Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: Fyhu2Aw9WDBaxUH7xkemjJJDcLKervo3V9ZNNxDc7Ic=
Subject key identifier: DD:B9:69:D1:57:16:2F:18:77:29:9B:DD:06:48:C3:37:18:5A:0C:65
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 0194BCA9E7ED96AC983557D73051C9AFB190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: 2AUJHbz5/iP5ODku5ICstzHY51OPPcqsvCiy8Snj1DQ=)
2: ZhfTjFWerubW-wXYF5uHcQImBi0.roa (hash: ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:ed:96:ac:98:35:57:d7:30:51:c9:af:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=ddb969d157162f1877299bdd0648c337185a0c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:6e:17:fc:49:b0:1a:3a:e4:02:b4:73:a6:
6c:8e:6c:43:8f:0a:58:5d:12:85:8b:dd:47:bb:6e:
07:83:d3:10:a0:8a:ad:64:cb:b6:72:a1:bb:da:98:
3f:b0:14:6f:ab:03:09:3d:ab:ab:90:d2:23:54:54:
71:ca:e4:14:8d:e3:9a:9a:8a:75:20:04:34:3c:1c:
84:e7:dc:67:ac:87:5f:38:6f:68:77:52:d1:29:03:
b7:3d:66:de:03:60:ce:62:23:45:dc:3e:b9:09:bb:
63:4b:78:d9:f6:7f:74:55:c0:5c:74:33:cb:7f:07:
a3:42:dc:89:8c:63:f0:04:7e:dd:cb:68:9e:9e:ee:
81:c9:d7:72:bb:5d:1c:48:43:be:1c:49:b1:29:79:
90:25:41:c3:56:33:f6:41:8b:91:a1:bf:ae:0e:79:
7a:6d:95:6b:8c:bc:7d:0b:6a:27:84:64:3b:0f:20:
31:bf:b6:cc:01:79:02:3b:a8:46:9d:77:6e:44:ca:
82:67:d6:4f:bd:99:ba:a1:84:6b:8b:5c:c3:46:66:
1a:97:1b:88:67:72:e7:4e:0c:2c:99:44:02:36:af:
90:8d:5b:be:4d:47:95:18:18:ad:20:73:8c:cd:37:
71:0f:55:66:89:0b:d6:ce:0b:ab:b0:f9:b9:29:b1:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:69:D1:57:16:2F:18:77:29:9B:DD:06:48:C3:37:18:5A:0C:65
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:67:68:3a:d8:92:a2:7c:b5:38:6c:cf:65:cd:90:f6:e3:fe:
19:0d:5b:d7:72:b8:b7:73:9f:a3:ea:db:67:f0:4c:fd:4b:fe:
b6:6c:89:9e:e6:27:7f:53:80:37:7e:14:73:db:02:b7:48:cb:
f4:0d:7f:89:31:6b:d4:8f:58:ad:b4:21:68:5e:07:ec:a2:eb:
15:87:8f:3a:b8:db:89:02:78:2c:62:69:a6:85:08:59:06:6a:
d5:4a:62:3a:be:f7:e8:9d:4b:ba:31:bf:7b:e8:de:f8:b4:3e:
44:8a:5b:5d:1d:3b:12:63:81:0d:f4:fd:e5:7e:45:bc:66:10:
d0:b4:cc:66:25:bf:26:12:50:df:24:d6:2c:86:9b:16:e9:99:
89:cb:42:13:93:25:ba:b7:2b:d4:df:82:60:cc:0f:95:a7:c5:
eb:f4:98:7b:2b:91:06:21:fb:26:29:ba:e3:d0:89:ee:64:3a:
f3:2a:de:be:b6:8c:8b:7d:14:c0:ce:40:4a:24:8a:5b:91:cc:
3e:d6:76:6c:4a:80:db:da:c1:f9:90:0c:17:4e:8c:07:7e:df:
b3:2d:b8:ec:96:80:54:d6:1f:91:04:86:ca:87:db:e2:72:56:
af:9e:e9:38:b8:ff:f2:6d:86:04:00:7d:56:f4:0f:f7:94:02:
94:09:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:35 2025 by rpki-client