Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: e26IqAuVqQX9DH6IZCQ0vJqvhRsSTX0Lb/WSrxH0mfY=
Subject key identifier: 6A:45:72:E9:43:70:DA:8A:3D:55:74:F3:CF:96:3A:2C:30:E6:71:6D
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 0195E19021714FEBDFA09F440D0B51AA35FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 06F3
Signing time: Sat 29 Mar 2025 11:01:13 +0000
Manifest this update: Sat 29 Mar 2025 11:01:13 +0000
Manifest next update: Sun 30 Mar 2025 11:01:13 +0000
Files and hashes: 1: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
2: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
3: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: 3RulkvvqeCzmVmT7qscltzvlclNXRqUNw3/iXbK0kxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:21:71:4f:eb:df:a0:9f:44:0d:0b:51:aa:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Mar 29 11:01:13 2025 GMT
Not After : Mar 30 11:01:13 2025 GMT
Subject: CN=6a4572e94370da8a3d5574f3cf963a2c30e6716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:25:ca:c9:66:9c:d2:c5:3d:1f:bd:30:af:
95:d3:4a:9f:c9:df:d8:82:3d:b0:a9:fd:59:77:78:
31:f0:b8:e7:d5:3e:78:e5:8b:75:7d:49:a5:7b:8c:
05:7e:f5:eb:ec:dc:9a:98:2f:74:9e:f7:eb:fc:9a:
71:3d:78:2c:fb:5f:ab:ad:2f:7a:0a:9f:fe:77:d6:
00:61:86:6f:ab:13:9d:b4:58:a9:f4:54:ed:19:1d:
fd:15:21:17:5c:18:ed:8c:17:b7:59:af:7a:5d:b4:
9e:2f:c5:f9:1b:0e:b0:cb:c8:7a:9a:47:0e:e6:95:
7e:2a:73:a3:80:7d:b0:da:bc:7b:3a:50:c2:1a:be:
d5:cf:e9:49:3d:94:86:cd:0b:ca:65:9a:fc:3c:9b:
46:c4:6d:f4:ba:5f:a0:8b:c8:e3:1e:15:4e:e6:4a:
a3:e7:77:a4:27:34:22:88:a1:c5:c4:59:3b:e6:9f:
d6:6b:41:f6:43:d6:70:7a:9e:c1:51:f3:69:b6:12:
dc:3a:1a:9d:ff:d9:c0:36:4e:29:9b:62:0b:88:d0:
da:af:6c:82:e7:13:af:ae:6e:95:3f:37:2b:ee:13:
7b:06:12:b8:f1:1a:b5:47:3f:79:98:31:a2:90:44:
0d:62:94:06:3a:04:2c:43:f8:b9:ee:71:7a:3f:c1:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:72:E9:43:70:DA:8A:3D:55:74:F3:CF:96:3A:2C:30:E6:71:6D
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2b:80:17:a4:6c:c2:7b:d2:2a:7e:75:91:b3:f9:b0:88:02:
93:6a:20:d2:1c:54:25:6b:71:27:32:e1:47:25:47:5b:bd:42:
93:ec:79:64:c7:30:32:79:92:2e:08:97:ca:33:81:e1:fe:5f:
09:2c:88:4a:94:02:3d:dc:93:f1:a2:5c:4b:39:e1:2f:4f:e2:
13:92:57:2c:67:da:32:55:af:68:b7:1d:f2:73:8d:93:9d:44:
e6:cc:ee:b8:00:1e:df:5e:ec:a2:11:7d:e5:5a:11:71:70:4e:
5a:3d:7c:10:06:9e:4a:15:31:3a:bd:8d:2c:4f:15:92:00:92:
58:d9:2f:c4:f3:13:1f:8e:29:3a:7c:89:19:c2:03:52:44:ef:
14:df:70:cc:d2:a7:5a:3f:a9:ec:0c:81:04:a4:75:e4:94:42:
b3:70:25:a5:e2:a9:3a:f0:2c:54:81:fc:89:47:e8:46:38:ba:
e6:51:01:be:cc:3d:ed:ba:f6:f9:34:37:77:5a:e5:88:d1:39:
2e:b4:f3:2e:19:79:da:23:14:c2:62:81:8d:93:5b:b7:d0:10:
ab:7c:83:f1:35:df:4e:92:2a:e9:d1:04:d3:d7:3e:f1:f3:04:
0d:09:24:17:f0:22:6a:2b:34:27:6d:db:7a:b3:12:d7:8c:dd:
4b:a6:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:23 2025 by rpki-client