Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
File: KfUkAji4KPFuYCKeJjNQPwSEZZk.mft (raw, json)
Hash identifier: xaR8t6ByG+xj7aCdxWm1Nr4ZIpHa2yJc5uwep0of6YI=
Subject key identifier: F7:28:3C:E1:B5:D4:EF:C8:D5:62:15:41:02:02:2C:D4:45:15:00:19
Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
Certificate issuer: /CN=29f5240238b828f16e60229e2633503f04846599
Certificate serial: 0194BCA990ECF6FBC796FD63751E596216DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
Manifest number: 011B
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: KfUkAji4KPFuYCKeJjNQPwSEZZk.crl (hash: gKz5+Ne1X/p/ibZdYccndv/4PNyD3tIM9MvPOFQq2j4=)
2: ffvaic9mo-Ox_7Jsdhd4jhWeyvM.roa (hash: nAU1XWM3o+xHaVb0+VtmU8Q3s90CIRxbMQo+s7S+UMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:90:ec:f6:fb:c7:96:fd:63:75:1e:59:62:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5240238b828f16e60229e2633503f04846599
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=f7283ce1b5d4efc8d562154102022cd445150019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:bc:1b:1f:e1:4e:3a:db:21:a5:f7:6e:2a:
39:70:99:94:24:7f:ac:00:b2:77:52:e9:88:e7:65:
d3:57:18:9a:d4:4e:9b:c4:fa:6e:98:10:98:db:25:
f9:31:f0:10:4c:49:d7:ab:95:76:7b:eb:e1:b9:38:
83:80:c2:c3:ff:ab:75:4c:46:ba:a5:3c:30:f8:7b:
80:7b:2c:12:4e:61:21:e6:86:22:15:de:61:30:ab:
35:6f:e1:aa:32:68:31:1d:63:d0:78:cb:98:c4:00:
cd:b1:6c:68:16:22:af:af:2d:a5:6e:86:b1:70:c3:
17:c6:f0:77:6b:05:1c:42:0e:07:3c:1a:c3:1a:64:
e9:07:90:e8:ac:ce:33:de:cb:42:81:0a:95:de:a0:
55:be:d1:e1:77:7d:dc:ab:19:5c:61:81:da:dc:b6:
3f:bc:91:4f:e9:59:a8:e7:d6:36:e8:24:33:b3:9b:
b3:48:b6:1e:6a:b9:bf:4c:09:fc:69:80:74:8c:ad:
5e:11:ef:b1:9a:6d:6d:08:ce:49:84:fb:c5:a9:fd:
21:ff:2c:30:a7:d7:39:f3:81:18:9b:50:9a:9b:ea:
e1:0f:04:cc:16:20:6c:8b:0b:32:1d:17:76:8c:12:
00:d9:c3:77:ec:7f:49:e6:42:cc:1c:06:b3:0d:f2:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:28:3C:E1:B5:D4:EF:C8:D5:62:15:41:02:02:2C:D4:45:15:00:19
X509v3 Authority Key Identifier:
keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:51:f7:3f:fc:da:72:31:3b:1b:5f:4c:07:81:c8:5f:2c:02:
5f:0d:3c:0d:41:dd:eb:71:f6:1e:1a:dc:36:77:5d:81:f7:7e:
f6:51:98:f6:2b:fa:ff:54:eb:36:30:f6:e5:8e:82:02:85:8c:
74:ba:78:af:e5:68:ef:ff:b5:fb:ef:6b:04:67:be:20:68:ec:
60:0a:19:5f:ef:4a:09:2d:29:36:06:e3:2b:37:b6:97:52:9d:
98:0f:26:2f:63:c2:16:b7:a7:e7:e4:f3:e9:e3:2f:0a:26:45:
c7:af:a4:88:fc:d3:bf:c5:97:30:1b:d1:ae:d2:f9:64:d3:9e:
25:b5:dc:45:14:f7:0e:93:9a:93:a1:33:36:5b:58:b1:06:99:
a7:9e:bd:cb:7d:02:5c:6a:50:3c:ae:4d:dc:0a:44:d1:2a:b8:
78:9e:bf:e5:5e:d4:e7:9c:09:ab:41:11:71:a9:bf:c6:b9:fc:
c5:cf:c6:24:92:5a:77:7b:03:43:2a:2a:e8:cc:18:2f:17:ae:
df:d1:6b:25:ea:8e:4b:b7:5d:12:87:fe:0e:82:7c:d4:62:58:
73:b6:14:21:d6:d7:5e:3b:37:03:01:4f:d0:1c:3a:87:81:ad:
16:dc:b3:49:b4:35:f2:32:af:df:3a:c7:89:a3:fe:4c:14:ec:
c3:9f:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:44 2025 by rpki-client