Manifest
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/4/D8901AFF4A34F68701BAA98545C2D390D7A4463A.mft
File: D8901AFF4A34F68701BAA98545C2D390D7A4463A.mft (raw, json)
Hash identifier: fT6fcxAnhVz2nUK8f68FvYj8pWznr4WiFI8SEnUhi6U=
Subject key identifier: 75:24:46:D1:37:7D:85:67:8A:06:15:81:E8:D4:FA:69:FF:F5:DA:41
Authority key identifier: D8:90:1A:FF:4A:34:F6:87:01:BA:A9:85:45:C2:D3:90:D7:A4:46:3A
Certificate issuer: /CN=d8901aff4a34f68701baa98545c2d390d7a4463a
Certificate serial: 4EAB488E461DA5FE6987B7627A9FB95C1390EA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JAa_0o09ocBuqmFRcLTkNekRjo.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/4/D8901AFF4A34F68701BAA98545C2D390D7A4463A.mft
Manifest number: 0F
Signing time: Wed 13 Dec 2023 08:13:39 +0000
Manifest this update: Wed 13 Dec 2023 08:08:39 +0000
Manifest next update: Thu 14 Dec 2023 11:28:39 +0000
Files and hashes: 1: 3139342e34352e3130312e302f32342d3234203d3e203537363935.roa (hash: 3SEsQiObbO8VWamkQuoZdjy05w/8qEN2tIL/MWr3Sdk=)
2: D8901AFF4A34F68701BAA98545C2D390D7A4463A.crl (hash: eCcIRZTsOM060FbBBwdXefNkcf+S++aEfy11UEFPpDs=)
3: 3139342e34352e3130312e302f32342d3234203d3e20393137.roa (hash: 3d7Xy5Y7+SjhGeVLNr94PZAiCg3sF4UedMgE06quXow=)
4: 326131323a386430303a3a2f32392d3438203d3e203537363935.roa (hash: plBR+fDw8um1z3+xQ6BODOjum5U+7s+wT6VAnj8+TI0=)
5: 326131323a386430323a3a2f33322d3438203d3e203335343837.roa (hash: vHi1gTngfA5lchNi4yjt06fMUW4X48CxJfoSY9wyGo0=)
6: 326131323a386430303a3a2f32392d3438203d3e20393137.roa (hash: 7XPflGhunIJrJogeUb/UniexkkyEqPeTatCBEzOQMTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ab:48:8e:46:1d:a5:fe:69:87:b7:62:7a:9f:b9:5c:13:90:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8901aff4a34f68701baa98545c2d390d7a4463a
Validity
Not Before: Dec 13 08:08:39 2023 GMT
Not After : Dec 14 11:28:39 2023 GMT
Subject: CN=752446D1377D85678A061581E8D4FA69FFF5DA41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:63:c9:fe:9f:e5:b4:45:d0:4d:2b:0c:6d:
38:c0:b7:af:e3:20:1f:11:10:4b:43:71:42:21:f9:
22:10:62:77:f4:e9:b1:43:a1:16:7d:d5:e6:fc:72:
b6:76:d3:86:49:b5:02:9c:3e:00:e1:92:c0:3c:91:
55:5c:8c:1a:ca:02:0c:7e:64:41:11:72:a1:d5:6c:
b5:be:90:48:a5:ef:49:b7:1a:62:12:1e:3e:22:49:
06:45:92:41:eb:d2:c1:57:9f:ee:47:e7:33:04:07:
8e:c1:0b:92:69:88:5d:81:9d:89:d6:3a:17:a2:fc:
d9:f0:c4:eb:19:26:d9:8e:98:5f:d4:2a:36:e2:c5:
c0:c6:69:59:2c:fd:0c:97:1c:2a:c7:b5:15:a7:a6:
ac:d5:77:9a:6b:71:a1:8b:3c:66:c4:f7:08:4a:bc:
be:bd:b9:ce:50:cf:61:22:c6:02:71:d2:8f:11:7e:
0b:85:45:76:56:5f:cc:99:a0:fb:d2:3d:13:73:cc:
36:10:23:8e:56:df:ee:16:84:41:87:33:0d:c7:e0:
2e:f2:d0:d7:93:2e:2b:85:18:07:6d:c1:65:bd:2e:
68:9d:dc:f4:3e:27:b6:21:41:ac:0e:09:fc:4f:e5:
f1:14:92:d1:cb:6e:cb:2c:87:94:c9:3d:84:a8:ae:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:46:D1:37:7D:85:67:8A:06:15:81:E8:D4:FA:69:FF:F5:DA:41
X509v3 Authority Key Identifier:
keyid:D8:90:1A:FF:4A:34:F6:87:01:BA:A9:85:45:C2:D3:90:D7:A4:46:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/4/D8901AFF4A34F68701BAA98545C2D390D7A4463A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JAa_0o09ocBuqmFRcLTkNekRjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/4/D8901AFF4A34F68701BAA98545C2D390D7A4463A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2e:18:eb:ae:0c:cf:00:e6:6e:ee:bf:8c:c6:ab:87:80:33:
39:44:20:51:fe:e6:19:96:9b:c2:41:a9:2d:eb:55:81:23:36:
22:be:35:49:06:46:28:e7:4b:7b:39:e9:41:b8:8e:a3:e6:32:
b3:96:26:97:5d:73:de:bc:e9:9b:54:63:f2:31:94:10:f2:ec:
74:d0:4d:87:a2:07:c2:8a:22:ed:df:37:17:16:45:3a:b0:e0:
25:ba:d8:df:9b:1f:8e:47:be:6e:f4:dd:56:e9:3e:3b:51:ab:
fb:90:a5:4d:8a:e4:06:e4:32:04:16:60:c0:cc:d2:c2:49:93:
b4:b7:1e:60:63:05:c7:74:44:05:51:72:11:26:64:aa:d9:05:
6a:72:54:1d:5d:be:1b:2e:20:15:15:ab:37:9d:9c:08:a7:9b:
7c:cd:bc:cf:88:0a:20:88:d4:01:5e:02:81:5b:d4:78:0b:d3:
55:19:4a:dd:43:9c:45:1d:12:30:4f:fa:c1:e1:5b:2e:94:35:
49:ed:8b:2a:e7:c8:22:95:86:2d:7c:93:40:8b:6e:ce:36:75:
32:eb:0f:ee:82:dd:34:9f:b4:1b:9c:86:f6:e4:87:d9:72:0e:
b4:cc:9b:76:89:f4:65:ee:59:9f:83:0f:31:ec:b4:41:43:02:
e4:70:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:18 2025 by rpki-client