Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: ikQL17kI0NupWps4HzUncA+Izj8whchSHuS8cpLaTJY=
Subject key identifier: 99:3A:67:BD:F0:0E:72:E1:2E:45:EC:25:0D:D0:A8:D3:E8:8D:28:80
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 0194BCAA299E6B23FCFD0DC6AA0FE5535B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: vWna/zdnxu3QipBTny0X3R1N0odneW4co8a6VLSDihc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:9e:6b:23:fc:fd:0d:c6:aa:0f:e5:53:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=993a67bdf00e72e12e45ec250dd0a8d3e88d2880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:de:11:07:44:12:df:2e:a4:9a:7e:5d:64:
4e:77:12:54:81:3f:43:1b:d3:19:6c:3b:50:85:ce:
f8:c3:67:76:0b:ee:42:57:2f:54:85:a6:4f:c5:82:
0b:3c:0d:14:dd:d2:b5:dd:d1:79:63:e7:9c:24:a7:
7f:ff:14:72:78:89:fd:05:fa:d3:8f:d0:a0:97:f6:
93:d0:30:3d:d8:9d:43:b9:33:89:70:00:4c:f0:bb:
74:40:4d:d5:44:a4:c6:6b:6a:2b:23:90:c3:65:f7:
43:4a:0a:29:5c:f4:63:56:d6:3d:42:e3:e4:41:7c:
40:55:b8:eb:d5:c8:3e:cc:2c:06:8d:c8:85:ac:63:
21:65:b1:8a:26:39:89:52:a6:68:05:8c:c9:2d:c0:
2f:1e:dd:12:fa:3b:ad:86:fd:c8:e3:77:f9:46:fd:
95:3b:92:51:87:4a:a2:78:8c:de:8a:0a:a0:6c:4e:
fa:08:4a:45:b8:bc:21:11:a8:ea:8b:35:d5:3b:2d:
c9:e5:bb:c0:d0:ac:cc:e7:a5:9f:b1:78:e8:83:46:
4d:17:1a:61:d5:2c:44:df:b4:f0:95:d7:29:c1:79:
f6:ab:8c:b1:28:fc:8b:69:bf:78:8a:ab:1c:e6:22:
e6:08:6a:1c:24:17:8c:d9:20:4a:3d:37:93:2e:1e:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:67:BD:F0:0E:72:E1:2E:45:EC:25:0D:D0:A8:D3:E8:8D:28:80
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7e:81:39:5b:b7:84:58:9e:08:3f:12:5b:43:3e:42:5e:ab:
3e:90:00:a1:fe:2e:9a:73:3b:58:e8:b3:f2:0e:9d:4f:6d:3f:
d2:25:f6:37:9f:1d:90:43:e3:0e:31:97:b5:21:17:3f:f1:33:
74:4f:07:77:9f:42:83:b1:a4:09:c2:8c:d5:a2:3d:e7:66:72:
9a:e8:a7:82:04:af:0e:87:14:dd:0c:d6:34:b8:2c:bd:04:58:
8b:8e:e9:fa:b3:9d:7a:de:9a:fb:73:27:17:55:c7:71:34:a2:
62:91:19:60:9a:52:47:46:08:3b:c5:0e:01:51:c5:78:3b:28:
c6:c2:04:cc:ce:14:ca:d6:21:c2:9e:ee:c6:27:0f:f3:bb:3c:
3a:d0:94:a2:de:f3:78:d6:de:db:2f:92:19:ea:6e:d4:a5:34:
48:47:dd:9f:19:72:51:48:96:9b:8b:6b:fb:46:21:4c:5a:61:
da:22:60:be:a1:04:80:89:93:eb:1c:69:51:b9:03:19:f0:43:
b1:03:15:25:ac:48:9a:75:d0:c6:10:f0:77:49:13:70:15:aa:
27:3e:9f:c1:10:5c:59:6f:54:be:51:1b:d6:40:f1:b4:f6:39:
30:3e:f4:01:6e:1f:6c:d4:00:73:51:8e:24:89:00:87:c6:b9:
1f:92:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:26 2025 by rpki-client