Manifest
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.mft
File: 55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.mft (raw, json)
Hash identifier: f3i5kNwqNA8XdY8FTRHKlNqwk9FCB9pc4G5ecGruoEE=
Subject key identifier: 6D:05:4D:68:4C:B4:35:68:CD:B9:77:10:BE:C1:4C:1C:15:A9:67:2E
Authority key identifier: 55:BE:4A:89:26:76:3D:A0:C1:8A:34:3C:FC:FF:BD:FD:3C:9E:6D:AF
Certificate issuer: /CN=55be4a8926763da0c18a343cfcffbdfd3c9e6daf
Certificate serial: 2F8ED07A13DB266E6BB4F56BDE74977C8C627416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb5KiSZ2PaDBijQ8_P-9_Tyeba8.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.mft
Manifest number: 21
Signing time: Sun 02 Feb 2025 01:26:24 +0000
Manifest this update: Sun 02 Feb 2025 01:21:24 +0000
Manifest next update: Mon 03 Feb 2025 03:15:24 +0000
Files and hashes: 1: AS945.asa (hash: mJGVpJBSx1LOVWBUAXhETAqBCOLDjn9R6XiTZ/o+U7M=)
2: 55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.crl (hash: YZ28u87jwUm4vJgmRw1Iw1DJ1ggwUJ287Z1+U9akjvw=)
Validation: OK
Signature path: rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.crl
rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vb5KiSZ2PaDBijQ8_P-9_Tyeba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8e:d0:7a:13:db:26:6e:6b:b4:f5:6b:de:74:97:7c:8c:62:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55be4a8926763da0c18a343cfcffbdfd3c9e6daf
Validity
Not Before: Feb 2 01:21:24 2025 GMT
Not After : Feb 3 03:15:24 2025 GMT
Subject: CN=6D054D684CB43568CDB97710BEC14C1C15A9672E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:e4:92:27:58:0b:b5:d1:3a:4f:7a:d0:36:
9c:36:52:b0:fc:91:29:5c:87:d6:dc:04:0d:f2:1d:
e1:36:12:97:aa:31:33:e7:56:9a:73:20:0a:d6:f1:
68:65:f3:79:62:30:bd:ad:ce:a2:4a:47:75:92:35:
03:82:df:ee:e4:7b:7e:a9:8b:88:1c:49:7f:13:5a:
72:44:9a:c8:fc:fd:5c:bb:be:99:23:89:8c:20:45:
52:e0:21:48:12:88:ee:02:99:f9:a5:d7:5b:b1:57:
75:05:12:33:0e:bb:16:ea:bf:84:4c:a7:f2:4a:64:
58:60:16:ae:ab:c8:45:f5:36:3c:34:56:b7:5c:d4:
6c:fb:74:0d:46:da:13:1d:f8:69:96:15:d6:38:c6:
64:f5:a0:11:a3:89:48:8b:80:97:23:5b:e2:05:1a:
6b:e7:b9:f8:f9:da:66:3a:49:6a:55:84:6b:29:9c:
d3:36:d2:4c:05:ea:4e:02:61:95:c1:8a:c8:29:a6:
b3:03:fd:0b:e5:16:7e:78:e4:d2:1c:be:2d:79:9a:
6b:5f:a3:82:62:56:24:bd:51:05:8d:82:33:c1:1a:
55:11:ab:df:0d:ed:6f:02:12:fe:5b:8c:b8:60:5d:
36:fd:f5:4c:d1:f0:62:22:69:3d:3a:6a:69:f3:b6:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:4D:68:4C:B4:35:68:CD:B9:77:10:BE:C1:4C:1C:15:A9:67:2E
X509v3 Authority Key Identifier:
keyid:55:BE:4A:89:26:76:3D:A0:C1:8A:34:3C:FC:FF:BD:FD:3C:9E:6D:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb5KiSZ2PaDBijQ8_P-9_Tyeba8.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:38:e3:44:d7:3f:75:ca:d8:4a:6a:a0:87:85:09:17:1e:8e:
a5:b5:1a:1a:1d:2f:de:3d:3c:22:02:35:fc:74:53:0e:b7:b5:
59:a4:da:d0:2d:2b:d0:4f:e9:56:18:4c:da:12:ec:88:52:85:
bc:e6:39:38:a4:c4:ef:5b:11:2e:03:c3:7a:0f:7b:0b:17:3c:
a4:7e:06:15:23:7e:d5:0d:fe:db:ec:9a:52:07:99:c1:0d:ef:
a2:8e:41:10:db:06:6e:b6:9e:a9:45:4a:4c:09:8e:73:47:ad:
ef:5c:02:97:b4:bc:b7:80:75:ea:26:09:19:24:b3:32:c4:92:
29:45:49:28:8d:70:a5:5a:35:43:9b:9e:00:be:47:64:1c:26:
4a:71:84:74:8a:39:2c:39:19:ed:ce:e5:e8:9b:d0:85:67:66:
99:91:fb:0a:68:08:92:12:92:48:c7:11:73:28:b7:46:d7:b1:
49:f7:be:ed:8a:86:be:2d:ba:9f:93:bd:e4:02:08:9a:15:84:
bc:27:cb:c7:ec:d0:b9:57:a1:21:fd:41:58:0c:d3:ee:85:1a:
be:dc:12:7e:e4:b5:bd:44:a0:27:1f:6c:ba:3f:67:4b:cf:f5:
87:6b:b3:6d:38:e3:eb:92:43:85:6d:68:4a:2f:62:c1:ce:b4:
45:a6:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:42 2025 by rpki-client