Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: nFS5EyBzKEKDkEdNsxs/UmH9qBpCxVMVP87EhW1ku7E=
Subject key identifier: BC:E0:77:86:EF:A6:F2:D6:A7:6A:53:F3:03:93:A8:8F:07:FF:C6:95
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 0194BC3C68A61658089CDAF2DF380BF8B1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 07D6
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: ZEAwKs6gvrTnyCqGBBl6tjAoOnwK02exTxnm19WEUcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:a6:16:58:08:9c:da:f2:df:38:0b:f8:b1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=bce07786efa6f2d6a76a53f30393a88f07ffc695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:b1:10:de:a5:73:f4:17:05:8e:47:69:a8:
31:ee:81:e5:42:ad:f6:55:e6:8d:24:96:1a:bc:9f:
43:67:94:bb:d8:9c:f3:0d:5a:cb:7b:18:86:7c:29:
17:26:b3:ae:f4:82:29:dc:bc:45:e3:6b:c8:fa:e8:
9c:f7:c1:3a:1c:9c:69:c9:eb:09:25:ad:c2:67:1a:
f3:81:2b:81:86:cc:30:cb:dd:82:55:45:cf:6f:99:
fc:70:86:b8:3b:fa:71:b0:71:ea:5b:a5:a8:bc:30:
d2:76:4a:d5:97:52:cb:75:33:51:94:a1:ed:99:ff:
d9:64:e0:3d:9f:cb:28:96:8f:4f:e7:a0:30:b9:68:
7e:9c:1e:6d:56:c9:11:ac:b2:20:83:c3:a9:3e:21:
4c:82:d8:c1:f4:b2:17:69:79:fd:1d:eb:11:25:5a:
a7:21:09:58:86:e2:f9:36:38:ae:11:58:d3:4a:8a:
b2:be:59:99:d8:a0:95:33:22:20:e8:a8:e2:0b:4b:
5d:cd:19:20:74:7a:70:c4:0e:ab:cf:c5:a3:00:b9:
1d:f5:95:34:70:f8:26:e8:44:b4:72:05:a6:40:1d:
5b:07:38:a9:e2:30:92:0d:ec:14:80:95:a7:4e:65:
23:af:5a:41:18:55:ef:0c:9e:de:87:f5:91:bd:19:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:77:86:EF:A6:F2:D6:A7:6A:53:F3:03:93:A8:8F:07:FF:C6:95
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:06:72:32:fc:ab:f2:c1:4e:cf:34:bd:32:f6:78:f2:1a:ed:
f0:b7:96:bf:dc:d1:2a:b8:d4:1f:a7:ee:13:a1:5a:ff:49:93:
9b:f6:58:5d:27:40:a0:ef:08:06:c4:e6:54:78:1a:df:79:6f:
ee:d9:6d:73:2d:e5:2e:da:03:79:fc:ac:c7:c9:ff:fc:10:f8:
f7:f2:e8:eb:4f:60:8d:42:57:22:25:b5:ad:a7:74:58:3e:0e:
ca:c7:01:d2:b5:85:2c:c0:d5:69:de:7c:ec:0f:83:f2:f7:31:
ea:40:fb:20:0c:05:94:a8:3d:e1:c8:fd:bd:5a:53:13:06:55:
68:7a:78:31:ee:31:c4:cd:be:38:2b:d4:b8:97:ed:f0:e0:c1:
d1:9f:73:d9:ae:c2:32:9a:84:3f:89:08:32:f8:08:94:22:48:
12:d3:f1:bd:f0:b7:2c:67:fd:40:bf:8e:51:62:d5:b5:61:45:
40:c4:f7:c5:f0:8f:56:43:43:95:f2:71:b9:b1:ef:30:a1:cd:
78:b2:44:09:59:43:bc:1d:88:2e:97:b1:5b:82:19:5d:a5:65:
c0:58:bb:b7:c7:f9:43:9e:86:4a:d9:46:fe:7e:81:a9:d0:cd:
a3:92:43:b4:76:8c:d2:3d:71:f9:5e:ad:92:43:a7:c0:a1:13:
e5:f0:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:30 2025 by rpki-client