Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft
File: kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft (raw, json)
Hash identifier: KB8IE8jenlE8rupZEqm1RoFmxnySws1N4cBh7W8JpOI=
Subject key identifier: 08:16:17:EB:BA:F8:17:4C:85:5C:F1:E7:77:7B:08:CC:9A:88:E6:18
Authority key identifier: 92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23
Certificate issuer: /CN=92680145cfb2371ecf4c364726b64708572c4223
Certificate serial: 0194BCAA48FC1F70D5A92EEB8095E0476E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 14:01:03 +0000
Manifest this update: Fri 31 Jan 2025 14:01:03 +0000
Manifest next update: Sat 01 Feb 2025 14:01:03 +0000
Files and hashes: 1: Q4eb_NSVD1Iy6yzBzsYZdGRXZqY.roa (hash: ZnYNRkpn3lYvlFcVLCOCLjxdS7Ti3DktlWPMIiudM+0=)
2: kmgBRc-yNx7PTDZHJrZHCFcsQiM.crl (hash: fq77911jmw5+l1kkzsNQbGU3VjrEpS/VxKytYGeFfGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:48:fc:1f:70:d5:a9:2e:eb:80:95:e0:47:6e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92680145cfb2371ecf4c364726b64708572c4223
Validity
Not Before: Jan 31 14:01:03 2025 GMT
Not After : Feb 1 14:01:03 2025 GMT
Subject: CN=081617ebbaf8174c855cf1e7777b08cc9a88e618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:9e:47:ba:3e:95:9c:c2:91:78:a2:93:19:
a1:50:90:73:d3:9f:a2:fc:ca:0c:e2:be:87:14:53:
e9:5e:04:a8:62:8c:b8:85:ea:2a:9a:b6:1f:6c:17:
05:d0:1c:13:6d:91:22:ce:89:45:11:b1:7d:d8:58:
6c:41:44:33:01:d5:b8:a4:86:2c:4e:1b:38:c4:11:
c1:ef:ab:b1:4e:27:4f:9a:ae:ed:01:64:31:42:7e:
f0:bb:de:29:32:ba:3b:fe:de:42:aa:b1:c8:8b:c9:
28:59:16:64:f6:a2:f6:a6:a7:e7:39:30:45:be:e7:
53:f2:bd:af:cd:a8:b8:c5:95:73:1a:a0:55:f6:4e:
8f:12:24:7b:86:cc:d9:81:fa:98:64:8f:47:00:a9:
6b:7b:12:99:79:77:24:04:7f:46:44:99:eb:04:4d:
95:9a:21:e4:70:e4:b8:af:53:70:11:b6:1c:56:dd:
9c:8d:2a:3d:e0:1c:8c:70:9a:2d:b5:62:8c:d6:e2:
41:7e:b3:4d:bc:f3:a6:28:18:33:49:d5:20:e5:f7:
f6:ee:3a:1b:03:a9:93:49:0f:b3:b9:d8:0d:99:dc:
64:57:33:4a:f1:a1:69:a3:65:83:af:62:5f:a4:7c:
a5:e1:7f:25:38:b8:a2:68:0e:e9:e8:56:dc:5b:5d:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:17:EB:BA:F8:17:4C:85:5C:F1:E7:77:7B:08:CC:9A:88:E6:18
X509v3 Authority Key Identifier:
keyid:92:68:01:45:CF:B2:37:1E:CF:4C:36:47:26:B6:47:08:57:2C:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmgBRc-yNx7PTDZHJrZHCFcsQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/13f69a-0bbd-4595-8a44-13d7bebf47ba/1/kmgBRc-yNx7PTDZHJrZHCFcsQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:37:08:60:7f:13:9d:76:4f:19:6f:6a:e0:05:1d:c5:fe:3c:
06:42:20:0a:9d:65:cf:0a:e5:8f:f5:70:17:cc:40:08:82:84:
5e:8e:d6:47:e5:83:9e:95:db:93:58:e0:48:7e:75:17:40:77:
c3:ff:75:80:d4:00:98:3c:4b:ae:08:d2:15:2f:ad:1d:3c:e2:
08:0f:d6:48:29:66:3d:c0:06:5e:c6:95:2b:4e:84:42:06:22:
53:62:83:63:bf:c4:d3:ce:26:7e:6c:31:6b:5a:c9:49:96:bd:
22:95:ed:19:63:19:f9:7c:18:a0:bd:51:52:03:5a:c2:da:d4:
4e:8a:00:93:c2:81:e8:27:a3:a5:b1:25:0e:0b:b1:9b:da:79:
fe:5e:89:42:ad:21:5f:fc:df:e8:18:2b:89:9b:51:ea:7f:d1:
8a:b3:8b:90:e8:61:e0:ee:21:0c:03:65:be:de:19:05:66:ef:
59:cf:7c:46:e9:56:bd:66:a2:4f:06:24:7b:70:0e:f9:1c:70:
98:af:01:82:13:cc:ab:ad:42:1f:6b:3c:5e:35:62:e8:54:5d:
37:96:b3:92:52:7d:eb:21:06:a7:09:31:a8:ea:26:9f:ed:90:
37:77:cd:7f:bc:f5:95:c6:76:1d:7b:99:43:a9:83:66:23:66:
6f:13:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:23 2025 by rpki-client