Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: X/GAg4hH134/vxIjCsOnhZ29a0BoHixECsARL/FCH+U=
Subject key identifier: 9D:14:D7:14:6A:CC:4A:19:5B:88:AF:67:4B:B4:AF:1B:E2:CF:1B:84
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0194BCE0D7F0CDB2906F163700BF756828AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: UI6npzgdrrdQF2OwJJlI8sTTE5huRyaK+OT8JG+OzpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:f0:cd:b2:90:6f:16:37:00:bf:75:68:28:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=9d14d7146acc4a195b88af674bb4af1be2cf1b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:78:a2:39:27:94:79:97:22:8e:f6:e6:fe:
d6:04:d7:f5:bf:82:1f:fd:02:64:23:4d:d2:d7:ce:
52:4f:ca:ae:8a:79:08:15:57:fa:82:6b:c7:50:67:
68:c9:17:ab:f1:17:9d:bf:e4:cf:5e:82:a0:db:71:
35:b0:1f:c4:fb:62:62:d1:92:72:ff:ca:14:de:ff:
4d:7e:f1:6b:88:46:d9:23:3b:46:27:c1:56:34:40:
86:86:1b:89:3a:d6:f0:1c:06:59:1a:05:6b:d0:f9:
d1:d7:ff:40:04:6c:0d:57:f0:3a:f1:fb:33:19:f7:
06:5b:e0:50:25:e5:cf:b0:c8:ba:e6:33:8a:a5:4b:
64:bd:dc:e0:46:a8:f3:33:e8:78:2d:6d:39:93:09:
74:4a:3a:37:bd:cc:cc:4a:cb:ac:f7:4e:d8:f6:21:
de:09:ca:47:a0:be:58:24:6d:90:5f:03:d9:d5:a6:
0f:2f:c5:b1:be:1b:21:52:26:7e:5b:5c:21:67:67:
fa:0a:c3:72:76:55:a5:63:db:12:a2:ca:dc:dc:fc:
92:79:10:27:dd:dc:16:07:45:3c:c6:e6:3e:0a:3d:
5f:c4:69:9c:42:d5:19:83:b9:cc:33:8e:06:1c:ae:
59:12:4c:42:26:37:b0:39:bd:c1:e1:15:12:0e:13:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:14:D7:14:6A:CC:4A:19:5B:88:AF:67:4B:B4:AF:1B:E2:CF:1B:84
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:11:5b:3d:dc:f2:97:00:5f:76:51:e5:d5:14:b7:d1:b1:b4:
ad:27:da:ef:26:10:84:5c:5c:ff:7d:1c:e7:f8:7f:57:54:8f:
b8:4c:b4:42:d1:d8:8f:23:5b:7f:8a:88:a0:76:6f:94:80:af:
0b:28:21:cf:93:c1:6b:9b:09:c0:34:ef:d0:da:1b:da:4f:a3:
c5:40:ce:91:a4:84:71:4c:06:88:54:ed:d2:27:00:9e:e9:a2:
49:93:78:12:e0:60:eb:79:64:f8:68:d8:88:9e:58:3a:34:2b:
e7:e5:be:ff:70:6b:f7:42:6b:4c:a1:c1:b7:d9:03:47:ea:a0:
a5:a0:dd:e5:70:a0:fd:cc:1f:90:e4:9a:30:b5:4d:85:e7:18:
83:9b:dd:18:06:dd:7b:cc:ad:a7:b1:10:63:37:ce:6b:9e:67:
7c:12:82:14:b8:2a:85:07:e2:3d:ab:a4:2f:a9:c3:ea:2c:83:
81:08:dd:97:af:a8:cf:72:a0:4b:66:f8:9b:95:f1:19:ce:00:
96:7f:14:99:28:5e:6d:2c:52:50:b3:4d:98:52:d6:dd:6a:15:
77:5f:13:14:41:2f:ab:ce:58:9e:69:c3:25:6f:c6:ca:5b:4f:
c3:85:2a:e3:0b:37:06:e5:03:e4:81:b0:35:f2:0c:31:54:ec:
38:3b:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:14 2025 by rpki-client