Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: OezjO5diZkxzH17cdpbmfurRU+fWjbLytgp+sQdHkv0=
Subject key identifier: A6:61:59:6F:FF:17:E6:3E:37:4C:32:29:73:0B:08:E1:45:DF:3B:4D
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 0194BC72C48880A6E6E9EBC056963BE30915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 0258
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: WVIwWkHHRVsyE849KIs6dtAKS5w.roa (hash: q1o5hXghtzsQxdwG9DCka1tT8MljckbYQzr00THvBZw=)
2: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: SJ9RZvedM/ZB9HRfS2Z9bvu4qZ0I1ZclUQlP/wQV2Hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c4:88:80:a6:e6:e9:eb:c0:56:96:3b:e3:09:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=a661596fff17e63e374c3229730b08e145df3b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cd:71:c0:0a:ac:f7:10:3a:58:cf:bb:83:d2:
27:25:bc:94:3b:b1:d7:50:0d:ac:a9:a0:7a:a3:1b:
7d:21:58:c8:f1:40:be:44:64:45:45:66:64:a3:fc:
cf:2e:85:4e:76:19:3e:2f:82:2c:5f:53:c0:f2:6b:
93:f7:ca:e2:48:a3:10:a2:57:00:8b:5b:24:3c:a2:
54:1d:49:1b:19:0c:c1:fc:71:64:22:4b:38:bf:00:
ee:3e:16:22:7e:b0:5c:c1:5f:4a:6a:8e:7c:42:0d:
10:39:d0:ab:65:2e:b0:15:0e:21:63:1f:00:f5:02:
a0:15:d0:6b:ee:29:73:42:6b:9b:be:32:be:77:66:
c9:fd:9c:0f:cf:5e:4e:b5:e5:b0:0d:b6:b9:70:ee:
72:e1:ee:12:d4:00:2d:60:82:3b:8d:68:88:06:aa:
56:fa:36:4f:01:15:dd:cb:cd:76:63:a7:34:ae:54:
3f:dc:99:cc:60:67:a5:18:be:62:41:d7:b5:ba:bc:
a6:43:28:31:06:b4:99:70:05:a9:29:cd:7f:c4:97:
ad:2f:c6:d9:8a:c8:90:b4:75:90:80:b4:80:8b:71:
89:bd:ec:8b:16:b5:80:e7:4d:37:05:1b:e4:76:a9:
f2:06:b4:25:e1:01:24:23:11:3c:be:09:b0:93:be:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:59:6F:FF:17:E6:3E:37:4C:32:29:73:0B:08:E1:45:DF:3B:4D
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7c:7d:7e:ec:14:21:d1:ca:4e:6b:cf:8f:95:75:90:ec:0c:
0f:d1:d1:f8:39:e7:27:87:61:40:65:6b:7f:be:c1:6e:99:b9:
34:0c:76:14:32:be:be:06:03:c8:2b:01:71:f0:49:de:64:4d:
33:fc:19:fd:3d:09:9f:0b:d8:10:1b:05:e0:d7:eb:82:23:35:
d3:b9:d5:5f:13:42:63:85:bb:97:9a:28:98:b2:be:9d:71:36:
9c:6d:58:e1:aa:a5:6e:33:0d:fa:5b:dd:ff:ac:5e:cd:df:a5:
f9:f2:7d:aa:a6:dd:a0:14:12:f9:85:03:54:ea:30:70:21:5d:
c7:d1:b3:50:4c:98:fe:e4:6a:87:60:a6:60:e4:01:38:29:b0:
52:96:bb:bd:38:10:17:22:5b:14:d2:01:52:ba:90:db:9f:b5:
61:ac:19:8a:46:90:ad:25:e1:5f:82:2e:41:0a:0d:17:d0:9e:
b6:e9:2a:2f:00:60:b1:45:f5:cb:9f:a9:3d:e8:38:cb:45:02:
4b:ef:8c:7d:14:60:2f:49:a5:31:e1:30:0f:5d:33:63:f3:e3:
81:1f:11:26:1b:74:0a:6c:22:08:a4:2c:9d:b9:0b:e0:ec:7b:
17:86:a3:13:92:62:0d:2f:ed:23:50:23:09:dc:e6:f7:e1:1d:
2c:3d:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:50 2025 by rpki-client