Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: 0qjmm0t/mOsWyaSjBRBejd6NulP6DXDGUB/WPrcuBHI=
Subject key identifier: A9:6E:3A:E0:8D:EB:82:E6:AB:59:3B:E6:8F:DE:7A:DF:3D:18:3E:7D
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 0194BC04D1D632C64D7EA85A61C477DB3C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0859
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: HJG2LfZbcdQILd5mjrG6JouJjB8.roa (hash: AJsKTbmetLnV+AkJjtEMj7IQPl7myVO7TWx6kpWmD6s=)
2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: 6oOsjNYP7rlO9ue65JGIsTN/VWbuWk77+eT9MEJS9ZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d1:d6:32:c6:4d:7e:a8:5a:61:c4:77:db:3c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=a96e3ae08deb82e6ab593be68fde7adf3d183e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:19:c4:88:c1:e8:b4:6a:6c:b5:3a:97:15:
ad:33:af:1e:35:4f:33:31:e6:bc:1f:bd:b6:be:71:
ba:29:44:0a:ad:60:f2:97:8d:ea:c5:26:50:10:80:
4e:05:77:fd:87:db:48:dd:42:7b:81:d2:56:be:3d:
7b:8d:7e:5d:ff:02:ca:96:2c:e3:bb:ac:a3:c0:91:
83:29:b2:ea:40:96:14:f4:50:b1:5e:73:ad:f8:07:
11:be:a5:47:48:a6:4e:e5:b5:08:87:4a:95:c9:03:
13:d4:b9:05:0e:91:de:8a:41:5d:63:cc:47:c6:0c:
c8:7b:df:76:1d:4a:af:26:85:46:d9:28:bd:26:a7:
6d:aa:02:e4:2c:d9:95:bb:fd:ce:8a:7b:b0:43:3e:
46:79:b3:a9:88:df:3b:14:cb:ba:3b:ff:2c:63:1e:
84:6c:e6:14:b4:13:87:cd:92:28:5f:ed:45:20:a8:
c1:1d:eb:1e:68:eb:f8:95:3c:37:af:fd:08:e9:68:
60:0f:71:5d:17:b6:da:fb:a4:0f:e1:77:79:97:5f:
b0:2f:ed:a9:2a:11:53:28:6d:cb:4c:60:86:2a:8f:
0d:bb:c8:e5:f4:26:49:4e:5b:02:40:57:74:36:de:
43:04:3f:ed:39:70:ec:db:7c:a3:ca:d3:c2:9f:b4:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:3A:E0:8D:EB:82:E6:AB:59:3B:E6:8F:DE:7A:DF:3D:18:3E:7D
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7c:88:7d:87:35:4e:82:1a:56:81:da:7e:c1:de:c2:22:d7:
45:7a:bd:5d:ba:f5:21:dd:8d:be:ca:f1:e8:7d:94:79:9c:20:
e1:f5:f2:1c:fa:82:da:22:40:b2:1c:02:8d:44:48:9b:02:06:
7c:77:88:d1:54:bd:74:86:8b:a3:55:a6:52:da:6e:d1:ad:25:
5e:93:6b:31:97:e5:30:14:95:24:4a:90:53:44:03:47:60:84:
d7:5b:fd:bd:64:b5:31:96:83:3e:6b:ae:0b:5d:3b:35:40:eb:
ee:b5:26:e6:e6:cf:80:aa:82:38:2b:92:2e:29:26:17:83:e2:
5c:5f:30:7a:22:6b:72:1e:60:50:17:8e:71:7e:b6:21:a7:2e:
32:08:90:86:bc:22:34:a9:53:21:4b:aa:f6:ee:12:0f:8b:a6:
ec:ce:9b:d5:b4:97:98:04:de:7f:ba:a6:c9:a9:a4:01:f7:49:
5f:29:a3:37:a5:11:79:97:57:e3:2c:62:48:d5:26:44:3f:80:
59:83:6a:06:e9:bb:56:ab:3e:ed:7b:c1:7e:fa:fb:70:eb:a3:
3b:06:81:84:84:d6:d6:4d:69:b4:05:f0:8a:d9:45:d1:4d:63:
dc:1a:ae:d5:3e:24:b6:3b:2d:f4:2a:dc:eb:66:fe:8d:18:c6:
2a:49:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:35 2025 by rpki-client