Manifest
$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json)
Hash identifier: mhD49Q2Ie9xQVxQ3CaBCtFXgE5APB5WQ9xHy9+3XrnU=
Subject key identifier: 5D:B5:02:F9:B1:CC:16:24:4A:D8:66:0C:7F:24:07:7B:74:02:66:2F
Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Certificate serial: 08559E46B2235A9230D3E31E5EB60BE2DBB8EEB2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
Manifest number: 0299
Signing time: Tue 15 Apr 2025 22:19:13 +0000
Manifest this update: Tue 15 Apr 2025 22:14:13 +0000
Manifest next update: Wed 16 Apr 2025 23:33:13 +0000
Files and hashes: 1: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: oDa+WbIdFOIJ9VdscmQDxGHh9JZNJCbUhgXFPTk7dxI=)
2: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Y/3rmgU/sldh4Hfp9RHavnPp2jy6RYQXAdoezGv2CjQ=)
3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:55:9e:46:b2:23:5a:92:30:d3:e3:1e:5e:b6:0b:e2:db:b8:ee:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Validity
Not Before: Apr 15 22:14:13 2025 GMT
Not After : Apr 16 23:33:13 2025 GMT
Subject: CN=5DB502F9B1CC16244AD8660C7F24077B7402662F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:25:19:15:a9:ef:fe:a1:e7:78:a8:3c:30:
55:b6:b5:4e:8d:f9:71:85:52:05:8e:3a:0a:b6:6c:
1f:e6:9f:65:46:e6:79:18:05:32:46:79:45:52:2b:
d2:fb:dc:b8:92:8b:fa:16:f5:50:78:de:2d:a2:be:
c4:f8:c7:2a:46:1d:07:4d:87:d1:9d:cf:98:37:1e:
c2:7e:e4:04:d5:a7:c0:c3:f3:48:36:3d:a9:d8:ed:
ae:cd:07:68:1a:97:b8:e6:97:00:d8:aa:f5:ac:14:
90:4c:e3:c0:c4:0e:94:b9:01:5a:4f:f3:46:0a:ec:
d5:e0:43:fd:53:52:93:4b:ff:4e:94:9f:69:a5:f4:
e4:7c:f4:9a:7c:a8:e4:d2:3e:fc:ee:2b:63:3a:71:
01:8c:63:3a:89:7b:0a:70:b8:d0:c2:1c:01:21:d0:
5c:15:d6:c6:9a:c4:76:ec:e3:0d:22:41:c6:f8:a1:
00:bc:fd:5f:42:8a:2b:bb:26:52:e4:f6:37:1a:ee:
fe:ac:49:eb:77:b7:85:ca:cf:62:ad:17:bd:86:70:
f2:fb:db:66:ed:05:67:e4:ee:4b:6e:76:b3:58:ef:
af:21:4e:d6:d3:16:d5:16:97:76:f5:d7:80:1f:b3:
fd:57:6c:ea:af:a6:56:f9:6d:ab:7d:ce:38:49:45:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:02:F9:B1:CC:16:24:4A:D8:66:0C:7F:24:07:7B:74:02:66:2F
X509v3 Authority Key Identifier:
keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:58:06:0e:b4:84:29:72:f1:b3:f4:47:97:02:62:ee:14:9d:
1e:a9:e1:e0:c6:b8:de:88:ee:66:a8:23:89:70:90:8d:97:94:
6a:0d:51:a1:03:20:32:b6:57:94:e5:dc:79:9b:b2:3b:84:f2:
a9:c9:61:d7:b4:02:5c:56:ac:cd:c1:07:38:f0:6e:98:c6:63:
f4:33:21:3e:78:70:d1:b8:4c:08:0d:6b:a5:7e:92:d2:86:e8:
e9:34:60:ad:e9:6d:e7:b2:1a:5a:ac:02:a8:bd:d8:43:f9:41:
61:04:94:c2:ad:d7:f9:96:0e:d2:54:60:22:a2:c7:a3:84:32:
cd:ca:a2:6f:c9:62:46:86:53:7f:a4:36:fd:5b:94:ab:f7:58:
2d:48:43:d6:71:1e:f8:5f:35:6b:d9:cc:69:1c:18:5c:88:33:
a2:de:bf:5a:d7:33:ec:71:c3:a6:b0:eb:a1:20:db:e9:0b:82:
ad:da:d7:39:b3:ed:99:7d:7e:5c:69:62:c4:df:12:9e:9d:0f:
e3:8f:a9:9c:c8:71:bc:2f:c7:45:26:7c:0b:66:25:9a:98:28:
4e:56:93:36:6d:4c:3d:4d:3d:40:cc:c4:b8:60:a9:f2:1f:53:
ee:fe:ad:3d:42:bb:b5:c9:98:5c:4e:17:7a:c9:8b:64:8d:3a:
26:6b:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:06 2025 by rpki-client on console.sobornost.net