Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/tKxFvSGSars9AK3OhUeatgVGnxE.mft
File: tKxFvSGSars9AK3OhUeatgVGnxE.mft (raw, json)
Hash identifier: oOENOgnxi17/QRzc7BCn5rdyfCFU6zKjnz7QSii2jjc=
Subject key identifier: 1C:51:14:8C:40:DA:D1:B9:59:A8:B7:63:03:15:4B:9F:75:4D:72:12
Authority key identifier: B4:AC:45:BD:21:92:6A:BB:3D:00:AD:CE:85:47:9A:B6:05:46:9F:11
Certificate issuer: /CN=b4ac45bd21926abb3d00adce85479ab605469f11
Certificate serial: 01851354830C570E8169DEA946DFFCD1EA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKxFvSGSars9AK3OhUeatgVGnxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/tKxFvSGSars9AK3OhUeatgVGnxE.mft
Manifest number: 0BC7
Signing time: Thu 15 Dec 2022 01:09:43 +0000
Manifest this update: Thu 15 Dec 2022 01:09:43 +0000
Manifest next update: Fri 16 Dec 2022 01:09:43 +0000
Files and hashes: 1: 5X0AB-Tzjf2EcQUh2HGnYcSz3Q4.roa (hash: 2ZkTaRl8HWuUvIJ9JU4ppxbgItvdb9VvtWCTIcbSW6Q=)
2: tKxFvSGSars9AK3OhUeatgVGnxE.crl (hash: lCb66H+C8Jekl+hMfRC7Ba6rSoLqLSI9/Cq5PFCXiEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:54:83:0c:57:0e:81:69:de:a9:46:df:fc:d1:ea:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ac45bd21926abb3d00adce85479ab605469f11
Validity
Not Before: Dec 15 01:09:43 2022 GMT
Not After : Dec 16 01:09:43 2022 GMT
Subject: CN=1c51148c40dad1b959a8b76303154b9f754d7212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:38:6f:e4:6e:e0:86:f3:97:1b:94:b3:63:b9:
36:09:4c:84:89:c9:47:8b:7b:7e:e8:09:3b:44:d5:
60:7f:4d:f9:9d:f7:a0:ee:dc:62:9b:57:25:74:44:
87:aa:d0:9c:48:c0:a2:7f:e9:30:d8:f1:31:0c:f9:
58:73:7e:df:84:32:23:aa:db:dd:1d:5c:f4:00:0a:
33:68:21:cc:9a:f3:2c:12:ba:95:a0:45:5d:bf:f4:
97:70:a8:da:00:96:12:41:d1:ad:f1:e0:18:5e:77:
fd:13:30:62:57:d0:90:f7:41:c5:7b:6d:14:63:7b:
e4:7a:f9:e0:0f:27:6b:b3:54:02:94:aa:78:08:7f:
51:21:85:7e:55:8f:a2:ae:6c:ce:cd:e5:ed:a2:ad:
44:d9:59:0d:5a:c3:f6:6c:21:52:e6:3e:0d:65:d3:
3d:bd:38:89:ce:96:2b:42:12:fe:f6:3b:47:3b:65:
26:2d:fa:14:06:f4:77:88:c0:2c:3a:8e:3e:04:f2:
9b:9a:6e:5f:ad:1c:64:85:4d:51:ab:97:d5:f9:4e:
76:b9:1a:49:78:5b:c4:f1:9a:15:3e:aa:c2:e0:98:
ee:66:14:0d:af:22:ed:37:f3:3b:ab:f0:4b:6f:b9:
23:a1:ee:93:bc:26:39:5b:c1:60:13:32:7f:77:96:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:14:8C:40:DA:D1:B9:59:A8:B7:63:03:15:4B:9F:75:4D:72:12
X509v3 Authority Key Identifier:
keyid:B4:AC:45:BD:21:92:6A:BB:3D:00:AD:CE:85:47:9A:B6:05:46:9F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKxFvSGSars9AK3OhUeatgVGnxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/tKxFvSGSars9AK3OhUeatgVGnxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/tKxFvSGSars9AK3OhUeatgVGnxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ab:4a:51:d8:ac:07:25:74:d7:64:88:7c:97:96:70:e8:81:
ad:3b:e6:5a:8e:22:34:78:78:76:e9:64:72:3a:e6:14:ae:62:
53:b2:af:04:ff:26:be:c6:bf:b4:0e:55:eb:63:f5:db:30:69:
98:6a:45:11:03:69:60:43:be:0a:b8:5e:bf:27:88:a8:f8:3d:
31:23:f5:fe:04:52:17:a4:64:b1:ef:97:cf:a1:fc:48:9a:03:
e4:2c:f2:52:f2:26:a6:58:15:9f:c8:b7:2d:9a:2c:27:c1:e5:
86:85:38:de:41:b1:46:52:b1:cf:e5:b9:83:f9:a5:c3:81:3c:
e1:d6:22:ac:ef:53:f9:7d:a5:5c:d2:a4:61:f7:bb:d4:a1:7c:
1e:b5:56:47:e3:8f:22:c7:f1:c3:0b:7b:7d:87:e0:d8:bb:22:
f3:37:6e:6f:17:7c:52:0c:c7:45:16:26:15:21:b0:1f:28:20:
ab:e2:c9:cd:20:59:18:9d:1d:6d:aa:04:3f:9b:7c:c6:5c:d8:
3b:0c:de:4b:95:5f:db:be:fb:7b:2a:6a:74:32:5f:53:89:c1:
e0:3c:9e:64:57:1b:69:e6:2d:ae:62:79:bc:bc:bb:e0:c6:f4:
ad:fd:c0:ef:00:8f:5e:21:bf:f7:9e:a4:cc:e6:f0:bd:2b:9e:
6a:81:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:11:27 2025 by rpki-client