Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: ygfv6C3oscz9SpyL/Yh0OiM9kC9+L3CFeXYqAypVSMs=
Subject key identifier: D7:1C:AB:E4:C9:0A:BC:C1:D2:E4:C6:CF:21:66:D1:25:84:C7:7D:66
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 0194BCE097BF3AF74B6343F0227C78786F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: KLLEdmGpp9MllwRAJc9gIRvzTvY9aJPCSIm1lo+hJu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:bf:3a:f7:4b:63:43:f0:22:7c:78:78:6f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=d71cabe4c90abcc1d2e4c6cf2166d12584c77d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:1f:f6:06:b5:1a:a3:de:08:e1:12:85:61:
cb:f2:72:00:1e:98:d5:44:d8:4c:3a:d5:1e:3a:57:
1c:79:c7:33:d2:0d:a9:24:6b:72:88:5b:03:c5:61:
01:86:fd:35:8d:f2:59:6d:a0:44:eb:0e:6e:58:dd:
f7:7b:df:43:04:4b:a0:0e:fb:4f:9d:c4:14:04:bf:
c0:13:22:3a:96:e5:5e:f9:ea:12:59:da:d3:7b:fe:
ae:b5:97:2a:16:0e:ef:d4:90:45:a4:73:f6:ae:30:
0f:34:0e:13:c0:24:ec:e5:95:1b:5a:b1:5a:40:24:
e8:3b:b8:7f:4d:50:33:b8:c9:8a:2f:e1:6c:ca:34:
b1:04:c3:94:a3:13:23:b2:24:95:ba:71:82:d0:e8:
3d:fb:1a:8f:0e:d7:4e:96:83:93:aa:9b:3c:51:0d:
bd:9e:40:b1:87:d2:23:28:bc:0b:ef:d4:c5:fc:f8:
d5:6b:c3:d4:34:96:9d:92:2c:79:38:b8:4c:f3:7b:
e6:c5:4e:c5:b7:56:64:af:6c:65:e4:7d:21:83:27:
42:7a:a4:d8:c7:05:09:df:cd:29:95:71:cf:a7:fb:
fc:f6:78:f3:8b:74:69:f7:e5:b6:d8:3e:c2:a0:cb:
28:85:dd:25:24:f0:08:2d:66:ba:96:ce:22:ab:59:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:AB:E4:C9:0A:BC:C1:D2:E4:C6:CF:21:66:D1:25:84:C7:7D:66
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d0:91:0b:50:51:81:15:bd:31:4c:b3:89:3c:8e:fc:83:d4:
9b:c0:b5:50:c9:77:43:f3:fe:17:11:c7:a8:c4:c6:24:09:d0:
cb:ba:1e:fd:b1:af:65:cb:2e:d7:15:05:a2:29:78:2f:96:bc:
93:c9:f8:9f:7b:e0:8f:7d:3c:b9:bf:2a:5f:a1:31:b1:2f:50:
7d:64:4c:4c:96:5d:f8:8d:41:3e:d5:85:6b:f1:35:8d:65:ad:
ff:67:02:12:29:91:c6:6d:25:8d:d8:92:5d:b4:0d:b5:e1:5d:
5b:eb:8b:bb:15:d7:c8:02:c6:c3:7b:81:1c:81:0c:56:f7:cc:
37:97:53:93:18:d7:e1:03:4b:c4:42:c2:fe:74:e5:14:f6:30:
16:44:75:e8:0f:2f:3c:7e:be:db:61:11:a6:1b:a5:4d:7d:31:
e7:60:36:78:00:cf:7c:3b:5d:05:76:b1:5b:d9:49:48:7f:c2:
8f:fd:aa:8c:3e:ae:16:8e:f6:e8:1a:ab:98:43:1e:ce:a3:70:
03:2c:a7:0f:0c:78:f4:c1:f0:f3:69:04:ea:7a:eb:c4:a0:30:
26:d6:ea:a5:2c:49:39:4b:db:58:40:b2:a5:52:3d:73:f0:a6:
55:68:d4:c5:ec:fd:02:04:64:bf:cc:a3:9c:67:db:91:ab:26:
b0:87:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client