Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
File: kliCV2f7wINzKpbhgSzMW_4VAYU.mft (raw, json)
Hash identifier: uzVWsnhGQJJ/l4AVLRCxkQRa4qHaVDwLxFA83T0ME00=
Subject key identifier: BF:03:07:4B:C1:CC:2E:6D:F5:9D:B9:4F:A3:8A:8C:8D:D0:AA:36:D7
Authority key identifier: 92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
Certificate issuer: /CN=9258825767fbc083732a96e1812ccc5bfe150185
Certificate serial: 0194BD4E6F28035FA743963496947BBAA1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: kliCV2f7wINzKpbhgSzMW_4VAYU.crl (hash: O6IR0bkqDbPXOrRLi8KeoZnaJM/NE94Fnow1q/ihGGY=)
2: yvQyy9Z9k5i1VmlHAKaertyzN34.roa (hash: Ff1Cn1lR26UTFSkop2LtIu2dpCA0zAQ/5vNY09uigMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:28:03:5f:a7:43:96:34:96:94:7b:ba:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258825767fbc083732a96e1812ccc5bfe150185
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=bf03074bc1cc2e6df59db94fa38a8c8dd0aa36d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:9f:4e:0f:02:20:a3:95:c6:dd:fc:56:54:
54:d2:96:e3:e6:4c:d2:89:8c:e1:2c:2c:3c:d3:f3:
dc:39:77:67:14:57:75:e1:f2:3c:61:9d:6c:58:4c:
45:f4:51:7c:92:28:13:07:85:9f:c0:8e:6e:21:83:
0c:e1:4c:69:79:07:2a:72:40:4e:54:84:d9:d9:81:
f5:50:c0:a2:cb:fc:3b:28:d4:a3:b5:44:6f:58:c5:
91:02:dc:4e:bd:44:00:9c:b2:51:9b:fe:0a:53:5a:
89:c4:e4:55:d7:1b:a4:8a:24:f0:61:7a:ca:1f:ed:
e4:e1:55:4e:f9:61:9e:ea:92:38:7f:a1:b4:2d:f4:
bb:ff:a5:31:62:cf:14:34:9a:c4:94:17:ca:16:34:
63:a4:70:05:8a:d9:5f:b7:0c:36:6e:ce:fc:e5:d1:
b1:90:71:43:42:c7:5f:1f:2f:5d:87:c3:6a:bf:3d:
e6:f1:38:62:90:79:45:93:93:da:a7:62:5e:f2:d2:
2c:af:8f:e0:5a:5c:8f:7f:4d:b1:72:b0:69:1b:58:
1f:3d:63:a2:25:5f:52:2b:7c:64:33:33:f0:24:36:
65:09:39:f7:be:0b:c9:cc:4b:fd:38:34:eb:b5:ec:
a0:fa:5a:6b:52:d8:8d:77:d2:9e:96:99:7d:36:f1:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:07:4B:C1:CC:2E:6D:F5:9D:B9:4F:A3:8A:8C:8D:D0:AA:36:D7
X509v3 Authority Key Identifier:
keyid:92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:45:b6:90:c7:67:93:bb:c3:30:ae:ac:66:0b:12:b8:ac:49:
b5:60:32:dd:40:51:61:01:7c:b9:ee:b7:a1:60:e9:b9:11:70:
9a:81:ae:e7:86:80:54:fe:8a:0c:2c:52:82:76:b4:b1:c5:91:
bc:a1:1a:83:e4:c4:50:43:16:b4:b7:00:4d:02:e5:2e:3f:fb:
f9:28:b5:7b:fd:8d:51:ec:6d:12:c3:88:84:fc:e2:4a:57:6e:
1d:2e:c1:64:48:09:4f:d5:b6:00:8a:06:60:e3:d6:4d:8d:75:
60:b1:86:48:31:32:9e:d6:7b:fa:1f:d5:7b:86:4b:b1:f0:f2:
97:10:eb:a2:31:47:a4:7c:06:9c:46:bd:60:14:f7:48:32:8a:
88:06:f7:6e:46:1c:06:ea:89:e1:32:e8:9a:34:90:ba:65:84:
8c:e9:45:5d:9a:30:43:86:03:fa:5b:65:56:b1:93:bf:b9:22:
b4:6e:ef:12:24:08:cf:7d:c8:e9:dd:4c:c3:2d:ff:55:bd:65:
31:da:90:da:df:96:47:21:de:06:df:6b:98:9e:01:86:82:59:
41:b6:20:dc:1e:29:ae:43:40:3b:a3:62:97:27:9f:f0:3e:a6:
e8:74:51:ac:75:05:36:58:a5:29:92:5b:33:cd:b5:cc:33:9b:
e1:d9:1b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:13 2025 by rpki-client