Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: NrnyDZahIEUyQVrdnwOn22Wuovm1VgG3g4kpTOnPzP4=
Subject key identifier: E0:F8:5C:7D:24:AF:63:19:3B:D8:DC:FF:82:6D:9B:0C:28:A3:07:A7
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 0194BD8557781E4EA38C8C93747FE7FD8C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: TtaEnd2x3ONkWdmzFo1Q2PBTLIk.roa (hash: RgO9/5xhOVSpsgM4/jEFkDHMzjZGXv/dAO6C3WOQueE=)
2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: o9ZDUN5qvnj2Rqr08aR0AxZQkw0PtxgaoGGHVe3iWzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:78:1e:4e:a3:8c:8c:93:74:7f:e7:fd:8c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=e0f85c7d24af63193bd8dcff826d9b0c28a307a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:3a:55:dd:71:c8:1d:e8:f8:67:9c:78:20:
8f:6a:59:5b:b9:b6:8e:e6:e7:69:12:36:01:4d:ac:
93:6b:5a:2c:b3:5e:bb:03:27:bb:58:5b:b8:51:57:
32:e8:ad:46:4c:73:f8:26:db:64:a4:c6:37:22:fe:
bb:4c:78:b5:e9:92:67:24:12:3b:0a:f2:9a:79:60:
97:1f:9d:1b:05:2d:5a:86:84:82:77:57:bd:a5:32:
77:b4:f7:2a:2f:bb:29:15:ab:be:1d:6e:f1:5f:d0:
ce:6a:9d:b3:ae:2c:4b:eb:41:31:9f:b9:6a:a2:dd:
e1:4c:e3:da:09:e8:4f:29:69:06:84:c3:ee:a7:b7:
c5:60:21:2e:3f:79:90:01:ef:69:cc:73:4b:fe:81:
33:a0:6a:93:77:73:3e:32:e8:a4:a1:dd:0f:b0:4a:
16:fe:b9:dc:75:09:99:93:2e:a2:a0:42:71:a1:7a:
d8:ac:d1:bd:de:d4:d9:23:71:b2:a0:22:32:2c:27:
01:05:71:d3:1b:72:7f:97:07:ed:78:7e:54:2e:b2:
f2:9b:68:eb:b0:d4:51:9d:1d:18:97:3e:fc:18:e3:
60:b6:23:b5:0f:00:15:cb:02:ee:e5:41:e7:b5:b9:
d4:66:fb:64:4a:96:33:27:aa:fd:0a:b3:4c:d3:97:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:5C:7D:24:AF:63:19:3B:D8:DC:FF:82:6D:9B:0C:28:A3:07:A7
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a4:4c:7a:3c:32:13:e4:2f:4c:de:e4:0c:fd:51:8a:c9:19:
74:58:23:18:90:af:08:96:b4:36:ff:74:0d:dc:3d:91:2c:bc:
99:8f:67:ee:5e:9f:86:b6:77:d4:31:4e:cb:5d:5c:c7:b6:37:
66:a1:86:9b:07:75:9b:dd:1b:e1:0f:a7:bb:21:66:c0:af:81:
27:88:01:0f:8f:a6:a4:ca:5f:c1:1f:30:be:bd:85:81:6f:81:
82:5e:8c:99:dd:2a:7a:8f:0c:5e:1f:ab:6a:64:f4:57:8d:59:
55:b9:f6:eb:4f:f0:24:1e:77:15:e7:1e:e7:71:12:5c:c0:0c:
e4:c3:05:d0:7e:e5:57:1e:3f:e5:e4:28:60:84:97:80:be:9c:
ef:77:44:84:30:35:00:68:d4:69:de:f4:1b:bd:4f:d5:0c:17:
f3:96:92:77:8f:8e:44:92:07:ce:4b:fc:5d:79:f7:1a:24:ef:
b1:94:d6:76:ec:fa:ca:5c:2c:13:85:e1:a2:a4:a5:82:4d:bd:
21:b8:e9:7f:af:70:16:bc:ea:f6:89:4c:3c:2d:19:77:2e:60:
d0:bd:ba:16:13:55:c8:7b:13:ff:41:a1:21:b3:37:b3:58:69:
77:b0:1e:04:5c:b6:ba:cd:09:48:14:e8:f5:ea:6a:69:60:17:
b8:cb:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:01 2025 by rpki-client