Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: KesmbsdB1hTl4vH3ZWao6KYY06MyzxZv870sfrcobOI=
Subject key identifier: 0E:91:E3:A1:5F:D7:B4:F0:FF:5D:CF:6E:C0:56:CD:CB:DD:A1:C9:1A
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 0194BBCE1A0D27B29DAAA1B322A3FAABF6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: HF_iZrXdVvTKE2NYXNHiTyOcQ64.roa (hash: WVml14eDTh4qN4FFOa9q4K+T7+9z6Qbi8JZGS0EECf0=)
2: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: GdEQgc/oPMW1aSBpmhcPNUKu/xNqu9xFpItNKiaak88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:0d:27:b2:9d:aa:a1:b3:22:a3:fa:ab:f6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=0e91e3a15fd7b4f0ff5dcf6ec056cdcbdda1c91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:e8:c7:61:3c:d4:66:9d:f6:48:b8:b5:86:
8c:26:01:db:7d:8a:bb:8d:92:26:95:d4:13:d5:ea:
48:e4:db:d6:33:71:46:bf:7a:2b:e6:a7:ec:0d:9f:
8f:6f:25:2b:cd:f1:1e:15:a7:6e:e1:9b:8d:98:a7:
30:28:68:38:5d:fc:19:59:63:07:03:c4:f7:73:6b:
75:ba:50:dd:05:6e:aa:04:b3:f5:d4:2a:a1:eb:6f:
ea:6c:36:0c:5d:a3:d5:c3:2e:3f:df:e8:3f:63:fd:
73:4a:54:87:60:d2:68:e4:35:65:93:82:0a:62:46:
83:de:de:55:62:89:9c:86:a5:99:80:9c:e3:9d:42:
68:45:38:f9:29:4a:ac:69:87:47:df:71:db:ed:35:
46:f7:08:8d:db:28:43:c3:16:80:1b:19:e5:ee:4f:
5b:73:c7:76:a6:eb:0f:96:85:86:02:09:93:a1:c1:
1e:90:15:ca:14:ba:d1:c5:f2:8c:5f:01:f1:4e:2c:
ff:c1:e1:df:46:a0:4e:de:00:b1:d1:ee:06:46:60:
30:61:c0:9f:df:ab:0a:a9:2a:07:cd:5b:63:dd:e5:
8c:a2:b8:cc:13:c4:64:4b:d3:a9:71:30:14:0d:0e:
8e:cf:3c:bf:75:c4:c2:95:3e:47:00:7b:ab:9b:04:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:91:E3:A1:5F:D7:B4:F0:FF:5D:CF:6E:C0:56:CD:CB:DD:A1:C9:1A
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:df:81:09:21:fb:09:e7:36:d0:f1:08:b3:75:ed:4a:24:82:
34:36:3c:32:55:b3:a0:84:e2:08:6b:2d:e2:64:88:ef:43:7a:
54:80:92:38:48:71:9a:13:bc:2d:42:6c:d9:88:ad:2a:b3:bc:
e1:a9:d3:aa:00:81:1f:b7:66:c2:5b:0a:04:21:02:5b:75:f1:
dc:16:1a:72:ff:12:89:da:fc:2e:ac:fc:8f:f7:bf:d8:12:1d:
10:79:a9:65:20:03:77:e1:42:ff:d6:94:04:b1:f0:53:e1:f5:
d5:4b:55:71:81:c4:ec:01:b9:91:df:3c:b1:1d:69:b0:2d:1c:
66:e6:f3:fd:6d:6d:21:09:8d:9e:1d:d0:ca:68:4e:a3:52:37:
65:87:16:b9:19:76:a4:8b:80:6a:79:be:83:a9:ca:36:87:1b:
09:94:3b:b9:3c:97:1d:14:f7:df:46:49:b2:66:9a:ed:50:f4:
56:6e:8d:e6:27:35:b5:66:b9:ec:06:c7:1a:96:9a:e0:56:77:
4b:24:b4:28:07:2a:7e:53:67:c5:96:c9:8b:df:c6:72:e7:a2:
80:40:43:ad:67:75:c9:a3:55:86:d2:e5:4b:39:b0:e1:1b:40:
fa:91:65:1c:ae:e0:bd:1e:6b:5b:07:25:96:ef:4a:69:f7:f5:
b0:1d:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:45 2025 by rpki-client