Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: JDLl9YZluaShesQZRkAL17lni/IVNHdsScoIR6CJYWk=
Subject key identifier: A1:0D:BE:2C:B1:1D:0E:D5:23:5E:F2:B5:EE:30:CF:CF:E8:45:C0:73
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 0194BBCECE42589754B52B29FAA055D6D97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1299
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=)
2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=)
3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: PC1W7TUZqlnZV7G/JRjCJrKsWBHN2OgjNhShwZcAKD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ce:42:58:97:54:b5:2b:29:fa:a0:55:d6:d9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=a10dbe2cb11d0ed5235ef2b5ee30cfcfe845c073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:5b:46:43:70:d5:04:50:c4:dc:99:e6:0d:
49:2c:dc:a5:59:23:57:48:79:05:86:6c:40:d5:8c:
2a:3e:21:12:ed:cf:8e:35:86:95:de:fe:46:c2:4b:
1e:45:0e:d6:4b:15:8e:f5:2f:83:c3:ba:55:9a:5b:
13:f1:55:48:65:95:96:73:a4:14:38:7e:8f:bf:53:
76:22:57:ac:11:a3:0f:eb:84:78:67:84:c0:2d:03:
56:fe:4f:6e:e0:37:dd:8e:c7:79:3f:7c:fb:63:bf:
89:68:5b:cf:95:8c:24:ff:a2:1e:ec:fa:bb:8c:ce:
70:dc:16:30:12:86:85:c2:61:88:ec:55:28:bc:70:
4e:f0:3d:44:c9:38:70:ef:6e:a8:70:bd:86:c2:a1:
2f:ad:e1:5a:3c:43:f0:91:cd:53:41:3b:b4:38:47:
b9:4f:75:10:f8:d7:c3:11:13:0d:3e:6b:97:81:4f:
eb:9a:c3:21:85:cb:0a:c0:7f:89:14:39:9c:d4:dd:
40:af:c8:35:52:65:a7:43:f8:29:40:6e:78:25:98:
fc:83:4f:f3:1c:d4:cb:fc:32:ef:c5:fd:b3:fe:2f:
0a:39:41:c9:ec:7f:0b:dc:80:0e:5d:de:2e:0a:d9:
ae:3b:0c:5b:e5:86:a6:82:35:f5:f1:d9:58:2f:28:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0D:BE:2C:B1:1D:0E:D5:23:5E:F2:B5:EE:30:CF:CF:E8:45:C0:73
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fb:c8:74:51:d5:05:77:e9:0d:76:af:c3:ea:24:cf:88:4a:
d6:83:3d:8d:a5:84:92:a3:ff:23:b8:0a:b7:19:74:4b:1d:97:
8d:5d:8e:33:63:9a:91:62:f7:2c:8b:9d:58:86:12:60:ad:e8:
a1:d0:9d:40:f7:bf:3d:d3:e3:5b:a2:94:73:57:a8:68:8d:15:
c7:77:5c:a5:6e:ad:a0:75:6d:92:fc:77:bb:fc:1c:84:ea:bf:
23:c0:ff:b6:e4:b8:8a:ae:26:19:e6:1c:79:5d:0d:f2:83:75:
2a:07:54:b7:85:92:a9:61:d1:24:38:4f:7c:cb:9c:a9:73:a5:
6a:be:8a:99:03:68:5d:70:44:a3:a5:cb:df:48:8a:0e:93:3d:
54:15:a6:1d:2e:58:31:38:56:79:c3:73:c4:69:6b:0d:9d:c6:
1b:74:ac:81:f9:bc:d2:eb:08:72:b2:55:dd:25:84:22:f0:be:
e3:01:f9:63:a7:f9:c0:a8:b4:e7:8b:d0:81:fe:cb:f8:d2:12:
73:ac:67:02:13:4b:99:80:f4:d8:16:36:1d:24:e8:e5:7c:dc:
42:a4:d8:d2:3b:40:72:d8:b7:90:77:96:a3:e3:e9:a4:db:88:
86:ce:73:95:67:ca:55:73:67:63:bc:50:a8:7e:be:00:41:84:
c8:ab:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:42 2025 by rpki-client