Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: 3qFooBl8shtBv7X1fp3egUepCTaQKfaoyjYeqkFzEeE=
Subject key identifier: BF:91:C8:59:B6:84:49:81:28:9D:71:94:D6:A7:65:A4:5D:49:A4:F5
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 0194BC73059A0B8DDC27B0DC59B58099728A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: u1BvMqgAnb/lkxk5usJ8DJrwQe4RewWqaTfFKdSnKM8=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:9a:0b:8d:dc:27:b0:dc:59:b5:80:99:72:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=bf91c859b6844981289d7194d6a765a45d49a4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:fd:c1:a2:47:47:7a:00:71:5a:78:24:0c:
85:92:c7:cf:23:2c:65:cf:93:cf:32:0a:6d:5f:92:
84:a4:7c:ba:3d:49:4f:1f:40:f2:8d:29:84:56:25:
a3:68:8c:d1:35:f9:86:64:27:0c:96:c7:37:82:a7:
76:dd:95:d2:7a:99:bf:21:88:34:38:cd:ac:76:ea:
56:79:93:cd:7d:23:06:a5:ed:64:61:91:21:11:b8:
39:3d:8e:ad:ec:0a:f6:3d:26:25:f3:6c:92:29:48:
3b:37:31:31:5f:09:21:02:97:79:67:ae:4d:c1:32:
68:68:01:e3:d3:90:4a:75:49:32:10:a4:35:2d:4f:
33:07:8a:1a:3c:e7:ca:9e:a7:a0:41:ce:53:8f:49:
f8:03:3a:48:32:80:6d:80:4b:e8:72:a5:55:30:c1:
8d:9a:38:60:94:3f:4d:59:94:f8:20:a1:01:ac:9f:
83:17:0e:0f:63:09:d5:3f:a9:48:17:57:e2:0a:42:
aa:3e:b0:1c:a0:bb:a7:dd:e8:4a:96:ff:6c:95:8a:
96:cb:b4:ad:d2:40:66:44:98:e4:31:eb:d8:96:a9:
0c:cd:ab:6d:f1:bd:5d:35:24:2f:77:27:7b:fc:c5:
87:aa:af:90:4f:36:55:ad:30:d3:19:53:b2:e9:5e:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:C8:59:B6:84:49:81:28:9D:71:94:D6:A7:65:A4:5D:49:A4:F5
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:ba:e7:cd:79:33:f1:51:8e:d0:d6:6f:03:25:da:bd:3c:
53:46:53:98:9a:b3:ef:bf:38:31:3f:eb:13:47:53:78:ab:db:
cf:d6:6b:1a:b5:46:ce:40:66:a0:f2:97:33:0b:bc:43:19:4c:
97:b0:29:05:5f:7f:64:fa:32:20:af:59:a1:01:41:88:d0:5b:
a1:3a:a6:a5:69:d6:7e:4a:5b:2a:32:88:c5:9a:35:5d:d7:ba:
63:34:b9:62:55:f1:46:66:6f:5d:c2:1c:e1:0c:36:47:10:23:
d3:2b:da:ca:73:d6:0f:c5:d9:01:23:a6:90:03:36:ff:7b:f7:
0e:4a:fd:8d:05:dc:2e:0e:0d:e2:e5:30:36:dd:1f:6d:37:95:
b8:20:61:eb:c3:85:3e:ac:20:23:37:cd:0f:62:1d:e1:9e:0e:
6f:f2:30:2a:d0:cb:42:dc:6a:d6:32:e6:a2:be:a5:0e:20:2e:
86:7a:f6:1c:d6:74:38:e2:77:f7:90:28:28:6d:f3:a2:3a:0a:
c6:57:c4:52:30:53:fa:a2:8f:66:b7:b4:17:9d:c9:d8:7e:cf:
48:28:7b:b6:b7:15:5f:07:ef:70:87:ec:fe:4e:ad:43:e2:5a:
48:de:6d:d4:90:de:ab:b9:9f:91:6b:79:e1:f7:10:1a:7a:67:
eb:23:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:23:08 2025 by rpki-client