Manifest
$ rpki-client -vvf rsync.rp.ki/repo/aci/0/0C7610D96DBFCA260037F5025B14A97EC3D6FA11.mft
File: 0C7610D96DBFCA260037F5025B14A97EC3D6FA11.mft (raw, json)
Hash identifier: CmKKuTlDZs4f7xdAOdjNSI7lVlo3OG85p2pUnHAsgnw=
Subject key identifier: 28:BE:53:68:E7:94:80:92:01:A3:2B:53:9D:18:34:F4:8F:CC:3B:2A
Authority key identifier: 0C:76:10:D9:6D:BF:CA:26:00:37:F5:02:5B:14:A9:7E:C3:D6:FA:11
Certificate issuer: /CN=0c7610d96dbfca260037f5025b14a97ec3d6fa11
Certificate serial: 453831F05A437C1B2B18A376FC758C4B848C8763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHYQ2W2_yiYAN_UCWxSpfsPW-hE.cer
Subject info access: rsync://rsync.rp.ki/repo/aci/0/0C7610D96DBFCA260037F5025B14A97EC3D6FA11.mft
Manifest number: 0E
Signing time: Tue 12 Dec 2023 21:08:39 +0000
Manifest this update: Tue 12 Dec 2023 21:03:39 +0000
Manifest next update: Wed 13 Dec 2023 22:37:39 +0000
Files and hashes: 1: 3134362e31392e332e302f32342d3234203d3e203335343837.roa (hash: nnc6RKSKTFxbRSS0zGeBQeBzGuHZqh7UYL6i44rMWEI=)
2: 326131323a313730313a3a2f33322d3438203d3e203335343837.roa (hash: PhL0RsHIXj3EIjtmCFVwycBSzCv3fZCrrmt1SSpE0Cs=)
3: 0C7610D96DBFCA260037F5025B14A97EC3D6FA11.crl (hash: mqns24iba0r1jU9jXbGZ012PLhB0Cul4+FMcMxr25hc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:38:31:f0:5a:43:7c:1b:2b:18:a3:76:fc:75:8c:4b:84:8c:87:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7610d96dbfca260037f5025b14a97ec3d6fa11
Validity
Not Before: Dec 12 21:03:39 2023 GMT
Not After : Dec 13 22:37:39 2023 GMT
Subject: CN=28BE5368E794809201A32B539D1834F48FCC3B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:b1:1d:bd:c9:79:b3:49:cf:71:35:28:a1:
0b:51:fa:05:ba:02:c3:3b:16:24:dd:02:54:37:ac:
ac:14:60:72:32:ff:fe:23:c4:69:96:85:75:d0:13:
3f:71:8e:c3:0c:71:ad:a2:c1:31:8f:28:ad:e1:4f:
dd:80:43:f6:2f:26:8c:48:5a:be:e1:12:2c:2b:2d:
8e:26:91:1f:25:d0:01:31:25:82:84:55:a2:2a:6f:
93:4c:48:29:13:cc:07:6c:21:c4:63:ee:f0:13:21:
22:5d:0d:7f:0e:e2:9a:fa:e8:3e:38:14:c8:61:79:
57:67:93:50:31:9f:07:c6:51:a9:88:8e:97:22:34:
8b:b8:12:55:b9:cd:4b:af:c2:a3:c8:6e:51:46:ed:
84:13:f1:c6:36:59:f7:9d:42:1f:58:e8:d0:14:9b:
d4:34:db:dd:eb:a6:7e:3a:a1:d4:44:55:bf:45:9c:
0f:79:c1:14:30:08:a9:5e:5a:f9:08:30:07:12:1f:
c4:e3:a9:b9:d0:72:46:fb:e5:fc:9d:6a:1d:16:05:
af:47:ed:c4:bd:92:51:1b:22:9b:d0:c3:bf:8b:13:
11:c1:b6:ba:e2:08:7f:e3:c4:63:e1:9d:86:99:86:
c1:78:67:d9:95:47:80:1f:3e:8d:a4:8b:95:2a:94:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:53:68:E7:94:80:92:01:A3:2B:53:9D:18:34:F4:8F:CC:3B:2A
X509v3 Authority Key Identifier:
keyid:0C:76:10:D9:6D:BF:CA:26:00:37:F5:02:5B:14:A9:7E:C3:D6:FA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/aci/0/0C7610D96DBFCA260037F5025B14A97EC3D6FA11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHYQ2W2_yiYAN_UCWxSpfsPW-hE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/aci/0/0C7610D96DBFCA260037F5025B14A97EC3D6FA11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e8:2a:9b:66:13:7d:b3:54:13:95:e3:51:1f:d1:c7:ea:e4:
68:b4:05:60:36:64:5c:61:8b:33:61:12:3f:88:75:b9:ec:68:
3b:46:26:b2:65:9f:42:f1:3e:ea:51:e6:82:02:43:4b:f8:29:
23:5c:e1:2b:9d:f9:e5:fb:32:29:ee:37:81:20:9b:a6:fa:32:
05:43:6f:77:e3:04:6f:0b:03:35:ee:40:a7:cd:a5:3f:a0:39:
cc:96:7f:89:03:75:2e:ba:65:01:0d:8a:8e:7a:16:6c:f0:9c:
7f:64:d1:ee:03:40:44:0c:ed:6a:f3:a9:87:bb:7d:2a:ac:6e:
42:9b:7f:f5:8e:cb:e7:76:18:2b:a6:24:87:fa:a9:42:67:b5:
aa:2d:5e:27:bf:21:e7:db:67:f3:52:56:f1:f0:0a:70:ae:db:
ec:03:7e:00:d6:22:fd:68:94:54:15:14:dc:28:21:94:e4:d5:
ed:79:db:5c:23:2c:48:12:61:54:29:a1:17:04:10:c0:6c:5c:
ab:5c:d5:5d:c5:63:b9:16:2e:da:36:fa:74:33:53:cd:1e:08:
42:a3:73:6e:5c:da:88:76:8a:07:4a:fa:6c:08:ec:66:e4:47:
ef:e3:21:7f:dc:46:0c:55:14:17:c5:43:a4:59:a2:47:f3:49:
56:21:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:36:19 2025 by rpki-client