Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: B+ydJUbcxJ7q4dXhBbUFolHBCgh4MfmqqzsERnJH8zk=
Subject key identifier: 9C:88:38:FC:AB:A7:9C:6A:57:14:D4:E2:DA:EF:58:A3:0D:29:BD:51
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 0194BD176AF0088BD391AA06F73DC5B6817F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0D26
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: V9kEgPHkp9kcnQDt3NU+JbodCvx+hvZLeXm9HwbpYEA=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:f0:08:8b:d3:91:aa:06:f7:3d:c5:b6:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=9c8838fcaba79c6a5714d4e2daef58a30d29bd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:fe:f3:79:c8:a5:4d:a0:d1:37:a8:7f:cf:
76:3e:7e:22:dc:c8:28:ea:d6:aa:3a:49:23:ed:c2:
36:c0:6c:8e:53:ff:11:3d:cb:89:60:74:b7:94:e3:
38:de:fb:67:d4:63:88:be:15:02:9a:e3:d4:58:f7:
fd:b9:07:ec:10:10:11:89:18:d0:04:bb:41:aa:5f:
65:0c:fe:0d:fb:14:33:90:3a:6a:40:3d:0a:61:86:
49:7b:b2:9f:9a:c5:67:18:a6:da:9c:0e:c8:4b:68:
49:f8:48:a7:dd:9f:b1:e4:bc:fd:88:6a:f6:02:d8:
9f:d5:4b:08:82:93:98:7b:b1:f1:57:74:eb:9c:0d:
5f:6e:8e:60:db:07:03:4c:44:43:00:b1:6c:30:4e:
5e:35:c1:cd:fb:bc:f2:96:61:86:cb:ef:ec:31:16:
b3:f2:1b:8b:f6:d7:3f:d6:4b:4e:03:a0:2f:50:27:
aa:00:da:18:de:ad:ac:93:30:c3:4d:08:f8:16:04:
20:80:3b:37:15:f8:e1:49:f3:78:90:d1:6e:da:10:
6a:30:6e:fc:70:54:ae:58:34:21:94:c8:5a:41:37:
74:22:c9:c8:f0:2a:16:59:9d:29:98:fb:0a:ea:4a:
e0:fa:62:11:3b:2f:90:d6:31:dd:30:32:b8:20:33:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:38:FC:AB:A7:9C:6A:57:14:D4:E2:DA:EF:58:A3:0D:29:BD:51
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:53:c4:27:67:07:53:18:11:a2:97:4c:74:0b:a0:1a:5e:6a:
19:dc:0d:a3:26:b5:5b:f8:e1:45:91:41:a4:3c:ac:f1:3f:2f:
85:61:52:4b:95:9f:e7:3f:95:58:6b:d9:41:77:08:77:bf:aa:
da:a2:64:6e:3e:38:6e:57:6e:4d:a3:f1:36:a7:8d:69:e9:f3:
1e:29:3e:24:0d:da:a3:04:b9:da:9d:e0:1e:02:e9:8b:7f:e1:
81:ac:9a:94:e2:d6:60:39:75:dc:ac:37:28:36:e6:ae:d6:b5:
59:35:fe:c4:3a:9b:50:96:29:fd:d6:44:be:a9:ed:e6:d8:d8:
7e:0d:fe:d8:12:8c:db:9e:cd:ae:c0:24:ca:7e:06:ec:69:60:
8c:2d:24:23:55:67:b8:8d:37:9c:ef:f4:c8:4e:52:17:62:c8:
00:83:84:3c:d8:2e:ec:cd:e5:dd:e0:6a:de:1c:16:12:34:6e:
a3:57:ce:1b:79:e4:e8:79:40:b9:65:05:2c:7f:05:47:b3:d1:
35:43:e0:4d:ca:35:70:3e:6a:d9:23:02:c3:bd:dc:d8:5a:02:
92:2a:84:4f:79:05:ec:97:30:ad:7a:33:1f:05:b0:30:bf:d4:
20:9c:79:2c:a6:bf:e0:7d:dd:51:26:97:ba:3e:33:fa:96:ce:
e3:ee:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:53 2025 by rpki-client