Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: U3SVi6d+cMWABDGzAOnu+peYtGVTA59lJUE7LE9UqLM=
Subject key identifier: 79:7A:43:14:E2:26:50:9B:58:F7:F3:1B:92:5B:C9:8F:3D:F9:38:7C
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 0194BCA9E08F099A40C1F81CCE01BA2E9421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: SMUbmETLohXSrqYlWHbYlLy2QncjC3cAkjodAo8lFPI=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:8f:09:9a:40:c1:f8:1c:ce:01:ba:2e:94:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=797a4314e226509b58f7f31b925bc98f3df9387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:38:c9:91:8c:66:8b:b9:6a:af:76:9c:8c:
ea:21:f5:f2:8c:34:28:61:d0:82:cc:d8:74:5f:e7:
35:eb:1e:75:15:00:c8:92:f6:d2:b9:d6:4e:4a:d9:
0f:16:2c:5f:7e:fe:32:e8:e7:1c:af:c2:a7:d0:3f:
26:d2:22:c7:87:12:c7:65:df:dc:f9:1e:8c:16:fc:
b4:d2:a4:ac:a1:94:bf:c0:85:47:98:0f:ba:9a:24:
94:d6:24:95:eb:5c:1b:a5:bf:ea:5b:cd:f6:b5:3f:
6a:f9:f6:db:25:99:5a:d9:9b:57:43:c0:91:4c:d9:
aa:e8:12:f7:9c:7f:b0:26:4f:3f:65:fd:17:95:75:
92:73:6d:84:9b:74:cb:4c:56:fe:e5:d1:58:5d:7f:
e0:91:f6:a0:c8:6c:13:54:bf:56:b7:60:7a:1f:e3:
df:58:4d:d9:6b:5c:6f:62:60:48:a2:cb:9f:95:57:
45:eb:4c:11:3d:45:79:34:11:63:8b:15:db:05:9d:
fb:84:e4:3a:19:31:cd:fd:10:e9:0d:06:d8:83:1e:
e0:7d:62:fa:7f:a2:e4:09:43:55:4d:44:d2:dd:a8:
27:69:b4:80:f7:51:7c:41:89:7d:4b:9f:5d:a0:09:
8b:a2:69:4e:37:14:a1:1b:03:6e:1d:01:17:77:54:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:43:14:E2:26:50:9B:58:F7:F3:1B:92:5B:C9:8F:3D:F9:38:7C
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:44:dc:dc:c8:82:9f:23:f7:5a:a0:70:b8:b2:15:5b:35:5b:
87:4f:d5:9a:e9:43:17:37:a0:ae:69:e3:0c:11:e5:cb:f0:1c:
47:e0:ec:ee:80:49:f3:f0:b9:c7:ee:e8:ce:38:b8:b8:a3:39:
e1:e3:27:48:98:c4:04:25:c8:bb:16:ff:c4:57:d2:6b:ee:72:
7b:8d:9d:60:96:dd:13:6e:4d:00:87:19:e3:0f:94:2b:35:e8:
2a:bd:cc:65:5c:d8:ec:eb:77:af:75:2a:38:e5:73:26:c2:48:
d5:05:7e:91:d2:9a:86:fe:90:58:fb:8d:2d:49:e3:ef:ef:3c:
18:21:78:d7:8d:61:a4:0a:15:86:09:3d:3f:11:a4:b3:ec:50:
5d:44:eb:70:63:90:b0:e3:b7:71:7f:7e:23:9b:20:a0:dc:d2:
51:22:fd:41:a6:dc:e1:75:62:97:38:3e:ea:af:c4:f5:8d:35:
fb:51:9e:3d:7f:20:15:61:d3:f1:07:50:25:bd:bb:17:30:1b:
18:d4:b4:4d:fe:63:c5:02:e2:25:59:7c:83:cc:97:c7:8f:7a:
d2:31:1e:66:25:2e:66:14:54:3d:d0:0e:3b:c2:fd:5c:42:09:
ce:a6:75:65:ed:57:fa:bd:a0:5e:a2:8c:e4:e0:6e:f5:31:8e:
81:30:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:08 2025 by rpki-client