Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: gu76cWMZfEIxyT4gjyTUXkszClCxEBLBYEXXPIr+ut8=
Subject key identifier: 18:24:19:70:EE:2F:D2:B9:43:50:9A:4F:B4:E0:CA:8F:D0:F0:79:35
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 0194BD17683C519D5911C0EA9ABB1F3676FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0D39
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: LLcv0rY7PgmOIeEqh1IhPSShMnn+z6Up+/Q4oZJq1r4=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:3c:51:9d:59:11:c0:ea:9a:bb:1f:36:76:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=18241970ee2fd2b943509a4fb4e0ca8fd0f07935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:1a:95:e2:e4:7e:2d:28:7c:8f:a3:51:2e:
ff:a3:b3:e1:56:94:61:86:61:8c:49:37:2c:bc:d5:
2d:33:15:48:06:6d:5b:2b:66:4a:6e:94:b9:6b:df:
61:d2:83:6a:b2:9b:03:f7:fb:dc:80:33:d8:1c:47:
22:3c:07:49:33:52:3d:0d:b4:4a:da:b2:68:96:3a:
87:8b:0e:7c:79:e3:8c:bc:2b:57:10:48:5a:6f:b5:
3d:14:ef:35:10:49:8e:34:b2:bc:30:da:9f:46:8d:
31:89:03:b5:d3:8e:55:b9:98:36:85:32:e2:6a:5a:
5f:48:0c:df:d2:10:2f:d6:7c:7f:41:9f:b9:e0:d3:
15:92:c9:d0:bc:90:37:bc:13:7b:93:c2:46:55:db:
a3:54:a3:83:e0:58:4a:34:7b:78:06:57:9c:df:52:
7f:b6:9c:1d:ad:f8:83:7d:86:6d:60:68:33:9b:1c:
44:5a:54:49:34:42:5f:21:19:fa:33:19:a6:f3:07:
1c:e7:0f:0b:8b:f6:18:eb:2b:38:85:29:2f:14:b1:
da:9d:6e:60:ef:79:8e:80:e6:a6:2e:12:68:9e:41:
00:7b:19:3c:60:e9:42:6d:a9:70:df:d3:72:62:e8:
57:87:49:96:f4:2c:41:b6:6e:1c:9e:eb:e3:c2:83:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:19:70:EE:2F:D2:B9:43:50:9A:4F:B4:E0:CA:8F:D0:F0:79:35
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:22:23:c7:16:53:f6:9c:d1:0c:f6:73:69:7e:a7:91:de:1d:
21:e2:0f:86:3f:e7:63:26:95:d7:6e:01:22:d9:1f:b7:9c:ce:
03:c6:0c:ef:94:fb:a3:55:cb:58:8c:9c:0e:a6:ed:e9:e1:6c:
b4:97:0f:70:74:b2:c7:b7:b7:66:8f:65:a3:74:cd:6e:54:92:
e5:ff:88:f6:20:48:42:af:ed:6d:d7:70:43:98:43:28:7b:f0:
be:71:94:26:1c:7f:50:8d:c3:9b:95:16:0f:cc:5a:bd:ca:f6:
6b:6e:40:a1:67:fc:58:9a:92:38:dd:04:0f:39:33:02:4d:78:
0e:df:e1:36:30:d8:b3:da:d3:37:01:b3:c6:32:86:f4:3d:9e:
53:38:2d:8e:d2:81:e0:70:28:da:aa:a1:2b:7b:8b:08:d1:38:
f1:08:1d:f5:3d:3f:eb:0c:f0:d5:86:56:32:d0:48:bf:36:46:
e9:ed:93:4d:88:fc:cf:14:9a:77:8c:e7:dd:e8:17:b1:11:81:
c4:33:1a:39:a2:e5:ae:f1:fc:14:77:c1:0c:e9:a2:c7:d0:24:
59:08:e1:24:c3:50:92:ca:33:bc:28:aa:5f:98:06:a0:ea:52:
0a:fa:e3:1e:a7:4c:52:dc:93:bf:14:0c:cb:b1:b4:78:56:1d:
04:9c:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:59 2025 by rpki-client