Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File: KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier: YA4tEqB+gdJU/wcS/4AdUpmj3jwBjYZ0og1g5e14K9w=
Subject key identifier: 97:8E:AD:8D:3F:C1:F7:C9:C3:F5:25:8C:5D:52:26:F9:9C:81:ED:49
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 0194BCE09CFA75210A530537308B6A2EB8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: 0l-uuc0ta--zZGivAH1vRPmB_34.roa (hash: N3+ixN59bx1CAdzBVH5dBhTA7XSG6tSZGbX7+qQ9kkU=)
2: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: Om+9KoX6DA8Z1kuZsHv6PtD6QaZCOjAEpJdYFP/hCc4=)
3: ZjCHU3LEGq34M383f_KumGN_eB4.roa (hash: YxlGAgs8g3hAPxhoH9iP3cLnbEfE9zXQU/84spENz30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9c:fa:75:21:0a:53:05:37:30:8b:6a:2e:b8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=978ead8d3fc1f7c9c3f5258c5d5226f99c81ed49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:ca:ce:45:fd:60:a9:25:b0:ae:5c:ee:5e:
68:ef:3c:ab:ce:62:18:36:7c:0d:60:c7:18:98:d6:
19:98:0d:b0:28:36:f6:7b:24:50:da:e9:e8:1d:4c:
9b:68:83:83:48:36:5c:b1:ed:01:bb:e2:af:3c:55:
76:3d:2a:36:99:7d:49:5c:e8:e5:5e:99:f1:c4:ae:
05:f6:19:60:1c:4c:7b:73:7c:4b:b2:f7:67:18:5f:
9d:54:f8:a6:f1:26:c6:a6:7e:7d:b6:35:10:e4:f7:
4f:c2:e4:4c:b2:da:3d:da:ab:45:aa:e8:fe:c3:0e:
49:87:ed:33:9d:9b:52:81:dc:b5:18:74:9a:57:ae:
08:c7:a5:3e:03:e1:ad:c8:c3:ff:93:1d:07:fc:ca:
bc:a8:87:0b:66:82:cf:88:59:a8:da:af:a7:bd:e4:
83:a9:e7:7f:17:bc:7a:c9:25:0e:09:54:51:af:cc:
8e:29:a1:25:29:75:d8:5e:24:6f:cf:ac:1a:c1:a2:
f8:ac:92:bd:f9:fc:13:6d:2a:3a:ee:72:31:75:b9:
4a:45:f3:54:27:d4:dd:ff:4f:0b:d5:ca:3c:b3:1a:
39:3e:bf:aa:bc:4f:ce:f9:ca:0a:be:7b:4a:14:62:
2e:e8:8c:5b:26:67:6e:1d:1c:38:cb:95:17:65:c1:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:AD:8D:3F:C1:F7:C9:C3:F5:25:8C:5D:52:26:F9:9C:81:ED:49
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:06:a7:b1:b5:5a:64:6d:d3:34:8c:73:89:6c:55:90:1c:
e2:db:f7:68:5a:a3:e6:9c:a3:50:39:1b:c3:f1:1e:a1:f3:95:
1b:7d:5e:65:6d:b2:18:c9:3b:0c:50:eb:f3:fb:01:51:d1:e7:
7c:1e:4b:ab:3a:3c:ac:af:9b:bd:9b:8c:3f:61:3c:19:fb:7c:
6f:c6:12:cc:29:d0:ea:33:71:6b:c5:3e:ac:8f:3c:0d:78:68:
d0:7f:cf:6b:7d:b0:88:09:67:3e:b9:67:3f:c4:64:f7:ad:1e:
4a:33:a0:40:03:54:29:5e:96:83:95:b1:4f:8d:25:68:cd:01:
cc:ad:61:a8:07:d3:28:10:0f:54:3a:a8:b9:c6:b1:fa:d0:28:
4f:dd:ac:12:77:43:44:12:85:a7:c0:18:d1:14:38:89:b8:39:
0c:22:7c:86:08:c5:3d:aa:e0:6a:c6:3d:42:04:68:88:08:fa:
c7:e3:67:b2:8b:f3:21:e5:b3:3f:9f:09:cd:ef:c7:ac:c5:36:
fb:2d:bc:9f:9f:29:2f:20:59:66:6d:95:51:f5:db:df:b3:ea:
a1:5e:46:b7:b1:b7:9e:72:6d:9e:ee:75:67:65:d8:82:f0:40:
49:34:1f:29:f6:53:9c:c8:aa:3f:5e:7c:98:ab:f6:6b:a9:8f:
3c:d4:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:02:44 2025 by rpki-client