Manifest
$ rpki-client -vvf rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft
File: C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft (raw, json)
Hash identifier: i6qvRTszYOT3QFwOmhlTVg+Sw58sP9jpS5pICxAhdDA=
Subject key identifier: 03:73:BD:0C:63:18:78:D8:D0:05:2B:59:0F:23:25:03:EE:1F:15:83
Authority key identifier: C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27
Certificate issuer: /CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
Certificate serial: 1B97525430C06E371FD8C44E045E5B37E091E172
Authority info access: rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer
Subject info access: rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft
Manifest number: 7B
Signing time: Fri 12 Apr 2024 15:19:35 +0000
Manifest this update: Fri 12 Apr 2024 15:14:35 +0000
Manifest next update: Sat 13 Apr 2024 19:06:35 +0000
Files and hashes: 1: 326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa (hash: f2Dpgn+cOfDJOZkuhxyBTGsVhdQ+2UCAbGPONcBc5uY=)
2: C97E7DD81B07D53E3C076F9D1810810F6E2DC227.crl (hash: vevIMMlTHBMc9klXTYGP7TD6IE+BPG9REHl6hG9yx9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:97:52:54:30:c0:6e:37:1f:d8:c4:4e:04:5e:5b:37:e0:91:e1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
Validity
Not Before: Apr 12 15:14:35 2024 GMT
Not After : Apr 13 19:06:35 2024 GMT
Subject: CN=0373BD0C631878D8D0052B590F232503EE1F1583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:53:14:80:af:d5:c9:7e:1c:de:d6:1d:29:
77:46:df:41:32:12:55:b2:73:3f:c9:b0:e4:8f:49:
de:35:88:79:f5:1e:0f:b3:f2:5f:a4:16:ae:a8:7b:
bc:dd:35:94:64:a3:03:c4:8c:87:82:f9:6a:2f:f1:
45:12:ff:5d:ee:bf:ae:57:ea:23:f1:34:dc:c0:2b:
61:8c:60:e4:0f:cd:13:ff:d8:56:ea:c1:6a:a6:ee:
fb:a6:b6:ca:28:84:08:97:26:72:e9:fd:19:81:bc:
11:bd:29:98:ec:a8:c3:8d:06:63:b8:46:19:b0:3d:
cc:2b:5d:56:3a:56:50:1e:08:75:05:9d:96:f4:61:
38:e8:b9:ec:6a:6b:80:32:a7:28:ed:4b:c1:47:08:
82:3a:48:41:9e:aa:eb:c7:83:0c:05:08:bc:1c:95:
8f:05:a9:ef:44:d5:81:fa:8d:8a:c5:10:14:26:ac:
65:9a:75:04:6f:92:8d:77:ca:bc:6f:fd:9e:f4:b0:
1e:be:9b:cd:45:67:2e:56:48:91:ee:05:d3:f5:40:
a8:d6:5a:19:95:29:5e:6d:89:90:8e:c4:1c:74:2a:
b6:6a:d3:f2:48:c6:47:f3:14:c7:58:c3:c1:92:3c:
08:94:c6:e5:e1:ee:fb:ce:56:86:80:e5:0c:85:2e:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:BD:0C:63:18:78:D8:D0:05:2B:59:0F:23:25:03:EE:1F:15:83
X509v3 Authority Key Identifier:
keyid:C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:59:1f:e4:ed:a0:9e:e9:ab:25:25:d0:cd:f7:a0:c4:15:fe:
