Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: BuRzTR2cuoqEiiXWjkCrIUgRtVjteq1Q+0Zt9vRBt/g=
Subject key identifier: 4F:DC:BE:F1:9E:86:E2:3E:66:03:CB:99:C0:16:DA:7A:81:F8:56:6A
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 0194BD4E9E19CE9E8966BAE48C0B2CA646C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: kxgTlg0rE3Fd6xSC9nre3N2sr5eN8VoWXAlncBYiuP8=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:19:ce:9e:89:66:ba:e4:8c:0b:2c:a6:46:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=4fdcbef19e86e23e6603cb99c016da7a81f8566a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:ea:8f:7f:af:3f:b1:e7:9d:bc:f1:ff:0b:
2f:5f:04:e8:b0:41:37:0f:3c:b4:14:fc:85:76:9b:
f8:5a:0d:b7:f3:3c:e0:3e:5c:84:d6:c0:3b:c8:c3:
f5:44:35:41:9f:c8:b9:dd:a9:6d:29:d7:39:91:00:
73:25:2e:63:07:2c:f6:ca:c3:1a:6b:bf:75:63:9f:
e4:1a:81:4b:57:62:f6:0a:22:2d:0a:ee:d0:a5:3b:
ec:17:7e:d8:44:11:db:ba:c5:38:cc:7b:a7:e8:f4:
8f:74:65:7a:89:6c:5f:d0:c3:90:67:4c:ca:25:5c:
6e:c3:c8:02:d3:7f:56:db:d8:b2:2e:fd:77:2d:38:
29:28:30:df:99:f5:b0:2e:4f:8a:51:e3:17:e0:a2:
16:e2:58:87:93:af:07:a2:53:bf:ca:81:ce:03:6c:
34:f0:ae:20:47:67:31:31:50:89:d5:1b:c8:2e:42:
24:e7:ee:0b:2a:57:65:76:aa:05:cc:9a:02:77:6c:
4e:4e:92:c5:ba:82:05:20:ad:81:c2:8c:50:18:39:
30:26:69:f4:8a:4e:7f:84:a5:2a:a8:2b:40:71:07:
52:3f:d8:00:0c:a9:c3:1f:d4:00:e3:ed:b6:19:6b:
c7:30:51:11:46:a8:22:2c:de:7c:e1:62:a1:fd:f3:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DC:BE:F1:9E:86:E2:3E:66:03:CB:99:C0:16:DA:7A:81:F8:56:6A
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c1:99:7e:32:c4:68:06:4b:c6:2e:a6:23:a7:98:a7:2e:d7:
a7:40:e4:5b:13:e0:81:40:c4:4e:6c:51:0f:27:90:ba:52:64:
aa:bc:35:ba:85:f8:0e:c6:dd:25:ab:3e:29:45:a8:22:50:c9:
21:9b:d8:4a:36:e3:1e:5d:4e:00:cd:8a:c6:80:ec:36:ab:44:
be:12:6f:27:fc:a6:e0:b0:5d:29:b7:29:76:8e:ab:bd:64:20:
43:04:a6:31:16:6e:cc:38:4a:cb:86:b5:77:3e:bd:4e:bc:e7:
89:4c:8c:e4:90:c4:2b:d2:cf:85:0e:0e:93:46:db:f1:d7:ec:
08:12:0f:52:be:5c:2e:79:ff:48:1c:7b:d3:8d:59:93:46:69:
49:4a:4f:0c:7e:5c:b4:52:5f:ac:8a:a6:34:87:41:79:06:71:
68:45:a1:79:0c:c7:72:3c:5a:e0:1f:f4:06:fc:ce:93:a7:69:
67:dd:fa:0a:ef:6d:65:e7:0f:38:4e:bf:e1:b1:35:fc:7c:45:
7f:90:eb:74:56:8b:29:03:21:42:6e:e6:d2:ad:59:d6:10:ea:
dc:8f:38:fc:6c:19:40:f2:f7:d2:7c:5a:f1:4d:cd:2f:a1:71:
b5:80:5c:92:7a:1c:19:ca:9a:a0:00:91:a5:e2:3f:11:68:e2:
c2:00:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:02 2025 by rpki-client