Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: rxeqI2C8YvZCjICRxXWqIq7yIWTdVkc7RHjOewjHyv4=
Subject key identifier: 0F:BC:8B:4D:1D:FC:56:38:D9:5D:57:8E:EB:99:F1:87:F0:DA:C4:DA
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 0194BCE08E96DF240BDCF84A816AFBEA0BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: xQmVCNvIXW/wnLpl36ca1k0xGnnMw3YttFTVsnLD13g=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8e:96:df:24:0b:dc:f8:4a:81:6a:fb:ea:0b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=0fbc8b4d1dfc5638d95d578eeb99f187f0dac4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:37:50:73:73:d3:9f:7c:30:86:5f:64:9e:
55:db:fa:e9:4d:2a:a9:e0:19:b7:d2:51:cf:30:28:
bd:d9:20:56:7f:50:92:31:64:f0:2b:c6:5c:93:16:
43:12:f1:ea:f9:e8:36:67:a2:84:53:e3:ee:fa:b5:
be:f9:24:02:77:43:a4:73:46:c9:38:ec:06:95:6f:
90:17:f9:a9:28:73:fd:04:19:7a:3a:96:77:1f:92:
45:72:7f:a5:94:01:ad:c8:3a:7d:e0:ba:a4:e1:47:
b6:be:89:39:47:9d:d5:4a:0c:aa:22:47:f1:60:34:
3f:8b:22:2c:5e:2f:11:68:43:73:f6:5d:c8:a2:ac:
9e:39:d4:a1:d3:fc:10:5a:91:20:c6:37:35:bd:18:
2a:12:b2:06:33:e7:a9:bf:14:44:c8:9f:a3:7b:98:
2a:2d:65:89:61:0e:eb:d9:72:0a:49:2d:9a:1c:dd:
78:d5:17:41:d9:cf:f1:67:f5:dd:71:ba:e1:f6:fc:
11:d3:c5:a9:72:d8:cf:f8:e5:4b:2b:95:18:41:ae:
f0:ce:5e:8b:51:f8:45:46:e2:06:d7:2d:63:4f:db:
39:e2:4b:46:b3:b0:c1:32:35:cf:be:0b:74:70:42:
8c:d5:a2:e2:84:39:5e:cc:c8:bf:16:14:6d:23:f7:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:8B:4D:1D:FC:56:38:D9:5D:57:8E:EB:99:F1:87:F0:DA:C4:DA
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:5c:fa:ff:90:a5:e7:ca:63:2f:f4:36:c8:89:f8:98:26:
96:fa:ac:04:c5:88:96:b7:62:fe:c0:7c:e2:f4:c8:b3:ce:fe:
89:8c:4f:44:98:e4:76:92:4d:36:2a:1d:91:75:03:8a:29:9a:
c7:41:82:a1:37:d6:e2:ec:40:1c:8b:41:3f:82:66:4a:fd:96:
b7:eb:dd:7c:07:ac:68:c8:6a:27:26:cf:0c:a6:71:74:09:75:
96:24:f9:ea:f6:66:2e:c0:f8:6d:02:2a:e1:f4:2c:e5:4d:13:
3b:f5:4b:4f:8e:e1:55:c7:14:ff:3c:2d:b4:75:1a:d8:39:ad:
0f:28:fd:ad:74:2c:f8:79:8e:71:f7:8c:84:7e:bd:68:80:36:
d3:33:cd:5b:0f:50:2f:a4:10:7e:d7:dd:22:2f:f9:78:f3:61:
5d:90:dd:89:9b:90:b5:84:aa:15:4c:d1:5f:34:d6:48:96:46:
75:38:7a:45:14:88:5f:7f:f2:52:9e:0a:6c:99:6b:72:99:80:
03:79:68:b3:e7:96:7c:30:89:44:cd:89:a9:fe:0b:b9:1f:f5:
4e:4e:df:3a:74:be:7e:b6:03:37:71:f5:0e:51:57:a1:64:df:
e4:41:79:2b:2f:77:1f:9e:8d:70:9d:80:2b:e8:cc:51:7c:b5:
25:cf:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:14 2025 by rpki-client