Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: fECxog3ItbYb2NgWdjeJEdiEfymf2Iu2MXlVW9oLRII=
Subject key identifier: 88:A1:40:BE:C7:31:13:CF:01:DE:78:2C:C7:48:7C:19:CB:73:3F:EB
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 0194BCA9F24A4AB75B318EE199030CC91E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: F9gJUD4QeNjB4zjJhjPbqyHfKLKrlz/3f4ogup0/fD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:4a:4a:b7:5b:31:8e:e1:99:03:0c:c9:1e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=88a140bec73113cf01de782cc7487c19cb733feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:3e:7e:2a:3f:53:9c:53:98:f6:8d:db:62:
22:30:e4:4d:96:a0:cd:52:aa:8c:50:60:da:d7:44:
72:61:e7:b4:0e:d4:6a:24:25:b8:a1:04:04:fa:9c:
64:c3:9a:5d:54:79:65:90:aa:18:92:b0:75:50:dc:
88:30:27:c4:3e:5e:b9:42:e9:13:b2:bd:fb:e8:18:
18:c3:b6:cf:cc:e0:3b:08:a7:29:bb:88:d4:68:58:
c2:46:c6:50:10:7d:e6:8d:56:c0:2f:21:fa:4a:35:
25:96:09:42:49:af:ad:34:a5:98:b8:cf:24:d4:d6:
8d:21:e0:60:15:20:74:df:1e:b5:22:87:4b:01:84:
ff:5f:a3:25:9d:b8:b3:0b:41:80:1d:b5:6f:4a:4f:
07:45:fc:64:cd:fa:d4:0b:3c:1f:09:dd:ce:26:48:
db:60:72:8f:3e:24:c3:90:71:6a:f3:75:75:72:c7:
04:47:da:31:a2:d8:8f:81:4e:ce:04:bd:7b:4a:49:
6d:d9:df:88:ee:1d:63:d0:6b:0e:27:85:12:b2:5a:
81:02:bd:58:87:19:5b:51:6f:6e:df:bd:2a:45:d0:
f1:ae:69:49:4c:6e:c6:ff:e2:37:41:75:17:a3:49:
61:4c:0d:67:3b:9a:b5:4d:80:85:92:11:b8:26:01:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:40:BE:C7:31:13:CF:01:DE:78:2C:C7:48:7C:19:CB:73:3F:EB
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:2b:1d:33:36:37:de:e8:a7:fb:6c:c8:f3:44:34:08:be:
f9:61:ee:7d:bf:5c:74:ee:16:1f:44:d5:1c:f4:5b:3e:48:4e:
cc:d3:9e:b9:91:a1:a5:71:8a:a4:54:8a:ec:4a:d8:10:82:96:
bb:2c:1d:2d:88:40:f7:f1:0d:48:3e:fc:0e:46:9a:83:4d:17:
5a:60:03:b6:0e:8f:72:3d:96:89:a5:76:01:77:68:db:da:2c:
90:de:e9:f3:85:e1:6d:8a:84:d4:4c:16:16:41:8e:d2:08:c1:
79:8c:34:93:3e:a3:f7:1d:f7:c4:05:dd:08:40:80:3b:15:f7:
04:17:6d:19:2b:34:39:8a:d4:96:c2:ea:23:6d:87:80:ea:0e:
15:80:e6:42:97:36:3a:a7:d1:82:e4:a5:b9:7a:4f:3d:36:8c:
57:fe:bb:5d:38:e6:19:65:fe:fc:a6:aa:a7:f0:79:82:e9:60:
0a:2f:05:7e:93:2d:a3:fd:3b:8f:69:9e:20:7c:14:77:cd:f0:
89:9c:d1:37:dd:99:8e:88:8c:33:66:24:01:16:35:1f:1c:b1:
af:72:9c:5e:4d:90:46:50:db:4b:48:17:aa:e6:93:ac:8b:8f:
55:96:62:ad:d3:58:d8:d7:53:91:27:14:f4:d8:ea:dd:4f:f6:
3f:99:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:22 2025 by rpki-client