Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: C9AynPhs7BAh3jC68qyMomARSQSFeG6/J60fx1czqRQ=
Subject key identifier: 70:5B:34:A7:7A:0A:F8:E8:5F:52:D7:0A:72:FB:AB:5F:BD:A4:12:7F
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 0194BBCED167B672DE96B1B8FAAE3B28E61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 03E7
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: RJJjU2VQBiXT6SNrX2V8iRV7v/vW5uENjLOcG6G0nyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d1:67:b6:72:de:96:b1:b8:fa:ae:3b:28:e6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=705b34a77a0af8e85f52d70a72fbab5fbda4127f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:a2:e0:3e:00:d9:e0:10:86:97:18:6e:47:
e4:fa:99:a4:69:2f:72:31:2d:5f:d5:61:a6:5d:6f:
32:89:8d:58:c0:e7:9d:d2:12:81:28:b1:6f:b0:97:
19:4d:86:f4:e7:51:51:39:ab:99:52:68:da:1f:01:
de:ef:68:cf:dd:9d:43:87:4e:c4:1c:6f:1f:72:5e:
43:de:b6:79:ce:b9:bb:8b:ca:c4:90:7b:a5:e2:37:
68:22:a1:b2:36:9f:f9:a5:6c:2f:3b:e7:aa:32:d0:
a6:0b:04:e0:5d:ab:43:2d:8c:d6:35:0a:95:f9:bc:
1f:67:ef:78:eb:a1:8e:12:61:ba:ed:69:fa:7d:d5:
ed:fb:96:d5:65:2d:e6:d1:d4:12:01:b0:39:c3:61:
16:d6:54:fd:06:fc:8d:c7:f1:b4:d0:1d:4d:d5:2b:
e8:9d:0c:3c:a7:16:64:d6:81:ad:0a:ca:b8:1f:90:
0b:ae:be:bf:6d:01:5b:e6:87:c2:24:7d:63:d4:dd:
b6:62:f9:c8:57:3b:26:e1:56:c9:19:5d:21:2b:47:
0c:97:ba:2f:13:a7:cc:7b:3a:13:81:1c:b8:82:32:
86:40:a5:4c:dc:6d:c1:94:3a:7e:71:1d:c2:26:94:
98:60:7f:5e:dc:31:98:81:23:82:ce:06:9b:26:79:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:34:A7:7A:0A:F8:E8:5F:52:D7:0A:72:FB:AB:5F:BD:A4:12:7F
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a0:90:ee:6c:77:ab:8a:16:b7:e6:09:94:74:07:86:f1:86:
a1:ec:23:7a:a2:86:84:7e:d7:e8:19:cd:b1:0b:4d:a9:5c:23:
83:e6:fa:64:b9:05:1d:48:e3:25:7e:39:e8:de:d8:ce:a3:28:
e8:da:f0:e7:81:ab:10:75:4f:2a:e0:87:ca:cd:36:59:4c:1d:
74:0f:48:b7:ff:56:49:57:35:8a:db:54:ab:f1:87:ca:41:8b:
f4:00:ec:5e:42:b2:db:1d:c0:ad:2c:74:82:07:5d:de:1d:4a:
d6:0c:80:d2:59:cd:c6:29:f6:05:fc:bd:14:33:17:8b:0f:a6:
d7:24:c7:5c:fd:cf:6d:2f:3d:79:6d:09:e7:c0:83:00:40:3a:
b0:84:4e:bd:1a:c4:0d:f7:d8:34:02:65:cc:e7:ad:b4:fb:25:
b0:da:0e:4d:3c:95:be:43:e5:c4:be:a9:3b:03:c6:5c:84:c2:
e5:03:79:fb:85:10:e5:21:98:11:f2:2f:6b:99:71:47:e2:a0:
59:bf:a5:aa:04:3c:0a:b3:b1:80:79:10:6f:ee:a4:5c:43:64:
46:2c:65:ad:ee:7e:11:6d:f2:9c:16:94:be:ca:e7:66:04:29:
6b:6d:03:8f:9b:4f:79:7b:3f:87:b5:6e:01:c4:c7:ff:ed:f1:
e1:73:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:52 2025 by rpki-client