Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.mft
File: kt80tkeC2G43Hj_qAlv1qh3qLps.mft (raw, json)
Hash identifier: O6ujkiDXXhVWa/dK6PVbQatsLU4kpIwUJeSiG2ZkM6w=
Subject key identifier: 98:7D:EA:3F:55:49:9B:95:DB:7E:21:AD:B6:D2:43:36:4D:FD:54:C6
Authority key identifier: 92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
Certificate issuer: /CN=92df34b64782d86e371e3fea025bf5aa1dea2e9b
Certificate serial: 018C0F5E16A674617C97095BD20A79A541AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt80tkeC2G43Hj_qAlv1qh3qLps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.mft
Manifest number: 06CD
Signing time: Mon 27 Nov 2023 06:01:13 +0000
Manifest this update: Mon 27 Nov 2023 06:01:13 +0000
Manifest next update: Tue 28 Nov 2023 06:01:13 +0000
Files and hashes: 1: FHZhkrr6DaTytiCb8RkbmYZxF64.roa (hash: Vaw8iwlc7vpdtOSL1f94HTdjppWUSsJJFCCOwxI5goI=)
2: kt80tkeC2G43Hj_qAlv1qh3qLps.crl (hash: ZlvqhXHsgWXF49G3DzDt4qOeEpPdatfxo8AG+m5Af2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:5e:16:a6:74:61:7c:97:09:5b:d2:0a:79:a5:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df34b64782d86e371e3fea025bf5aa1dea2e9b
Validity
Not Before: Nov 27 06:01:13 2023 GMT
Not After : Nov 28 06:01:13 2023 GMT
Subject: CN=987dea3f55499b95db7e21adb6d243364dfd54c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:dd:bd:65:b9:4c:eb:f2:65:f8:15:43:fa:
30:10:aa:1f:45:cd:17:fb:1b:17:6d:ac:57:c0:f3:
2c:13:6c:d9:20:87:7f:18:33:5c:55:c1:a9:58:35:
d6:44:b6:66:ad:56:03:c6:22:53:a4:fe:89:f3:1d:
e5:7a:71:33:a2:e6:5f:83:9b:f7:ac:c8:48:62:8a:
84:1d:1c:f0:d6:a7:57:61:db:a0:20:f8:0d:93:0f:
3f:d5:31:b4:cb:07:6a:66:13:68:72:69:36:5b:34:
7f:c0:c9:6b:ac:9a:52:95:5f:42:09:c3:9d:df:ae:
58:83:4d:96:bb:16:3b:69:c3:9e:5a:da:53:15:91:
65:74:5f:bf:80:db:ee:a6:61:ae:69:7a:e7:e1:b6:
89:13:2d:94:0c:c3:86:c1:51:37:38:e6:86:8f:7e:
c6:5a:99:54:e7:bc:06:5a:66:19:b1:63:56:b5:09:
21:c8:ad:a7:f7:88:21:6f:cc:1f:09:ea:c1:d2:e4:
54:74:86:c0:cf:7e:66:9d:a0:b5:be:8b:16:b2:16:
ba:c7:70:d8:00:de:1f:81:42:f3:2e:c5:79:77:ab:
63:77:2c:d6:fa:35:e8:36:51:73:4a:97:48:e0:6c:
d1:08:ee:ca:8f:9d:98:9f:35:98:e7:12:ff:f5:9a:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:EA:3F:55:49:9B:95:DB:7E:21:AD:B6:D2:43:36:4D:FD:54:C6
X509v3 Authority Key Identifier:
keyid:92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt80tkeC2G43Hj_qAlv1qh3qLps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e2:a8:ee:68:52:bc:42:d8:4a:bb:3e:12:bf:30:f4:59:85:
76:8e:fa:32:38:dc:ce:01:9f:91:a6:16:a6:ff:18:8d:ff:00:
2a:fc:7d:ad:4f:60:a6:1a:2b:1f:6a:d8:6f:70:fc:8e:dc:10:
36:f0:6b:bc:fd:22:73:ce:bc:ea:a2:2f:38:79:da:74:df:20:
c8:7d:e6:7b:f9:73:56:1b:12:71:b6:20:75:3a:e6:64:60:33:
41:6c:cc:c2:42:a2:e9:85:2e:7b:f7:f7:07:f3:68:08:7f:dd:
0f:37:21:dd:d2:48:ed:74:48:e5:5e:10:15:02:99:fc:e2:ba:
0f:ee:01:5c:9b:8e:f9:31:f6:6c:d7:09:aa:44:2c:7d:f6:bc:
2f:9f:e0:b2:ac:8c:4d:a7:2f:88:c9:4a:e0:de:f6:d7:23:b1:
d7:33:fd:bc:1b:e7:d5:16:bc:26:15:2d:00:ef:57:3a:51:94:
94:2e:d3:e0:96:c7:1b:10:7f:5c:8a:cb:7d:c8:95:b3:8d:3a:
10:9d:3b:c9:76:dc:5c:eb:b2:d7:30:aa:60:61:57:5c:74:cd:
cc:0a:2f:bf:80:a6:bf:29:57:66:d0:8b:33:b0:6c:09:a4:e4:
b8:98:40:ff:5a:d7:98:8b:6f:c8:0d:df:f9:5f:63:70:c9:5e:
b4:20:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:33 2025 by rpki-client