Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: dvyrIios/nUJhqpMswG1NgSMD9AkzHSXse+6u8ogGpg=
Subject key identifier: 54:E4:5B:19:10:28:7B:86:D7:61:FE:F1:21:FB:8E:E8:05:37:1F:B5
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 0194BC04F0F2D65DC1E38ABE88143C0D7CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: eeHpkJeBCDBqokdVxy4GgGLlpLpk1pbbsd+vkEpHmXE=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:f2:d6:5d:c1:e3:8a:be:88:14:3c:0d:7c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=54e45b1910287b86d761fef121fb8ee805371fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:f5:e0:38:43:9b:bc:ca:79:b9:70:bf:e8:
2e:c2:40:75:e9:a0:3f:04:20:1b:dc:52:c4:88:8f:
7b:76:98:74:2e:98:ec:b2:aa:ae:4c:43:e4:7c:dd:
f1:29:bc:43:31:89:55:45:a1:39:e6:d1:04:fb:07:
57:37:a3:d0:30:9d:89:87:a0:bf:8d:dd:e3:cf:77:
00:0d:f8:72:0b:78:77:b2:4a:bb:d0:f3:ed:81:e2:
d6:cf:f3:45:a2:6c:cf:19:a1:43:c4:d4:6c:ef:47:
e6:40:a3:8d:99:7c:57:f3:fb:ab:53:af:82:21:a1:
18:2e:27:bb:39:c9:5f:e0:74:65:45:f5:ce:6c:3c:
51:05:c0:2a:0c:4d:81:b1:5e:71:ba:3c:4d:33:65:
6e:f1:20:ce:80:11:39:09:96:01:27:5a:11:81:17:
1a:9e:56:12:bd:d3:34:3e:2a:61:03:e9:db:92:2e:
f4:11:8f:3d:6a:df:24:e0:f1:0d:86:f1:e8:ae:be:
95:c8:88:83:5e:05:c8:27:a0:ce:a0:a3:3d:0d:4f:
23:3e:72:b7:33:7e:c9:9b:c8:ba:ca:ff:b5:13:a2:
f2:31:71:43:62:1f:ee:e5:93:3e:5e:c2:f5:b9:62:
29:9d:4e:f4:0c:35:9f:41:f0:68:d6:f7:b8:a7:37:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:5B:19:10:28:7B:86:D7:61:FE:F1:21:FB:8E:E8:05:37:1F:B5
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f0:24:3c:17:c8:86:6a:fc:64:ef:9e:62:75:3b:59:4c:06:
6c:cd:56:32:b0:57:10:14:0b:66:dc:f0:85:66:0f:20:e0:18:
6b:96:ba:9b:c5:f2:bc:a5:92:02:5f:5a:b6:bf:28:0e:25:cb:
ec:85:67:ab:61:e1:a5:9b:31:58:0a:0b:12:16:16:3d:e0:8a:
8b:a5:db:2c:aa:d3:01:b8:08:c2:ab:63:50:fc:04:f1:af:47:
c5:5a:01:8b:be:ec:52:fa:3d:d2:c9:ec:62:14:36:2c:2e:a2:
3c:1d:c6:f1:15:af:12:33:52:29:87:67:a2:38:28:a8:1e:4a:
7c:2f:a0:74:ed:51:64:a6:10:82:57:67:a2:ae:cd:62:9e:4e:
21:42:7b:f1:60:59:ce:39:41:e2:93:ef:e5:32:99:7e:a7:e8:
42:99:54:00:eb:91:97:c7:58:ca:2e:1c:bc:52:22:ed:89:0f:
27:fc:9b:60:59:ab:e9:fa:e0:4a:a4:a9:49:03:45:15:0d:2f:
e9:6b:5c:ff:13:f2:44:d9:ff:46:ea:ae:ef:36:2e:f3:ca:dd:
0f:c6:a9:26:a3:92:6d:e3:27:3c:c5:95:49:e4:48:e8:77:3e:
28:43:21:43:1e:89:ea:fb:33:15:88:f8:92:68:86:b0:91:85:
c2:15:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:55 2025 by rpki-client