
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier: AkPtg4AQsdiqarca1RWqr3NrfsRXzhZOmaMkHtKT1F4=
Subject key identifier: 26:66:77:E1:06:03:19:A1:72:C3:33:9E:59:1B:AC:6D:62:22:69:88
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial: 0194BD85B11BA03C4419C5FD4E4B557CEC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number: 0315
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: xhOrCm0vCtDlI0Zl71+w74VHFUWVSfohRvroLKqIBvs=)
2: uYWwRm4H6YcSfThBlj9ZG4s8g-o.roa (hash: k7HHEyNrsyk4kGL9qKSfgAwu15JappUHRUGh3h3zAJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b1:1b:a0:3c:44:19:c5:fd:4e:4b:55:7c:ec:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=266677e1060319a172c3339e591bac6d62226988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:0b:03:f4:6c:a6:40:90:b4:ff:ff:39:cf:
1c:96:92:d1:9b:e5:9e:01:82:b6:57:5a:ca:68:f5:
95:c0:ac:d2:7f:bd:fc:6a:79:3f:9d:50:2e:94:b2:
62:9f:8a:25:3b:cf:9a:41:cd:39:8d:37:5e:44:99:
5a:5d:29:a3:4a:94:80:f3:c9:26:8f:41:9a:4c:56:
22:45:d2:89:06:1d:15:ba:2f:05:56:41:01:35:a7:
af:8c:b1:13:bf:8b:b9:c4:5d:d3:bf:89:fa:85:90:
db:1f:db:ef:83:06:8e:e1:f5:b8:de:6b:bc:c0:6b:
a0:00:ab:55:44:7d:4d:1e:ff:bf:36:da:27:23:10:
41:30:d1:69:2d:6c:4d:b9:98:a7:5b:10:0d:3f:de:
77:e5:21:07:f3:8c:86:2d:a5:92:87:91:c5:ef:45:
cd:e1:12:ce:17:e3:ac:0d:3f:66:ac:3d:9c:f8:44:
5e:09:39:c9:c8:b9:80:5e:c5:2d:f3:72:20:57:d6:
35:fc:e9:22:63:d7:9f:74:0d:d4:51:6b:fa:32:57:
41:71:e6:9a:a8:e2:e0:bb:c0:78:ec:3c:a6:29:e8:
fc:63:8d:c9:a1:98:6f:ed:2a:6c:51:b2:11:06:9f:
8f:d8:55:c3:0a:bf:07:43:53:02:14:9d:d7:ec:3a:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:66:77:E1:06:03:19:A1:72:C3:33:9E:59:1B:AC:6D:62:22:69:88
X509v3 Authority Key Identifier:
keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3e:6c:37:bc:81:80:71:f7:22:8c:95:d9:d9:38:66:6d:cc:
dd:2c:2b:71:96:dd:eb:6f:fe:96:61:6d:6c:db:f6:04:55:34:
e2:99:46:b4:be:44:9f:77:7b:ec:4d:fc:89:c8:e5:c3:d3:0c:
a6:8f:35:d5:1a:0a:0d:a0:ef:7c:56:4c:a7:c6:00:a3:cf:a7:
77:e3:4b:d5:d3:c3:6e:42:f0:4c:de:15:68:31:96:ad:63:3a:
55:84:77:28:4b:ff:e1:8a:80:55:59:fb:84:ea:e9:e2:9c:f3:
f9:6a:cd:d7:6f:61:4c:60:e2:80:e4:71:e8:a1:c0:b6:c7:45:
0b:fe:32:96:d4:33:02:a6:a5:bb:ce:19:04:a9:6d:98:4b:fc:
cd:9e:06:35:00:17:41:b3:cc:5b:6f:bd:0f:a6:eb:41:35:44:
80:d0:93:32:8e:9b:93:1a:6e:ae:4a:1f:4c:51:de:40:cf:a5:
77:65:92:ae:88:1a:7f:a9:2a:55:79:f2:7d:62:84:2c:d2:85:
98:a0:4f:fd:01:52:81:26:6a:b2:d9:34:06:44:4f:2c:79:15:
cd:5a:c5:af:04:73:d4:81:cd:bc:4f:86:0b:bd:c5:df:5a:3c:
49:0f:b9:54:1b:1a:81:5c:99:4f:50:04:a6:a2:a2:a0:a7:8c:
d9:75:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:20 2025 by rpki-client