Manifest
$ rpki-client -vvf rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
File: 40C513034911811188EE6887BB01091E1FE7EE0D.mft (raw, json)
Hash identifier: 41aW3p6zqiqzKEMKNbckCaVoCMtgMgDkWe9zyBF8tfQ=
Subject key identifier: DC:BF:69:2E:80:40:CF:DA:FD:32:56:25:34:6E:F9:FF:3B:6C:A1:1F
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Certificate issuer: /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial: 6C75D06030CEA8746E7D5DE0D2BE767B2D6B718D
Authority info access: rsync://dev.tw/rpki/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access: rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
Manifest number: 0314
Signing time: Wed 20 Nov 2024 20:45:52 +0000
Manifest this update: Wed 20 Nov 2024 20:40:52 +0000
Manifest next update: Thu 21 Nov 2024 22:31:52 +0000
Files and hashes: 1: 326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa (hash: pt5SRwa4PkVcvU2eoTtkDqYnKLiWoThHLn5lNyt/eR0=)
2: 40C513034911811188EE6887BB01091E1FE7EE0D.crl (hash: iaz3IDanW4sdQazqLEOKhZnLOPCL1mzzcGo0s7isSSE=)
3: 326131323a646434363a316666663a3a2f34382d3438203d3e20323136313233.roa (hash: Z5zxT/NrxMnMkyEa5Bzu7aQMMFulEi4CY5wYm56L0Bk=)
4: 326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa (hash: 0dHaJ4qfvE2oLUQaYskr8kN9r8soA38zu6v8jF1r9PM=)
5: 326131323a646434363a316666653a3a2f34382d3438203d3e20313939323033.roa (hash: yOf1+ZpGQsm++ET35zkoK8noSVDhIj/i53G++jOrHMs=)
6: 326131323a646434363a316666653a3a2f34382d3438203d3e20313432303436.roa (hash: YTkC1TUWpWMW5EXn8uuASIaErr9AagQnuwtK2LkXJw0=)
7: 326131323a646434363a313030303a3a2f33362d3438203d3e20313531313838.roa (hash: hvb5Ot3aTm8WlXBs7WxHbXF1fqT02PIxZw93lY05zS4=)
8: 326131323a646434363a316666653a3a2f34382d3438203d3e20323135393933.roa (hash: CtpVlNeXSdrA8570M5mQF2LnqGXlSXt5c7AsP5l6pYY=)
9: 326131323a646434363a316666643a3a2f34382d3438203d3e20323135393334.roa (hash: Td8iC5CEwqqV1dohjoI/kG2vMcyAPsVvz4hRqWeM2qI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:75:d0:60:30:ce:a8:74:6e:7d:5d:e0:d2:be:76:7b:2d:6b:71:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Validity
Not Before: Nov 20 20:40:52 2024 GMT
Not After : Nov 21 22:31:52 2024 GMT
Subject: CN=DCBF692E8040CFDAFD325625346EF9FF3B6CA11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:aa:48:db:eb:10:10:70:66:67:93:e6:7d:
d9:ed:bf:7b:b6:18:8c:a1:5a:0a:04:a6:03:0c:00:
cf:e5:10:aa:2d:7a:f6:9b:02:7c:69:b5:22:c9:57:
e9:b9:d7:c0:c2:0a:15:83:d5:0c:9d:5d:72:af:71:
87:b2:bc:64:48:63:dd:26:07:9b:63:52:48:41:57:
b4:90:c4:2f:95:58:89:b2:8b:17:e4:36:a9:38:3c:
2a:e3:1b:ff:fc:c9:94:3d:07:a8:49:d5:61:06:66:
a9:dd:18:12:b9:29:96:c8:a6:9d:b2:38:dd:58:d0:
bb:53:28:8a:1f:c7:e2:56:57:6c:d6:68:78:69:30:
3a:4c:3f:7c:ac:3a:44:d1:4b:3a:ff:f0:3f:1d:fd:
43:a6:b1:70:9c:66:51:85:ac:fd:66:78:66:d7:f5:
46:fb:76:fb:c2:c0:c6:65:f8:1e:7b:c5:25:86:e8:
39:30:63:49:ca:60:67:8f:b7:ec:34:94:dd:95:2d:
43:81:d0:20:a1:36:7c:02:86:d1:28:c6:21:c6:64:
da:a6:f8:81:cf:1d:5e:ea:bb:ec:8a:2a:e2:5c:7d:
9f:75:c3:23:46:7e:b4:38:3f:3c:35:d7:7e:f0:e5:
75:b2:2c:ae:0b:a5:13:95:e7:e4:92:74:42:0f:31:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:69:2E:80:40:CF:DA:FD:32:56:25:34:6E:F9:FF:3B:6C:A1:1F
X509v3 Authority Key Identifier:
keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9f:de:63:26:af:03:4b:c4:2d:3d:c3:cb:ed:1d:89:3e:ff:
dd:97:1c:aa:a8:6a:13:1d:1a:b5:57:08:5b:d0:1c:2a:73:fa:
ae:56:34:9c:da:f7:db:dd:13:30:a8:e6:95:12:88:e9:0b:ff:
7d:f5:ea:32:1c:7f:29:55:45:d1:fd:33:41:71:93:96:03:26:
35:86:00:37:da:6a:27:30:7c:fa:04:9b:87:d2:20:cd:74:2b:
ee:50:ee:d3:19:d7:d1:79:1c:25:13:e6:fa:39:e0:9b:a2:ae:
21:07:b7:2c:d1:31:fc:ca:05:a1:ca:9e:22:81:41:4f:9c:4f:
a9:27:2a:1d:97:4e:98:33:03:c3:49:f1:96:2d:c1:c3:70:31:
09:fd:bd:f5:b0:ba:af:c7:08:a0:9a:d4:96:40:9e:85:84:be:
4a:38:85:82:0f:d6:72:64:29:89:86:fb:2e:1c:dd:7d:fe:5d:
3a:54:e0:a0:8c:0f:45:f2:ef:b6:cb:f6:7a:ac:e9:3e:89:dd:
b7:c7:bc:7b:cc:76:2a:b5:b8:88:9c:aa:55:20:d0:74:91:67:
f7:0d:1a:e0:30:fd:12:31:5a:6a:e9:a0:b6:bf:80:ab:81:e5:
33:16:47:57:05:36:ae:dd:1a:7b:d5:c1:38:b5:ab:fb:a7:c9:
00:a6:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:44 2024 by rpki-client on console.sobornost.net