Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json)
Hash identifier: NR0SaSSNAi8VQttI2sX4Cg4UkAN4/FMxXS5OqOllwsw=
Subject key identifier: BD:10:C5:FA:5B:78:A2:90:32:C9:AB:0D:7F:76:7F:0A:D8:95:7C:00
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 0194BCE06CBC1F212974438F48256E8C0386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
Manifest number: 121B
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=)
2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=)
3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: VTKonNMGtmXrqs5pccRH8Tuk6PipdiOiZ9Ahz+ULPwU=)
4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=)
5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=)
6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=)
7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=)
8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=)
9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=)
10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=)
11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=)
12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:bc:1f:21:29:74:43:8f:48:25:6e:8c:03:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=bd10c5fa5b78a29032c9ab0d7f767f0ad8957c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:31:7f:6e:5c:8c:a8:2d:39:f1:4c:ee:8c:
75:24:86:5d:08:17:a9:3a:81:3e:18:26:94:30:ba:
35:db:a0:47:ab:25:d5:1d:8f:76:b6:b5:69:97:13:
65:3e:64:70:66:c7:99:8c:37:e7:50:74:f2:23:52:
9f:6e:99:6c:06:f9:3c:df:31:1f:2e:9d:55:cb:68:
5e:96:59:6f:4a:7b:72:c0:52:65:3e:ec:04:70:ab:
e5:90:f9:2d:1b:b8:64:05:8d:ff:4e:42:96:ce:0a:
8f:67:5e:14:15:9f:31:63:12:aa:4f:ca:79:c4:fe:
4c:f9:4a:0d:23:1f:72:c4:4e:ab:6c:40:3c:82:36:
3b:45:fe:b7:60:e9:6d:f3:93:84:a4:3f:c2:73:2c:
dc:40:c3:c8:81:9f:11:95:93:2f:1c:bf:b0:60:87:
02:42:2a:11:9b:be:f0:15:4b:22:54:f7:8e:35:9e:
57:ec:13:3c:af:06:77:05:c2:4b:9f:d7:e4:d9:c3:
b9:42:54:a0:14:c3:c4:22:ac:14:cd:eb:96:19:83:
3d:27:fe:9d:e7:c1:cb:86:bd:06:73:8d:c2:0d:64:
d0:ca:b9:ba:a0:53:99:83:fe:8c:c8:4d:98:1a:39:
64:bb:be:48:a6:6c:2c:0a:5c:57:ae:22:73:d8:83:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:C5:FA:5B:78:A2:90:32:C9:AB:0D:7F:76:7F:0A:D8:95:7C:00
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:68:2a:3b:92:7d:cd:18:f3:9d:8f:6d:94:3f:85:af:af:7b:
a1:83:b0:4a:25:b4:30:56:46:e7:ba:77:bc:83:1e:ef:05:88:
d9:cf:94:1e:96:4b:bc:3e:fd:37:b6:cf:7d:80:11:5f:51:e3:
e5:71:9f:03:2a:ab:48:0b:54:ad:33:97:57:00:70:94:42:7a:
32:f0:b2:e7:28:9c:d0:a0:f6:df:5c:83:41:be:e3:4f:6c:fe:
04:9c:87:03:36:6e:cb:40:bb:18:28:59:a2:42:a3:66:e0:9c:
7f:4d:21:b9:f3:1c:96:20:13:05:51:e8:5b:86:3a:6d:3e:ad:
2f:06:d1:36:5a:d7:3c:ed:8e:ae:47:aa:aa:6d:59:bf:a9:e3:
65:7d:68:b3:f2:80:e1:1b:04:a7:21:49:d4:df:e2:a1:15:b9:
d6:21:ac:dd:fa:9f:02:95:95:f7:d1:a7:1d:4c:5b:56:03:c3:
e8:40:f5:aa:f5:25:ab:c0:64:07:3c:da:db:35:74:e4:22:dd:
55:3c:d0:20:b6:93:76:fc:e7:e2:18:38:db:18:a4:31:4b:7a:
9b:7b:d9:e5:25:27:c3:2a:bb:2e:1e:d8:e9:c3:03:99:3c:f9:
1a:e8:9d:8d:c1:89:46:2a:5d:52:f4:6a:61:cb:3f:8d:49:4f:
f3:ed:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:37 2025 by rpki-client