Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: Cm8uN4wz1RetbNGY5sqH3bvOLJawoyGNipn/aJOivw0=
Subject key identifier: 46:6F:C9:AD:5A:B1:54:B6:48:2E:71:74:39:2E:5C:54:93:A5:7C:8A
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 0194BC3C6AFD7910621C30B082EB4102680A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: gbkCGezbLeYE3X5AEBGsiF1exqizRD9KhcwxpOW8bQM=)
2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6a:fd:79:10:62:1c:30:b0:82:eb:41:02:68:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=466fc9ad5ab154b6482e7174392e5c5493a57c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:a2:5c:47:26:fd:c3:2c:09:88:10:3b:99:
15:14:b4:20:35:83:46:7c:5f:67:53:9d:75:4a:25:
fe:de:a3:a7:49:e2:61:fa:6a:0a:68:c7:6e:9c:96:
0a:8d:3c:39:2a:b6:4d:29:9e:94:31:6a:1d:48:58:
8c:51:04:9a:a4:8f:5b:95:93:70:99:8c:2a:95:3d:
ad:b6:61:72:09:4d:8f:25:70:ea:8e:49:85:c7:43:
bc:16:09:25:02:b8:1e:c3:b2:ab:81:a0:76:ec:7e:
25:22:f1:df:3d:c1:da:a2:6d:d3:84:83:fe:c0:df:
b0:7b:f9:a2:98:fd:8f:78:dd:e9:6a:93:fc:4b:58:
f7:db:8f:22:51:a7:88:4f:f7:7d:27:61:4c:6b:87:
c9:5e:81:da:dd:77:dd:bc:b7:14:bc:0e:21:62:fe:
ef:21:f0:cc:9f:14:ff:82:fc:bb:32:e4:28:61:76:
d3:c1:39:b7:a5:67:f1:78:c5:f0:54:63:52:c9:2a:
c3:7d:49:b9:41:fd:08:26:01:d4:c0:fe:b2:e5:17:
75:8c:24:d7:60:64:96:54:d1:29:df:05:58:24:19:
ad:b0:55:54:d8:69:ce:5a:6a:40:68:21:aa:8e:14:
83:b2:5d:4a:b8:0c:e3:19:5e:1c:a0:21:4c:0b:24:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6F:C9:AD:5A:B1:54:B6:48:2E:71:74:39:2E:5C:54:93:A5:7C:8A
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dc:e6:df:b3:4d:ef:be:3d:16:ad:8f:54:cc:3b:7f:f2:77:
32:a5:77:27:ad:dc:6d:ea:37:24:7f:35:74:0b:df:ec:fb:75:
ed:52:3d:a2:40:69:29:80:f9:50:84:ec:f3:71:29:70:7a:62:
08:56:70:c9:28:38:5e:dd:90:db:da:43:78:6f:2b:7a:d4:50:
fc:1d:cc:88:4f:81:6a:30:26:09:f0:a4:8c:86:7c:44:07:53:
00:3b:61:bc:87:98:0b:0c:45:58:22:c9:05:a3:a5:92:13:3c:
19:5f:8f:da:53:d2:1a:12:7d:44:b9:2a:4a:ac:fa:4f:96:19:
47:f8:6b:5a:a1:a3:7a:71:e5:a3:77:7a:9a:3d:16:8d:4b:ff:
0b:84:b8:d6:1f:04:1e:25:91:f8:1f:8b:8c:a2:a8:03:f2:f4:
15:a5:aa:cb:3c:01:89:20:de:eb:9a:12:e3:fd:1f:a6:ab:06:
c1:a2:ed:64:5f:e9:5a:99:0b:34:6b:d6:ae:ab:4f:1a:65:32:
df:82:0c:5b:9f:da:75:57:a5:9f:3e:f2:cc:17:b2:ae:4a:cd:
8f:61:9f:fb:3f:69:76:ab:d4:0b:d7:72:8a:d0:c3:b1:00:26:
b1:0e:de:81:f0:fc:f9:34:2b:e8:3b:49:c6:5f:e1:20:95:1f:
1b:7c:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:23 2025 by rpki-client