Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: 1fRzIJHmKCFjH4xf1N4sq3wHH4Itiv6q60X9WJBgRfs=
Subject key identifier: 4E:A5:8C:6A:2D:6F:BD:03:76:BE:86:11:7E:2B:0B:98:58:F8:1E:1D
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 0194BC04BF4C5A365D9DDF94539F07E9F8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: SqIRwci9sUkhiSR0xrF/LBPBAY+MFiPDFCiWKXimKvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bf:4c:5a:36:5d:9d:df:94:53:9f:07:e9:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=4ea58c6a2d6fbd0376be86117e2b0b9858f81e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:aa:00:30:b8:b8:9b:2a:28:7f:45:f5:58:
02:2f:38:6f:28:f4:f0:d8:28:27:e6:cf:8e:74:6d:
20:ac:e8:ac:2e:df:14:d5:df:35:09:bf:b8:ce:49:
c3:f7:ad:9b:2d:64:aa:95:83:41:ba:0b:8b:13:77:
21:1b:8f:cd:d6:c7:93:75:ac:8c:87:68:74:d3:5d:
0e:16:ae:10:99:d8:2d:8f:2a:ae:f7:38:59:dd:bf:
9b:e9:f5:5e:32:ba:e9:b8:8c:64:ac:7f:f1:e3:53:
03:87:4e:7e:12:f3:28:4a:8f:c7:2b:3d:01:a5:c4:
d0:7f:fa:d2:e2:b1:10:50:49:b9:92:14:12:05:fe:
34:f1:d0:b9:4b:96:16:4a:38:ae:8d:27:84:bc:85:
21:9b:ea:21:e2:d8:11:04:c0:4b:13:a2:1f:5f:48:
14:61:fc:4b:ed:6f:88:10:57:06:ab:b3:d9:e7:30:
d1:20:21:19:b5:fc:3c:7a:3d:a5:53:62:a5:df:6a:
54:c6:f0:49:8b:d3:f5:52:20:04:93:49:8a:d7:15:
e3:31:01:14:fc:a5:24:45:87:b0:a0:0a:63:cf:a6:
46:d0:13:ad:39:38:a1:43:61:d3:74:ac:40:72:82:
3a:78:82:74:16:53:f9:3b:cd:d9:72:55:20:5f:08:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A5:8C:6A:2D:6F:BD:03:76:BE:86:11:7E:2B:0B:98:58:F8:1E:1D
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:da:db:85:eb:99:ad:c3:45:1a:18:aa:1f:b6:26:dc:77:
75:82:49:2f:15:40:fd:ba:b4:d1:aa:9c:9c:4d:f6:79:38:c0:
b0:c6:ef:87:aa:c1:8b:b9:15:a2:42:a9:cf:30:a0:95:9b:d7:
db:7e:16:27:a3:66:b4:3f:aa:5f:11:1f:79:bb:72:1c:cd:34:
25:87:c1:76:4a:10:c0:76:94:63:ed:ab:6d:c2:bb:cc:15:00:
78:98:5c:c7:d0:81:54:e0:c3:0a:39:48:3c:2e:d7:1b:34:4e:
5c:5a:f9:ef:74:ea:42:c9:20:8f:37:69:92:d6:c1:3c:f5:6d:
70:b1:f9:7c:62:82:fd:04:59:29:45:1b:05:9c:72:f2:c5:97:
15:87:8a:cd:1e:4e:2e:fe:fd:17:a8:6b:3d:6d:5f:8e:01:d4:
56:d4:fc:ae:bd:a6:7b:7e:ee:7f:48:29:81:64:69:a9:fc:dc:
7b:61:d1:e4:4b:fa:15:b4:e6:f4:2f:87:04:97:81:b2:d5:7f:
03:63:ba:65:3b:39:72:0a:0d:3a:3e:68:48:bb:ab:d2:a3:84:
ea:59:65:bb:d4:9d:95:14:fc:f8:48:a0:9e:62:b4:0f:9c:f6:
22:9e:62:e6:64:94:03:9b:49:85:69:b4:a7:84:ba:2a:f8:31:
d5:47:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:18 2025 by rpki-client