Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: 6PPGCEJfYkyk90fEozTibUsu1JQysk5So0rOT+odz8c=
Subject key identifier: B1:F7:9F:05:6D:EF:D5:05:39:6A:2E:02:4F:1E:B0:22:2C:B1:77:66
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 0194BBCDFF5FAE0E1B973725B2E2BFE08FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0B45
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: f6kEhkX7PpcPo9wbtJ4luwVXynw0pkPB2RyNKnXyUZo=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:5f:ae:0e:1b:97:37:25:b2:e2:bf:e0:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=b1f79f056defd505396a2e024f1eb0222cb17766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:79:51:52:79:31:19:01:b3:21:5a:24:20:
12:38:63:23:3c:ff:0c:52:93:00:c7:dc:d8:2a:22:
79:44:aa:cd:89:c9:9d:35:08:59:28:d3:e2:61:25:
1d:9d:5e:ef:e8:e0:8a:be:21:41:bc:0c:fc:c5:77:
7e:64:33:da:2b:fd:2a:05:a7:9f:d0:e1:07:d9:62:
06:b4:45:db:eb:a9:20:fe:73:d5:7f:84:0c:51:bd:
40:38:da:40:5f:72:9a:45:fe:65:54:d3:0d:c9:1f:
0b:eb:32:46:53:c3:40:20:84:bd:65:5f:fa:00:63:
31:c2:f2:0d:9d:f4:39:f1:cf:6b:9f:02:d6:65:27:
41:2f:67:65:7a:a2:ba:b6:a8:99:0d:e4:5e:ad:1c:
55:94:cd:ec:f3:52:09:0f:ef:17:43:fb:7b:d5:46:
3a:59:8c:63:b0:fe:cd:5d:95:8e:b7:7e:84:91:39:
4c:6a:3c:5b:cb:31:53:0e:c2:7a:44:2d:92:a3:e5:
dd:ed:be:73:7f:3f:f5:0e:29:be:a2:f2:14:f5:5b:
86:44:01:db:55:e1:81:c7:cf:16:bd:7d:d0:fd:e0:
8c:32:66:c1:2d:62:fd:47:b2:ad:6e:cc:ac:d0:70:
c0:9e:6a:0c:b2:d0:7f:35:8f:97:29:38:c1:b6:01:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F7:9F:05:6D:EF:D5:05:39:6A:2E:02:4F:1E:B0:22:2C:B1:77:66
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:1a:1f:6f:fc:60:de:7e:41:93:02:1b:04:4e:ee:47:87:
5f:f8:10:ff:a2:65:fe:03:f1:4c:dc:b3:e9:6d:9b:c9:a6:f5:
42:5c:93:1f:d4:bb:46:73:cd:5b:18:e6:0b:b0:72:74:af:5b:
74:f2:d7:06:d7:9c:7d:1e:c5:91:46:4f:12:67:25:80:1c:c4:
c2:61:4a:24:ba:cd:99:78:2a:68:c6:05:bf:79:8d:74:55:f9:
24:6d:e7:2e:5e:ff:c4:ad:6b:4d:7c:c4:e0:66:d6:0a:35:e3:
52:df:f1:57:7c:96:ce:8a:2d:45:85:1f:89:00:a3:b4:19:95:
02:a6:fb:74:ca:45:f5:1c:49:9e:03:bf:5b:79:fa:5c:c2:67:
09:d9:d8:11:02:7a:17:ba:b1:97:f5:d4:b6:53:22:37:2a:d9:
f8:d3:98:aa:85:0e:b0:6a:f7:94:3b:b2:6d:10:d6:d9:6c:ef:
5a:61:90:b3:f3:8f:d0:f5:f4:9d:3f:03:10:61:5a:0d:9a:95:
31:e5:a2:a8:9c:52:36:d0:4b:9d:74:e0:12:e3:14:14:a8:6d:
e1:f2:fa:bc:d7:90:a2:70:ea:af:86:a5:cd:b7:f1:d4:01:a9:
7f:03:6f:d9:71:3b:3b:fe:d2:18:6f:d9:ac:fa:ae:d5:c4:fb:
c4:10:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:00 2025 by rpki-client