Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: L8lFofBIV2Tn161mspGo02ueTL44p0mojjpeLrsM3XY=
Subject key identifier: 4E:22:DE:32:C8:67:0E:DC:CB:DB:D6:69:D7:BF:F3:31:DD:41:99:C7
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 0194BC72A2674E26C93B5A4E4E1F185E2944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 0E61
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: gD7FA1AcCK3IHpv+j+QLnZaDPs3Hs1t5ArPJLrNr3f4=)
2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:67:4e:26:c9:3b:5a:4e:4e:1f:18:5e:29:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=4e22de32c8670edccbdbd669d7bff331dd4199c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:67:17:48:7a:5f:fd:ca:7d:15:84:b5:f4:
2f:0d:24:84:19:91:11:7c:59:fa:40:af:5b:98:ce:
45:a4:ec:ae:49:76:52:2f:8b:9e:4e:79:4f:a0:8d:
fa:6f:be:05:8d:61:59:9a:9f:4a:f7:a1:30:9a:59:
1b:e7:c7:6e:92:07:40:7b:d1:ac:00:a4:c2:4d:d1:
cb:d3:13:5a:56:6c:b0:ae:31:43:b0:3e:36:43:84:
97:69:1f:68:20:0b:ca:4f:10:11:8b:8a:37:e8:89:
f2:0c:16:ca:42:b2:1a:3a:d8:1e:49:35:19:d9:59:
02:61:25:c4:92:da:3d:67:c5:61:f9:68:16:ff:a4:
2b:25:15:95:b4:72:0a:65:e2:70:b4:9e:7a:c8:6c:
0c:7d:b8:57:f2:59:57:a4:4e:e4:34:ce:54:a4:c9:
0d:f9:50:47:55:00:e1:47:99:41:27:20:05:df:d2:
c0:53:f3:11:44:08:b8:2b:43:e5:f8:6d:a6:12:fc:
b3:90:72:e5:8c:d5:ae:ea:d4:f2:b7:c2:61:3a:76:
a0:16:43:d2:91:2d:bb:f8:bd:5f:02:74:07:44:98:
54:cf:f3:51:79:83:8f:18:7c:cc:7b:be:db:d2:b0:
09:e2:28:51:2b:07:23:1c:0b:1b:ab:cb:0a:5e:17:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:DE:32:C8:67:0E:DC:CB:DB:D6:69:D7:BF:F3:31:DD:41:99:C7
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:26:2a:af:17:bf:d9:48:fa:06:dc:67:0a:d8:ef:89:77:8e:
0f:43:c0:63:00:26:93:6b:39:ff:b6:aa:d1:69:96:37:d6:a3:
1c:86:74:8a:31:17:2b:60:8c:77:4d:98:e5:78:74:47:43:9c:
2b:15:2c:48:3e:ea:a4:99:87:3c:3a:da:75:03:81:ea:5b:53:
a3:86:8c:30:6f:c2:07:91:ce:a0:e1:b1:e5:49:30:8f:67:cf:
60:76:dd:8f:46:c2:f8:0a:a7:2f:57:3b:d7:2b:c2:86:dd:98:
31:e2:5e:dc:6f:b2:64:7e:f2:55:98:ad:5d:4f:25:dd:dd:4a:
65:be:8c:d2:95:47:d8:b7:c8:9d:f0:46:e3:0d:6a:51:50:4f:
9a:de:c9:e9:0d:7a:3a:60:d7:c5:20:92:64:30:88:d0:e0:e3:
9f:30:5a:af:d6:21:56:3c:54:fc:83:06:c8:4d:e3:c1:41:ca:
af:02:eb:24:35:15:40:43:e0:16:06:34:2c:c3:e9:6c:e7:a8:
57:87:af:91:5c:55:07:d8:07:be:9a:30:e2:c6:37:2a:5a:ce:
5d:ed:aa:5d:03:37:e1:94:2e:25:57:8a:69:81:41:ff:05:ef:
e2:80:68:e0:ad:dd:8e:c0:59:56:ce:dd:76:7c:71:47:5a:f6:
e7:60:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:02 2025 by rpki-client