Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft
File: kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft (raw, json)
Hash identifier: lEpYaRo9vBv2zEmpcWZrxouA92ut4NH4RVm8Iys7dFc=
Subject key identifier: FF:5F:A6:7E:3A:60:F3:17:B7:82:BF:3A:31:CF:8F:69:37:3F:7D:E7
Authority key identifier: 90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
Certificate issuer: /CN=90ccd913a99bafd893e07ba968a67434e3df5420
Certificate serial: 0194BD859035462AEA3792A913DE0070F033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft
Manifest number: 1383
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 7ma8rm9Nc8aP0i9rOur_HEzgHJs.roa (hash: GInuicNk1jMv1+rnjCpEDF87yGDttTl9tUwBgJS9KiA=)
2: kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl (hash: 7UAQepzFBebELjxOIMsjYFp+VX425QKSEUDh0xmeJYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:90:35:46:2a:ea:37:92:a9:13:de:00:70:f0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ccd913a99bafd893e07ba968a67434e3df5420
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=ff5fa67e3a60f317b782bf3a31cf8f69373f7de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:26:cf:20:01:4f:d3:fe:d3:d6:51:f5:af:
39:ea:40:2f:74:8f:ca:8a:f0:9e:e4:33:8f:e1:d4:
90:7f:16:63:f3:3b:e5:ea:3e:e2:b5:a9:e9:ee:33:
6b:b1:df:f9:ed:c1:e8:a5:89:1b:5e:4c:a6:2e:55:
37:06:29:5c:ad:3c:93:a8:08:31:90:bb:79:22:a5:
19:da:6d:4f:2f:d8:c1:be:44:a7:a0:aa:eb:3b:a0:
8b:7f:c1:56:89:c4:79:5c:ee:15:27:da:3c:23:12:
10:75:5d:70:37:4b:b7:38:49:56:7b:8e:1d:91:1a:
b9:5b:a9:c4:92:7f:27:fa:60:86:e1:e7:8b:14:29:
45:17:a8:e3:a8:a4:e9:ff:9b:69:91:f0:cc:f5:5b:
ad:a7:75:17:72:9c:f4:90:56:a4:ae:9c:d1:1d:2e:
74:5e:c3:5e:96:80:75:ff:7f:7b:a9:8f:ae:ae:3f:
4e:c4:f1:82:a4:e5:de:59:c7:f1:bc:99:ae:d2:93:
a3:e2:c3:37:8d:af:32:d2:58:ea:b2:78:9d:fc:5c:
45:16:5c:75:07:f8:6d:71:04:76:07:d9:24:1a:92:
96:a6:64:44:95:a1:08:3e:b3:9e:23:fa:5a:89:18:
b4:8a:45:16:bd:51:4d:39:47:0e:af:03:58:ae:de:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5F:A6:7E:3A:60:F3:17:B7:82:BF:3A:31:CF:8F:69:37:3F:7D:E7
X509v3 Authority Key Identifier:
keyid:90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6b:b1:81:8b:c1:fd:c1:5b:3e:36:00:7b:5b:5a:c3:c7:58:
68:8b:91:24:8b:89:b1:e2:e6:b8:65:e3:9b:5c:88:d1:dd:b8:
c7:ed:7e:54:d7:2c:83:6f:4a:7a:7b:80:70:2e:69:f1:e6:93:
5d:0b:58:e6:50:19:5b:bc:f1:88:43:b7:e7:2c:7a:90:23:c6:
85:a4:18:bf:08:4b:e7:bf:f1:0a:56:fb:c2:e4:a7:23:e8:c9:
bc:89:61:99:f2:2f:3d:fa:0d:36:c2:2f:dd:f4:72:ef:ac:df:
25:af:f9:af:d9:21:b4:17:95:ac:7e:c3:b0:0a:de:26:85:7d:
c7:15:30:ff:54:89:ac:51:c0:bb:fd:7c:b7:6f:b4:6a:79:4a:
8c:b1:82:a4:70:28:75:2e:3c:80:ce:89:2f:e4:78:9d:e8:75:
c9:f7:31:4c:f5:7f:6b:4d:31:b2:68:29:d0:d9:74:df:a3:c6:
2d:67:76:f2:f7:4b:6e:ba:f3:8c:5c:58:23:a8:65:b0:a1:96:
bc:78:87:bc:7a:28:48:43:6b:c0:f4:23:ea:dd:c1:9d:fb:af:
18:34:00:ba:f5:cd:47:ed:c3:4b:8b:2b:ac:ba:32:db:ab:b1:
10:d7:a9:ab:e8:21:86:25:c2:48:4a:6e:ef:c2:c4:a2:f3:3a:
b3:ec:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:45 2025 by rpki-client