a2:f9:69:61:29:af:11:53:4a:84:7a:27:84:c7:60:
21:58:ba:ba:97:f3:bc:89:26:43:40:f6:14:af:80:
53:17:2f:6f:20:df:7a:96:e5:62:6e:f8:c6:fe:6c:
4c:ef:9b:cd:ca:5d:5b:8f:ef:77:b8:bf:c9:10:a9:
02:c3:67:6c:99:39:87:72:d6:87:43:de:18:63:3b:
5d:f7:8f:d1:8f:ec:2c:47:e7:90:21:fa:86:a6:54:
45:7f:c9:e2:e4:ff:d4:34:d9:00:13:12:ea:ad:08:
29:76:e0:86:7a:bd:47:f3:41:4e:c5:7a:78:61:fb:
cf:ca:3f:5a:58:cd:39:04:3e:a0:e8:fa:fd:f6:66:
0d:8b:69:58:58:5a:a3:07:3b:a2:b3:92:20:1a:25:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:C0:38:48:C6:C1:E1:B6:B3:5A:0D:23:1F:BE:8F:0A:AE:7B:BA
X509v3 Authority Key Identifier:
keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:55:f3:f5:c0:e1:60:b2:b7:d0:3b:a6:98:9e:81:20:27:58:
fc:27:b7:61:be:38:b7:23:d4:2a:83:93:0b:71:ee:7e:c2:16:
d7:d4:49:20:d6:de:6c:ee:54:d4:ad:ed:cb:f1:d1:a2:fd:c2:
b2:e7:ef:17:9d:de:8a:f1:a6:7d:69:54:aa:17:04:e2:88:e3:
14:6c:4e:b3:dc:34:5a:a2:46:7d:d9:00:99:ab:e6:0d:17:e1:
c9:ea:8d:b5:ad:f9:cb:bd:6a:44:a9:f4:b5:e6:71:a0:bc:05:
f4:8b:54:c6:18:29:f7:9d:29:be:51:01:30:18:2d:34:ef:6a:
66:14:1b:ef:05:58:ba:15:3b:50:30:10:5f:4a:c6:06:ed:8b:
d2:a4:bd:59:19:04:f1:ab:cb:ff:4c:33:48:a6:81:67:87:00:
37:6a:ae:36:e8:36:be:ad:a0:c4:a3:b9:f9:d1:a6:62:f2:e5:
51:6f:50:e7:68:31:c3:97:da:f4:6c:24:57:45:ba:4f:24:15:
c6:1c:e5:f3:c2:7f:b3:98:99:72:38:c3:36:fd:3e:6f:3c:bb:
7b:f8:2b:db:0b:6f:a9:54:c4:ce:58:a7:ed:b9:65:ee:8c:b3:
3d:1c:3b:96:34:49:ba:15:0b:b6:71:dd:d5:48:a9:fc:d9:43:
b9:2b:8f:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:46 2025 by rpki-client