e0:cb:33:21:07:41:42:b2:f5:c8:b7:18:f1:3a:0f:be:e2:12:
3d:75:5e:c7:6f:67:60:9a:be:5e:7b:c3:1b:66:39:6d:d7:17:
71:5d:97:a9:72:41:ff:ae:0e:da:53:14:2a:68:9f:b2:ed:c3:
e2:1c:01:82:f4:0f:d8:88:17:92:ac:ae:48:9e:85:3f:e7:e2:
6d:ba:33:7d:56:e8:ca:8e:1b:ea:d8:4e:62:a1:00:ff:53:49:
ea:25:f4:be:c8:77:21:16:01:1d:48:20:b8:af:04:a2:b4:24:
c6:0e:76:1c:97:b2:85:10:52:74:24:07:f0:1b:cd:89:ae:e4:
10:8e:4a:46:3c:6a:e2:1c:43:3c:79:b3:0c:92:0b:9b:42:f7:
71:52:0a:bc:58:95:0a:29:80:82:0e:97:c2:ef:08:55:93:75:
97:e6:1c:7e:07:f2:a3:f2:2d:ba:b9:9c:8e:22:e2:5c:e4:e0:
72:9e:0f:50:96:5c:28:37:9c:7a:f8:8a:e8:4f:59:bb:58:f7:
1d:a5:93:10:86:0a:c1:2e:83:d4:f0:65:ef:6f:0c:84:31:08:
9b:54:02:d7:09:54:5c:b4:df:a2:3c:af:3f:36:35:6f:77:b9:
28:fb:08:5e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUG5dSVDDAbjcf2MROBF5bN+CR4XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3RTdERDgxQjA3RDUzRTNDMDc2RjlEMTgxMDgxMEY2
RTJEQzIyNzAeFw0yNDA0MTIxNTE0MzVaFw0yNDA0MTMxOTA2MzVaMDMxMTAvBgNV
BAMTKDAzNzNCRDBDNjMxODc4RDhEMDA1MkI1OTBGMjMyNTAzRUUxRjE1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxlMUgK/VyX4c3tYdKXdG30Ey
ElWycz/JsOSPSd41iHn1Hg+z8l+kFq6oe7zdNZRkowPEjIeC+Wov8UUS/13uv65X
6iPxNNzAK2GMYOQPzRP/2FbqwWqm7vumtsoohAiXJnLp/RmBvBG9KZjsqMONBmO4
RhmwPcwrXVY6VlAeCHUFnZb0YTjouexqa4AypyjtS8FHCII6SEGequvHgwwFCLwc
lY8Fqe9E1YH6jYrFEBQmrGWadQRvko13yrxv/Z70sB6+m81FZy5WSJHuBdP1QKjW
WhmVKV5tiZCOxBx0KrZq0/JIxkfzFMdYw8GSPAiUxuXh7vvOVoaA5QyFLvX3AgMB
AAGjggH4MIIB9DAdBgNVHQ4EFgQUA3O9DGMYeNjQBStZDyMlA+4fFYMwHwYDVR0j
BBgwFoAUyX592BsH1T48B2+dGBCBD24twicwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZXRpZmFjZS5uZXQvcmVwby9BcXVh
SG9zdC8wL0M5N0U3REQ4MUIwN0Q1M0UzQzA3NkY5RDE4MTA4MTBGNkUyREMyMjcu
Y3JsMHEGCCsGAQUFBwEBBGUwYzBhBggrBgEFBQcwAoZVcnN5bmM6Ly9ycGtpLm5l
dGlmYWNlLm5ldC9yZXBvL0Fwcmljb3QvMS9DOTdFN0REODFCMDdENTNFM0MwNzZG
OUQxODEwODEwRjZFMkRDMjI3LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUH
MAuGVnJzeW5jOi8vcnBraS5uZXRpZmFjZS5uZXQvcmVwby9BcXVhSG9zdC8wL0M5
N0U3REQ4MUIwN0Q1M0UzQzA3NkY5RDE4MTA4MTBGNkUyREMyMjcubWZ0MBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC7WR/k7aCe6aslJdDN96DEFf7gyzMhB0FCsvXItxjxOg++4hI9dV7Hb2dgmr5e
e8MbZjlt1xdxXZepckH/rg7aUxQqaJ+y7cPiHAGC9A/YiBeSrK5InoU/5+JtujN9
VujKjhvq2E5ioQD/U0nqJfS+yHchFgEdSCC4rwSitCTGDnYcl7KFEFJ0JAfwG82J
ruQQjkpGPGriHEM8ebMMkgubQvdxUgq8WJUKKYCCDpfC7whVk3WX5hx+B/Kj8i26
uZyOIuJc5OByng9QllwoN5x6+IroT1m7WPcdpZMQhgrBLoPU8GXvbwyEMQibVALX
CVRctN+iPK8/NjVvd7ko+whe
-----END CERTIFICATE-----
Generated at Sat Apr 13 17:22:19 2024 by rpki-client on console.sobornost.net