Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: edGHZSdZT1ZpH+Wnyp8VOKTeijZvq2JDhdp+JJ8rN50=
Subject key identifier: 6D:39:2D:21:83:03:E7:47:6E:69:2C:7B:37:FA:B8:96:8B:A0:8E:E9
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 0194BCE0B62510B8A37201A86C36E37CE359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 08CE
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: sT3zVncUae4ybvMMPzyhaRJYIdQsVe01TXxS+B5UX94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:25:10:b8:a3:72:01:a8:6c:36:e3:7c:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=6d392d218303e7476e692c7b37fab8968ba08ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:78:62:62:f3:21:c4:0f:32:c2:1c:9a:75:
82:16:bd:1d:6a:ec:37:f0:b0:3c:25:e2:9f:19:1e:
c6:6f:5e:1a:5b:27:b8:3b:d4:da:2a:69:38:80:0a:
dc:d6:48:8d:55:32:9c:e2:f0:62:50:db:47:aa:41:
cb:da:4e:fa:27:cb:3e:90:f0:dc:1f:c9:15:24:40:
20:8f:0a:50:7b:cb:f8:9f:a4:82:6b:55:aa:21:d6:
b0:96:ca:ec:b6:77:ce:3f:5e:f4:55:ad:2f:e6:04:
f4:45:df:43:90:ea:ce:92:0b:9e:92:fa:7f:34:aa:
2f:44:95:31:d8:e0:ab:be:a0:4b:f2:b5:d1:bc:34:
c1:2b:cf:95:83:ef:42:62:b8:1f:89:1d:f5:a7:91:
7e:cf:43:99:5b:d9:4a:21:cd:e5:bf:29:94:81:88:
f7:86:f2:a1:9b:aa:3d:84:d6:b3:b7:ed:b7:5e:d5:
4c:3c:de:b3:5a:4f:2b:c3:f0:6f:b7:d0:71:8f:6c:
2a:b0:33:58:70:e9:4e:50:0e:67:62:c2:8a:e7:4a:
74:4c:9b:5e:a1:56:a9:bd:1e:7f:6b:cd:17:25:a1:
f4:9e:11:f6:56:65:db:24:88:21:a9:7a:0e:54:79:
c0:9a:9e:74:2c:4b:a7:4a:7d:e9:bb:a0:cf:46:c4:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:2D:21:83:03:E7:47:6E:69:2C:7B:37:FA:B8:96:8B:A0:8E:E9
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0b:34:23:8a:9e:04:20:2f:be:da:4f:ad:13:6a:5c:12:16:
52:df:68:93:ca:07:7e:22:94:5a:4e:45:41:2e:e8:78:05:1a:
31:a6:c9:d1:99:59:af:c6:7f:eb:83:ed:b7:b8:72:71:8a:77:
0e:7e:17:65:76:fc:c7:28:56:e1:79:63:44:59:36:95:ac:63:
81:7e:17:2e:8e:0c:39:65:fe:73:80:39:f7:7d:0b:35:ce:e0:
8d:6c:1e:3e:82:e3:94:24:47:80:9c:6b:81:2e:c8:b2:50:1e:
31:d0:49:e9:66:68:7b:e3:08:b7:7a:de:4b:54:89:db:79:4c:
11:cb:a7:a3:70:44:b8:d3:4a:73:af:fd:91:76:09:2d:67:41:
44:19:22:63:3f:e7:9b:39:ed:06:fe:ef:0c:23:6d:5e:61:ec:
3a:53:f5:05:d8:a7:6b:84:6e:9f:47:b7:67:4d:51:2c:13:6d:
6b:74:a6:86:cc:99:3f:df:41:73:b1:15:a3:20:8b:17:e9:81:
11:4e:5d:45:ba:31:4b:eb:bd:dc:f9:ef:d0:db:a2:4a:f7:13:
6d:99:94:16:e5:97:94:f5:b1:de:e9:37:20:76:22:c6:5b:19:
ca:a8:22:e2:5a:f2:2f:49:e8:31:a9:e7:b5:28:cc:42:26:88:
e8:9e:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:36 2025 by rpki-client