Manifest
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json)
Hash identifier: uVOfzDCboc0BXMSr6EGllTluGknRvW7UVK08Vn6jXQY=
Subject key identifier: 5E:2A:02:DE:FC:68:8D:F8:0E:82:5C:10:96:77:8E:B9:2F:63:09:92
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial: 3963F37D0B9250A6860098067C40930B195B78D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
Manifest number: 0390
Signing time: Sat 29 Mar 2025 05:17:43 +0000
Manifest this update: Sat 29 Mar 2025 05:12:43 +0000
Manifest next update: Sun 30 Mar 2025 09:01:43 +0000
Files and hashes: 1: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: MPqJyll3X1HxCMRLCsoBaTXciN+5o793K5Xfbsa9PEI=)
2: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=)
3: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=)
4: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=)
5: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=)
6: 3130342e33372e34322e302f32332d3234203d3e20393435.roa (hash: 15ZkZ3TfYDgn/2NuUygkkJxkxZnGlbkkKGi5Yto7PDI=)
7: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:63:f3:7d:0b:92:50:a6:86:00:98:06:7c:40:93:0b:19:5b:78:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Validity
Not Before: Mar 29 05:12:43 2025 GMT
Not After : Mar 30 09:01:43 2025 GMT
Subject: CN=5E2A02DEFC688DF80E825C1096778EB92F630992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:97:a6:4c:e6:4c:a1:fe:bb:bf:c7:20:48:
6e:1b:f9:a3:c1:7c:e7:1e:e4:ce:77:fb:e0:ff:5a:
bc:da:ac:cc:90:9f:8c:56:70:be:8d:8d:4d:a7:1e:
a9:f3:13:8a:f2:ac:26:f1:ca:7c:2a:05:d6:1f:2a:
89:b9:01:6f:09:a9:e9:9a:85:aa:98:81:5e:4c:c9:
ec:b6:33:c2:03:81:d0:7b:e4:d5:26:90:b7:e0:1f:
2e:ef:b5:a4:5c:3f:87:81:0c:5e:c1:d6:2e:f2:80:
f4:43:b7:4a:ae:4b:4a:92:a7:11:0a:9e:fa:e2:87:
e1:25:cf:13:7d:90:b8:86:31:76:58:0d:1b:4e:5f:
51:82:1f:d7:92:59:61:54:db:d8:45:4c:cb:61:a7:
94:62:f1:a8:de:37:ff:2d:66:c3:95:7f:8b:c8:fb:
87:6d:55:18:9c:bd:b6:49:ca:77:e5:66:7c:29:ee:
c1:9e:ee:9c:de:bc:2e:4e:ac:74:7c:d9:f1:00:e5:
70:28:18:2d:a8:05:8d:42:a3:10:ba:28:08:3a:60:
9c:ca:17:81:6f:f1:23:68:d6:9b:1f:cc:60:ad:4c:
fb:7f:99:6c:13:b1:2d:1d:1d:45:be:57:04:90:4f:
74:dc:16:5f:8c:2c:62:36:e3:0c:4b:61:a0:a1:39:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2A:02:DE:FC:68:8D:F8:0E:82:5C:10:96:77:8E:B9:2F:63:09:92
X509v3 Authority Key Identifier:
keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d2:4d:42:c4:19:09:aa:bc:45:5b:01:51:a7:45:f5:fd:61:
82:36:d7:6d:09:fe:0d:51:f8:8e:6c:77:82:21:0c:4a:34:bd:
e8:e1:d4:1f:62:66:37:70:0f:ba:51:b5:17:70:ab:4f:02:3b:
98:de:05:fc:3e:fe:46:5a:18:a5:a8:3b:55:45:1c:5d:8a:75:
31:62:14:e5:48:33:63:10:b4:9a:0b:59:fe:ce:06:82:6a:df:
1b:77:b4:d4:8a:04:f3:a1:e2:ea:4a:2a:38:87:b4:e1:72:35:
d6:4f:0f:1a:5a:19:82:36:8e:94:c6:fa:a1:15:a4:4b:e2:9d:
02:93:05:56:28:0f:54:ff:d1:b6:a4:0a:6e:a2:e2:72:59:54:
4d:fb:61:49:d3:2d:e2:14:9d:14:52:96:1d:20:2f:3d:5a:e8:
0c:90:b3:f3:aa:61:58:08:1a:3e:69:65:01:83:6d:23:af:77:
a2:0f:09:12:55:ba:a0:89:0d:fe:97:a5:90:91:c4:fa:6e:22:
2b:c0:eb:47:67:1b:27:30:1a:ce:b0:fd:91:be:cd:cf:8a:30:
f9:53:10:2f:8f:7c:c6:58:a5:bd:10:e6:20:c9:fb:d9:d9:9b:
ff:61:8b:87:e6:3b:40:ee:65:4d:04:e4:b6:e3:24:5b:2b:64:
73:9d:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:35:44 2025 by rpki-client