Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: nMGSZCKDbN8Jhu0jb6yEef3kLjpioKyo65EovtyGz/s=
Subject key identifier: 23:98:5B:6E:CA:E0:FC:14:FD:56:34:65:24:FF:4B:2B:A8:C7:C3:87
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 0194BD17A118F3B30FFC8C7012C7850641BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: MBXOSe7Ug5N74blEr1H3SRfJwjJi4Fqx0lCEO9NckRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a1:18:f3:b3:0f:fc:8c:70:12:c7:85:06:41:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=23985b6ecae0fc14fd56346524ff4b2ba8c7c387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:3c:3a:b6:bf:1b:e8:7c:9a:b2:95:85:eb:
6f:78:05:e4:c0:71:83:b6:10:ba:c1:f9:7e:8b:1a:
46:dd:ad:2a:2c:e8:d3:68:7b:22:f0:db:ed:18:8d:
eb:5a:19:60:79:95:00:67:45:ff:87:52:79:e1:55:
9f:83:cb:4f:c2:2b:da:16:4a:ac:81:ab:f2:d9:52:
23:1c:61:6f:25:4b:66:bd:54:bd:c6:f1:d0:9d:51:
c1:92:65:f3:f9:36:ac:30:bd:e6:5e:7f:be:a0:e3:
a9:f0:53:8c:a6:83:bf:22:33:8a:17:f7:78:d7:c2:
a8:a4:c2:bd:74:0a:cf:d5:60:e5:ac:10:83:67:e0:
69:6a:4e:16:16:78:ae:d2:4c:60:ca:95:ef:66:a9:
40:f3:0d:02:e6:10:78:81:42:a1:4a:42:3f:ff:01:
2d:6d:6e:57:f5:65:0c:31:e0:2e:68:3c:28:d2:1c:
c2:65:9a:9c:94:49:70:62:d6:08:17:78:2d:c8:33:
0c:de:49:5e:45:3a:3d:e8:9a:96:f2:5b:48:8a:45:
3f:6f:20:f5:de:e1:3e:95:57:03:fc:86:f1:6f:d4:
13:47:cd:07:df:73:46:d9:4c:ff:55:33:77:a7:00:
f3:6c:5a:d3:31:22:c6:7f:42:39:fb:3d:b1:56:fc:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:5B:6E:CA:E0:FC:14:FD:56:34:65:24:FF:4B:2B:A8:C7:C3:87
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dd:41:5a:23:d9:80:f8:30:01:33:a8:cc:fe:f8:1a:8a:d8:
17:4f:ad:4c:62:ee:1a:28:1f:dd:37:71:a6:d0:0e:84:a1:fe:
25:b5:f3:ae:eb:a6:ad:ac:ca:63:35:dd:89:ca:32:df:91:f0:
17:a4:ee:1b:15:aa:38:5d:7b:6c:ad:01:d3:48:d2:72:c5:03:
69:5d:25:42:4a:43:b0:3d:63:18:98:1b:1c:0e:c5:0c:47:22:
a0:49:e2:31:35:80:94:9d:2e:60:9c:7e:60:2f:7d:e3:cd:3e:
be:7d:97:b8:0e:05:69:33:2f:59:f5:e3:72:59:6a:d3:71:97:
63:3d:aa:12:40:e0:06:87:b8:7e:c5:35:8a:30:bb:65:43:f9:
f4:62:3d:71:74:53:33:b2:97:c1:0d:7d:44:3f:9c:b4:46:41:
f6:5b:74:90:0e:e9:48:22:3b:0c:c7:73:92:ff:b2:54:c4:89:
ca:65:db:95:6c:8c:0f:17:90:b0:50:0c:35:8d:e8:d7:97:65:
d2:5c:03:d6:d2:e6:30:2e:a7:83:fc:20:0f:41:a4:90:b0:c5:
d9:76:6f:29:2b:ed:e4:29:d5:21:1f:d6:6b:99:8a:21:26:a3:
2a:af:92:d3:60:bd:a8:07:de:55:25:c5:5c:35:3e:8d:d9:49:
20:f1:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:26 2025 by rpki-client