Manifest
$ rpki-client -vvf rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
File: A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft (raw, json)
Hash identifier: hy/dSUtk8MyfmMnQ6QKjbjJEdkJOV0DQpACG1MAZG6g=
Subject key identifier: 95:91:9E:88:AD:EC:77:5A:3C:2C:F2:41:75:54:FC:DD:BB:DD:85:8B
Authority key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Certificate issuer: /CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Certificate serial: 67ED13BBF694DD49E31DE2AA770F4137231592BF
Authority info access: rsync://dev.tw/rpki/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject info access: rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
Manifest number: 0326
Signing time: Wed 20 Nov 2024 16:20:51 +0000
Manifest this update: Wed 20 Nov 2024 16:15:51 +0000
Manifest next update: Thu 21 Nov 2024 18:28:51 +0000
Files and hashes: 1: 326131323a646434373a643030303a3a2f34302d3438203d3e20323033383638.roa (hash: wXJsBH0W09IJZ1UzJKsiV0QM1YNmooXs93dI+HRR80Q=)
2: A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl (hash: ZWyB0zLNNV7SnPsEH9nEX6rZQ3UETuiklauvGuOrhaQ=)
3: 326131323a646434373a383730303a3a2f34302d3438203d3e20323033383638.roa (hash: 2Wh5hlf3CE2eoqpnrDOGkbGPepB3PkjHR7Zo2h4WjyU=)
4: 326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa (hash: MdG006U9XMVs0Es14dboXJTTa9RiLlXJi+CaxjNbadE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ed:13:bb:f6:94:dd:49:e3:1d:e2:aa:77:0f:41:37:23:15:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Validity
Not Before: Nov 20 16:15:51 2024 GMT
Not After : Nov 21 18:28:51 2024 GMT
Subject: CN=95919E88ADEC775A3C2CF2417554FCDDBBDD858B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:f8:bf:e4:b9:7d:64:c9:83:0d:29:25:c0:
fc:c0:b5:76:e0:c4:78:bb:db:3b:b1:36:ee:29:02:
4b:2c:a0:3b:b8:fa:dd:82:40:49:62:97:bd:93:5a:
dd:07:d3:a0:c2:e7:ca:f6:cb:e6:4f:39:82:ef:95:
3f:e7:55:84:79:44:24:0b:eb:71:dc:cf:c4:81:3b:
b6:40:fc:b7:93:50:90:e7:9e:58:8d:b5:b8:f2:78:
ad:1c:dc:47:49:95:3d:8c:40:19:a1:38:ae:32:5d:
72:05:8f:b2:e7:89:cb:4d:02:e7:fe:1b:e9:d8:fa:
20:8c:e2:37:22:09:0f:0f:8b:dc:80:5c:7f:95:86:
22:5a:6a:17:01:91:6f:b8:98:93:25:35:ee:12:6f:
6f:30:18:0a:bb:6e:d1:6f:b8:05:65:ab:5a:88:d8:
90:d3:20:cd:67:c1:50:43:0b:38:7e:5a:4c:7d:fa:
98:7f:77:d2:b3:9d:5a:14:f0:b8:ea:95:c3:5d:4b:
0e:d5:85:e2:92:4c:21:e0:fd:2e:fb:65:19:09:5d:
01:40:2d:8b:84:6d:6a:fd:f6:a4:8f:19:48:77:93:
80:6f:d8:51:02:8f:16:eb:58:68:d5:d6:ce:cb:1d:
a5:d9:f9:f2:2a:75:5b:c8:f3:56:04:e8:b2:cf:05:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:91:9E:88:AD:EC:77:5A:3C:2C:F2:41:75:54:FC:DD:BB:DD:85:8B
X509v3 Authority Key Identifier:
keyid:A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:07:e8:05:2f:fb:4f:6b:3f:f5:34:fa:ae:bb:2f:92:33:e8:
5c:03:8a:98:18:fc:95:bf:33:fb:f9:c7:99:79:59:ff:35:ae:
87:29:71:76:c6:41:6a:a3:df:9c:28:c9:89:d4:f0:d2:0d:15:
18:71:37:ec:6e:96:2b:b7:5b:f7:eb:db:d2:74:e9:cf:da:76:
3d:19:2a:c6:73:1d:93:d6:41:bf:fb:e5:48:80:88:78:96:e0:
63:c6:88:56:66:18:ac:bc:3c:4b:da:40:bd:a8:83:aa:33:b6:
69:87:95:91:99:65:45:77:0f:cb:58:a9:2a:b1:ae:74:ae:2b:
2c:df:d1:cd:96:55:d1:e3:a1:fd:15:5c:24:c0:bc:bf:56:bd:
a1:35:5d:89:69:ad:10:7f:d3:2f:c2:51:f7:70:9d:f5:67:d3:
b9:01:9f:ba:d6:be:1f:19:60:6b:a5:14:e3:85:78:dd:df:d3:
61:5a:8f:a1:0c:f9:33:c4:eb:99:d7:aa:2f:f1:79:8b:b2:b0:
0b:aa:53:ac:d6:d4:e5:16:34:99:12:ef:3a:4c:c2:51:c3:36:
9d:7e:3c:1d:c2:ef:2b:77:3c:81:a0:e4:67:13:1d:a2:59:c1:
b0:a7:5a:68:41:ad:37:8a:89:20:13:86:5f:c2:19:f5:0d:f1:
97:b9:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:44 2024 by rpki-client on console.sobornost.net