Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: zzQAOWRuHSinKg7SLlrRrrsxJFZwvqhEtYQOclfhmfc=
Subject key identifier: BE:03:A6:C9:43:96:D7:A1:AA:B8:B2:84:3F:CC:47:C3:95:55:85:A4
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 0194BD17C64ACF2034261E6881AAD706FA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 082A
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: iDv3sZGLxp88sRsCVJBgy5npo5Lkh3WUP3G57fPsP3M=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:4a:cf:20:34:26:1e:68:81:aa:d7:06:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=be03a6c94396d7a1aab8b2843fcc47c3955585a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:35:54:62:82:ae:fb:e1:d8:20:07:1e:8a:f8:
d9:d5:cb:19:37:29:d9:f6:4f:e2:7c:9d:d7:38:19:
82:a2:92:42:4d:7f:10:55:fa:e6:b8:9d:c7:a0:50:
f4:c6:e6:82:93:b2:f9:99:72:7b:06:dc:0b:5a:27:
0c:7e:47:75:bc:9c:29:0c:ba:51:e3:b5:d2:1f:a1:
1c:34:44:c5:a7:a0:78:52:77:32:50:33:c4:01:01:
2d:e9:63:45:81:04:0f:0b:5e:fa:dc:e2:0d:ca:09:
86:04:84:a3:3b:a8:ff:f5:ba:60:67:72:54:d3:23:
36:cd:b8:94:92:be:3f:3e:3e:ba:e2:29:ee:ff:39:
32:2a:70:30:f2:0c:d8:d8:59:1c:2b:34:cd:e0:fe:
7a:a9:66:1c:1c:13:34:25:54:de:25:83:e0:80:52:
95:7c:b1:71:d7:3a:55:81:ff:d1:c4:30:69:c0:08:
09:20:53:7e:f5:35:69:54:ba:96:ab:b0:e8:35:73:
ef:f8:85:03:cf:dc:84:39:1a:39:fe:66:13:b6:b8:
e7:89:0f:c8:fc:75:ba:b8:ab:97:35:6e:b0:63:9c:
b5:3a:7f:91:76:27:11:cb:2c:17:7f:6a:a8:0f:9a:
29:c8:c6:90:82:2d:4a:6e:ac:4f:a8:10:d2:14:45:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:A6:C9:43:96:D7:A1:AA:B8:B2:84:3F:CC:47:C3:95:55:85:A4
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e7:07:35:ee:2d:05:52:5d:a0:0d:de:36:4f:b9:a4:0f:10:
12:44:2e:65:9c:06:90:4a:fd:18:c6:8c:51:d5:a9:30:7b:7a:
03:2f:d1:ff:eb:57:ed:20:3c:5a:36:7d:54:b0:ec:34:26:0e:
1a:ae:18:10:44:24:0e:f2:b0:e7:44:43:d5:84:ac:e8:69:39:
b2:c1:e2:c6:fd:8c:bb:85:85:4d:17:8f:c9:07:47:7e:fd:41:
32:7c:08:f8:2a:2c:8f:02:be:95:c8:5c:02:e4:3e:02:67:f0:
94:d2:be:2c:8b:b7:51:c4:33:2a:7f:f4:24:1d:b0:ef:40:07:
65:ea:db:33:c4:30:15:e1:70:98:09:3d:e1:86:61:02:69:b2:
ac:ec:c4:c3:93:a5:b7:8b:45:74:39:1d:0b:1c:1d:dc:9b:f4:
e2:39:bf:b3:c8:e7:e3:64:45:aa:f4:ed:ab:22:e5:9b:7b:27:
33:1b:b5:7c:12:ba:8d:ee:1c:c8:4e:b4:41:e8:e8:c3:71:6c:
93:15:fe:d7:1d:2f:9e:b8:61:1a:2e:98:0e:a1:e1:68:40:9d:
1f:94:de:02:a5:a1:a6:2f:63:73:f3:d5:03:02:d7:f3:31:e9:
4e:b7:5a:fa:e5:87:2b:84:e9:b6:07:88:20:c6:1e:bc:fb:e7:
d6:fb:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:12 2025 by rpki-client