Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
File: kCGOgBpTJZXptxxkNoTqBflr9fM.mft (raw, json)
Hash identifier: OKSjeldw0JGqnTOGYwpRYDLnjJSLtiG9KFreLvOHAtQ=
Subject key identifier: 69:31:11:E9:DC:26:33:D3:F9:44:C0:81:14:5F:88:6B:CF:59:1F:80
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 0194BD4E4B677F07B78979F9512A8C44FF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
Manifest number: 018F
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: kCGOgBpTJZXptxxkNoTqBflr9fM.crl (hash: FJYlpzPfubexs+RB2nzJbXnUZj1hGlRpb6HGVXhTHZw=)
2: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (hash: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:67:7f:07:b7:89:79:f9:51:2a:8c:44:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=693111e9dc2633d3f944c081145f886bcf591f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:e2:c7:3d:2f:2a:e2:ac:e9:06:36:cb:21:
6e:fd:9b:ec:cd:be:e1:a8:e5:96:5e:66:14:4f:10:
f0:14:d1:86:34:29:e8:68:3f:49:3a:01:b8:c3:e5:
4f:47:56:9e:f1:03:b4:9f:d2:77:b0:1b:72:15:92:
df:3a:07:4e:3c:1d:30:55:a9:3d:0d:30:9d:6e:c2:
24:16:19:4b:40:56:1b:40:28:75:30:87:78:ba:16:
87:fb:ae:48:13:2a:2f:ae:c0:d1:7e:98:8b:96:d2:
04:7b:c3:c5:ca:c5:e4:20:71:7e:17:af:a3:21:3c:
b2:eb:c2:06:92:3b:a8:59:45:bd:32:77:6e:3c:8f:
b7:c6:48:e9:aa:05:87:63:7b:0d:f7:6d:6e:a4:e5:
85:d1:af:0d:3f:13:c5:a8:0c:fe:48:e8:e9:74:95:
39:07:f5:7e:26:66:01:b0:99:13:9f:20:5a:98:88:
94:61:1a:e9:bd:0b:00:4a:d8:0b:e5:69:fc:10:67:
60:35:60:d0:f4:67:d8:db:54:cb:37:98:09:bf:fa:
51:6e:82:06:c5:d1:3f:46:1d:7f:e6:de:fa:4f:49:
78:1e:08:17:f0:17:0c:56:d6:aa:d7:e2:81:71:d5:
c9:9a:ef:26:f0:94:4f:c0:d2:f7:fb:57:c2:30:22:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:11:E9:DC:26:33:D3:F9:44:C0:81:14:5F:88:6B:CF:59:1F:80
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0e:2b:f7:48:d4:b6:37:0c:d8:63:13:b1:6f:fc:ab:43:2a:
6a:f1:79:58:cd:ac:7f:d8:95:d1:c1:b5:8c:73:19:90:85:b2:
36:a4:b9:35:8e:80:67:88:c5:94:36:2d:31:b5:ac:2a:4f:e8:
6b:f4:4e:cd:41:44:a8:02:20:c2:c5:7f:03:ea:98:21:8c:d2:
cb:50:6a:0a:77:ed:9e:be:76:1d:c1:7a:69:1e:10:29:df:26:
cd:d0:03:f7:b9:93:b6:6e:a9:12:96:6e:49:25:dd:0e:8e:b4:
16:85:6b:08:48:52:9b:b4:e1:e8:33:01:fc:92:2d:68:0a:ea:
72:f5:f7:f8:16:8c:96:1e:bf:2d:34:03:c7:4e:13:6f:73:87:
4a:91:31:3b:f7:cb:8b:47:68:59:2c:89:60:87:18:c8:1f:aa:
1a:6b:1a:30:03:12:32:da:77:5c:6c:7c:9c:7a:02:9f:28:c6:
11:cd:19:3a:5b:f2:65:b6:ad:52:a7:f5:d1:87:e7:bb:56:07:
f9:6b:40:cb:45:50:9f:7e:65:10:cf:a8:de:ed:28:c4:d2:be:
90:78:02:7d:ad:77:74:a2:77:77:e2:b9:4f:28:23:06:05:d1:
6b:01:7f:46:31:2b:14:5f:79:9b:cb:a7:86:7b:7b:e0:44:5b:
4e:ea:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:28 2025 by rpki-client