Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
File: KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft (raw, json)
Hash identifier: AzfMItW/GTceK4VE48sAXxOEd6GufY/jk4+it0pEqS8=
Subject key identifier: 0F:83:58:B3:AF:72:45:64:CD:28:5D:28:9D:9C:47:65:FE:3F:D7:C0
Authority key identifier: 28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
Certificate issuer: /CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Certificate serial: 0194BCA9AD5E40E55EA932EBBCB7E8A87E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
Manifest number: 13A7
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: CgAYwcYqjGUwI5cuY-inYF9ViL4.roa (hash: DG9lxho2Qdp+1bj1jPdlMwaM6onKyvGHv7zkZeOCV70=)
2: KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl (hash: 3kUUhrBRWMX8l/OKLC/nmi4kbRSZ7fEezbifenQ4xX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:5e:40:e5:5e:a9:32:eb:bc:b7:e8:a8:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=0f8358b3af724564cd285d289d9c4765fe3fd7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:6a:2d:74:17:c1:7b:01:db:65:3d:f3:97:
e2:51:77:79:cc:88:25:21:ee:44:00:3c:13:a7:7e:
39:b5:f0:72:1f:81:0e:2f:c5:86:c7:53:d3:53:26:
3f:cb:26:c6:43:41:cc:4d:f0:4d:1c:d6:a0:3e:de:
25:57:af:f6:a7:1e:02:24:81:62:6d:b5:34:71:9a:
a2:91:cf:cf:a4:e1:f1:fc:aa:87:7f:ad:b4:c9:d6:
4e:7d:a9:f6:ee:20:00:ef:7b:dd:a9:64:6c:9b:69:
06:d7:2a:29:1d:22:bd:39:03:96:7b:36:77:a5:50:
43:33:44:6a:a2:50:74:87:3d:f8:f4:a5:b6:7a:70:
e1:3b:7e:6e:d0:79:1b:32:9d:c9:c3:49:4a:58:2b:
84:58:2f:17:2d:e5:c6:2d:c8:0e:6e:9a:ab:50:74:
93:a0:77:62:59:bb:0f:39:7c:d9:2e:6e:8c:46:5e:
22:64:5a:15:72:b2:ed:9b:4f:0d:f4:a0:81:75:fe:
83:21:c2:b9:7e:c9:85:80:69:f7:a8:e0:71:66:02:
18:c5:1a:d6:c1:8a:25:7e:4f:0f:70:03:ec:e0:d7:
f6:a9:2e:2c:39:7b:13:83:a6:fb:9d:26:7a:ae:9b:
12:89:da:b2:2c:7d:86:45:b9:87:79:40:d6:5a:ad:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:58:B3:AF:72:45:64:CD:28:5D:28:9D:9C:47:65:FE:3F:D7:C0
X509v3 Authority Key Identifier:
keyid:28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:1d:cf:82:95:6b:44:05:d1:c2:8e:53:74:e1:63:80:29:
be:9d:bb:c2:5c:7f:24:ec:9d:6d:8e:ba:e0:ab:f9:42:6a:a3:
24:36:49:cb:9a:b2:c3:ba:bd:df:30:f4:48:1a:a6:19:37:0e:
56:18:1d:bf:0e:23:f1:12:c5:49:74:d6:5b:ea:a8:91:5f:93:
f2:18:05:c2:78:e0:ba:c3:98:26:42:fe:6c:1e:69:5a:bf:76:
ba:da:40:38:4c:a8:33:65:4a:87:f1:29:ab:dc:46:6b:63:40:
4a:3a:94:bb:85:ae:4f:be:5e:0c:32:dd:53:a3:ba:4f:85:cb:
9f:27:65:ce:a8:46:1c:83:4c:29:d3:7b:f8:e2:a8:53:65:22:
de:5b:ce:c9:24:78:a2:5f:c4:11:78:39:55:a8:4c:f2:09:5e:
58:f4:4d:d2:98:df:7c:d4:c7:20:20:de:86:3b:c0:ba:c4:73:
64:76:36:76:ef:14:8f:52:60:23:6e:87:8c:54:21:ce:bc:c8:
89:29:22:63:16:53:ee:20:29:a7:69:85:69:8b:eb:7c:08:5e:
cd:71:f9:5d:4c:f8:b5:47:a0:be:5e:55:f3:36:9a:86:e7:3a:
f8:ba:5d:a5:27:5d:03:5d:ae:2d:4f:37:be:b7:0e:5a:32:93:
df:2a:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:41 2025 by rpki-client