Manifest
$ rpki-client -vvf rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
File: 95A38A1816A990804357FCAC49C09B0CA3A221E5.mft (raw, json)
Hash identifier: pxA33EWDmgmHi/rkOQYnYY6KK7+YLgFBlkPilhYw/y0=
Subject key identifier: B4:73:DB:A4:3F:C0:08:D4:02:0E:A9:E0:A5:C7:21:49:FF:D9:2A:05
Authority key identifier: 95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
Certificate issuer: /CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
Certificate serial: 6D813AF7E81A41EA6102D5845487BEE3A7FAA2E7
Authority info access: rsync://dev.tw/rpki/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer
Subject info access: rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
Manifest number: 018E
Signing time: Wed 20 Nov 2024 19:50:52 +0000
Manifest this update: Wed 20 Nov 2024 19:45:52 +0000
Manifest next update: Thu 21 Nov 2024 22:52:52 +0000
Files and hashes: 1: 326131323a646434373a333032353a3a2f34382d3438203d3e20323135393933.roa (hash: SRNIFLyF9rgr2vNMs8WmXgoHH9zFtNi5/LN1J6pSj2s=)
2: 326131323a646434373a333032363a3a2f34382d3438203d3e20323136313233.roa (hash: 53TgU1ECGMjBAXcrAQxaT4AgRhK2U19SQspOvCtzlL4=)
3: 326131323a646434373a333030303a3a2f34302d3438203d3e20313939323033.roa (hash: ndY8u+f5ZeoU/wrnQe6KrCdnR015JiNd3AvxGKfZCv8=)
4: 95A38A1816A990804357FCAC49C09B0CA3A221E5.crl (hash: ZOMfO4i/FnG4Ur3C5yv0+U63AC4nPli9yUHjUZj+YVM=)
5: 326131323a646434373a333032353a3a2f34382d3438203d3e20313432303436.roa (hash: 2sJv+1JULybbDLom8ub71ZfP3GDzrCOP/58bomKD/GA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:81:3a:f7:e8:1a:41:ea:61:02:d5:84:54:87:be:e3:a7:fa:a2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
Validity
Not Before: Nov 20 19:45:52 2024 GMT
Not After : Nov 21 22:52:52 2024 GMT
Subject: CN=B473DBA43FC008D4020EA9E0A5C72149FFD92A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f1:7f:30:cf:0b:52:64:b7:5f:73:55:3d:62:
c5:c6:4b:03:10:2c:d2:0e:24:4d:0b:f2:ed:f0:fa:
22:37:03:c8:c8:b8:2e:56:31:b1:ba:f4:9e:25:77:
3e:3e:ee:95:6b:b6:f4:53:ac:d8:4d:1e:b8:5a:f6:
dc:7a:1c:09:01:08:a2:a6:fc:17:04:87:66:76:4d:
62:85:76:82:9a:b3:1b:a1:3f:9e:fe:f7:7b:35:8a:
76:b8:77:fd:fb:21:f8:a9:6a:f5:02:8f:cc:e5:9e:
8f:e3:20:8a:0d:d5:e5:dd:37:ed:b8:45:66:d7:b9:
42:6e:b6:28:21:f2:72:e9:a8:34:95:2e:2d:4d:98:
61:c6:ec:60:e2:95:8c:73:5d:a3:74:f9:4b:51:aa:
76:3e:5b:8c:47:41:ff:3c:dd:83:f8:b2:8e:8a:0f:
01:d4:45:d9:31:30:cf:48:66:cd:ef:6b:80:c1:83:
c4:fc:b2:de:3e:9d:9f:05:b3:a3:0c:3a:bf:8b:95:
f4:8b:69:8a:71:93:93:f0:5b:98:b7:12:f8:de:73:
5c:75:dc:6e:99:a5:af:f9:42:d5:81:12:88:85:85:
a7:52:fb:6b:16:2c:67:05:19:ac:c4:ea:97:2c:13:
53:96:65:21:6f:2d:2b:06:5a:15:bb:24:ed:2b:12:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:DB:A4:3F:C0:08:D4:02:0E:A9:E0:A5:C7:21:49:FF:D9:2A:05
X509v3 Authority Key Identifier:
keyid:95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:12:b3:ab:32:92:53:e4:d6:20:41:45:38:8e:c1:ca:98:c4:
8a:9a:68:be:8d:a6:8c:4c:37:4d:a1:bd:62:a7:56:1b:f6:40:
49:58:74:c5:67:48:88:b1:f4:2b:f2:d1:3f:cf:e6:2c:f3:0f:
8a:1b:c1:3a:c6:12:b6:67:ca:61:12:a3:80:9f:34:d4:6b:ac:
72:f2:27:db:f5:9b:ab:ab:54:6b:e5:93:2c:ad:19:c7:9a:36:
ae:76:56:0a:51:21:92:a2:b5:e0:f2:df:d8:53:e0:65:ed:53:
2c:10:48:44:43:11:0a:89:fb:f0:78:7a:95:5a:cf:9f:92:87:
32:c5:5e:4a:9b:d3:1e:17:71:85:0a:30:c8:06:0e:c4:1a:b7:
cb:bb:f0:e7:4a:7c:56:eb:22:9e:f9:30:24:36:65:6e:95:ba:
c9:de:c8:3b:55:f3:13:cb:13:64:62:ed:9f:44:c0:77:e3:27:
4a:8a:26:93:4d:3f:ef:76:f7:cc:72:cc:fc:5a:a1:e1:06:aa:
fd:74:f1:e6:b5:87:3c:50:03:17:28:d3:08:05:a0:20:9f:dd:
c4:b4:fd:fd:cb:80:e1:3f:c4:7e:bb:73:80:72:f9:a9:09:cd:
2f:a5:17:b3:bd:e1:69:15:e5:61:9a:87:7b:02:60:7f:4f:36:
9e:37:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:44 2024 by rpki-client on console.sobornost.net