Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: G/ru344nvXYN+fwjftXIlXanrUYOKCKf49UrHTMSxcM=
Subject key identifier: E4:D1:5E:B9:C5:2D:16:D6:1F:96:55:64:E4:D7:E4:C7:FF:41:8F:AF
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 0194BD4EBF4907FF9D15C51BD1394025A749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 10CA
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: k2iMkw/xrJjEa2JnZuqBNwhWcXKKQmg6zAm8/gmsa3U=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bf:49:07:ff:9d:15:c5:1b:d1:39:40:25:a7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=e4d15eb9c52d16d61f965564e4d7e4c7ff418faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:dc:64:00:99:e7:12:8e:10:e7:3c:f1:ec:
7d:a2:ab:63:67:62:02:17:7e:2e:91:06:93:a1:fe:
f0:f1:a6:e3:50:3d:66:53:fa:40:ea:3c:64:51:af:
85:ac:16:b2:80:17:82:77:0c:b5:36:0d:f3:c5:df:
a4:30:e9:d0:d3:c7:3d:e8:b6:05:82:0e:69:a2:a4:
0d:08:32:64:d9:6a:c2:8e:af:b1:b4:ab:02:4c:47:
0f:cf:1c:94:37:f2:05:63:07:75:cb:f2:9c:89:af:
1f:4f:e8:a0:64:cf:01:26:30:0c:9f:1b:8d:c4:f1:
a3:ec:80:34:46:a9:35:9e:26:4f:08:3b:75:e2:6f:
7e:ee:53:64:bf:33:de:08:33:af:bc:29:4e:af:48:
95:64:3c:4c:42:bd:4a:fa:54:57:15:91:01:5e:2c:
90:e6:13:e6:c7:43:41:07:d5:54:e0:13:b0:aa:ef:
5e:37:78:f1:4a:af:28:26:d8:fd:37:2d:33:cb:8e:
ca:1b:b3:f7:2f:37:41:9b:9e:bf:23:9a:cb:27:7e:
ef:94:d0:90:97:f8:ac:03:05:41:79:d1:72:3f:b9:
be:0e:7f:73:f1:e6:e0:cd:b7:d2:74:72:5a:6c:a8:
35:1b:5d:d7:0d:5f:b4:b8:e1:ab:cf:32:fb:78:71:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:5E:B9:C5:2D:16:D6:1F:96:55:64:E4:D7:E4:C7:FF:41:8F:AF
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f6:0a:99:c9:f7:05:a1:87:11:eb:25:96:af:43:9c:80:11:
8c:eb:be:a3:bd:bc:41:37:80:10:f7:59:dc:e4:25:a1:ee:ec:
e2:41:49:d7:b3:73:27:bd:ba:5a:47:46:38:9f:fc:bd:72:94:
52:40:47:e3:e6:71:84:30:b5:22:0b:17:72:14:5b:58:44:d3:
e4:21:ee:15:66:34:ed:a4:cc:c0:49:c1:94:38:6c:28:83:be:
2e:da:c6:53:76:f7:b7:26:e9:c9:5d:62:ea:e9:04:76:ce:7a:
55:64:79:ff:22:3d:ce:41:b4:7b:e3:ce:b2:74:7f:40:9b:18:
5d:28:ce:65:c2:40:18:2b:f9:0c:a8:aa:05:dc:d3:c1:b2:da:
2b:cf:29:41:05:3d:3a:6b:11:1d:0c:b8:11:32:73:30:d7:99:
e1:df:f0:2e:9d:8b:2f:d7:a5:f6:10:5b:ea:7a:1f:ff:fd:01:
2b:8b:b1:41:f5:f1:7c:4e:4e:3f:31:51:ca:e3:bf:3f:36:a2:
f6:4f:e9:b4:97:8a:8d:6e:1b:82:ec:da:90:17:f6:e5:0f:0d:
65:0d:5a:55:4c:10:14:8c:f6:c7:7e:d0:e8:6d:33:3d:f2:0c:
bd:a4:e0:84:a3:77:6b:51:41:46:da:24:06:f3:95:99:f8:04:
c6:88:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:19 2025 by rpki-client