Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: 8EIyoxDZzXANJzfje6SNrfysPVey8vEhxxSryGOq9KU=
Subject key identifier: EC:F2:F9:97:40:69:FD:74:7E:9E:9B:CB:F9:C1:F3:8E:B9:E5:E8:13
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 0194BD4EAC5A75EE17BEDA7E524CDE37A50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: biaSUM0tsIeDyFwfaqfKhU0MJuI.roa (hash: 96WHWMwEvzPM4YoHMljlSa6xAvYqeckDM2XFH/UNGMM=)
2: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: 7+gxn/u6ZS3b9GLIaBIyNGXyY4RUVxBEC1xdE+yIR84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:5a:75:ee:17:be:da:7e:52:4c:de:37:a5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=ecf2f9974069fd747e9e9bcbf9c1f38eb9e5e813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:cf:ba:ba:4d:a1:f0:e4:85:d3:8a:11:76:
29:4b:11:52:36:ee:22:24:1a:1f:00:30:e3:f4:92:
23:8a:36:46:df:75:95:ed:32:62:8d:b4:ee:e0:3f:
16:b9:21:60:f0:97:a2:f8:52:da:b4:4e:4c:15:42:
d5:26:fd:0c:65:a3:99:8d:a5:48:06:1e:e7:2a:4a:
36:dd:a4:e1:24:ef:41:1a:bb:03:3b:d4:32:e6:94:
69:ec:b3:36:35:e1:a5:df:2b:2e:3d:35:4f:ab:b5:
b1:74:a7:be:ef:41:a9:57:a7:ec:07:c0:cb:28:c1:
af:e2:8f:74:87:2d:ce:55:4b:b3:e4:f0:06:5e:0b:
ea:c7:7c:d3:5e:32:4a:fa:36:14:be:58:99:d2:b7:
c9:55:fa:1c:a0:49:ae:6c:e9:ea:31:2d:a2:3d:26:
63:45:8d:d5:fe:84:7f:63:1a:2a:be:55:fb:72:f8:
9a:16:6a:d4:4a:0b:21:8c:c2:e1:cb:74:a6:ff:de:
97:8d:60:32:16:a6:38:f3:41:08:93:ec:f6:a2:90:
f4:c4:b0:3d:c6:49:ee:2b:ce:55:58:1e:51:87:3b:
c6:4b:83:ff:26:b2:42:a6:b7:7a:50:db:0c:14:23:
7e:b6:48:fd:0c:fc:5e:2f:07:0a:14:e0:37:b9:69:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:F9:97:40:69:FD:74:7E:9E:9B:CB:F9:C1:F3:8E:B9:E5:E8:13
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:39:8b:5d:26:21:a2:49:c4:a1:ed:30:7b:dc:e1:f9:52:
11:9d:a5:16:aa:8a:2a:df:82:1e:61:6e:08:d5:f9:f6:15:96:
02:31:0e:c0:36:2c:86:e6:cb:be:d4:af:37:4e:22:b3:53:8c:
95:28:ba:a5:d6:a3:8d:d5:7d:03:0a:32:04:1a:d2:2e:73:ef:
4c:fe:b9:60:3f:f3:bf:18:80:83:d5:a2:38:4d:52:e8:b6:88:
df:ad:cb:e1:14:55:24:87:3c:34:5c:35:59:67:27:0d:8a:90:
31:ad:92:d1:78:2a:ae:fe:2b:da:27:5e:eb:e8:b5:d0:b5:06:
79:ea:2b:a6:0c:6e:1c:30:8d:3a:2a:f6:56:d7:2e:d5:3b:80:
d3:2e:30:cb:7e:1d:b4:ed:a7:3d:bf:fd:3a:cd:0b:e4:5f:6a:
30:45:8b:cd:e2:05:5b:07:e3:6c:41:9c:1f:7a:33:5b:2b:0e:
ac:c3:5b:f6:f8:10:38:af:b7:1a:c6:82:82:52:4c:7d:fa:00:
b3:4d:32:06:c5:9e:e9:38:66:81:00:0a:31:2d:0d:29:94:f4:
21:49:f5:48:87:4f:67:3d:e5:54:6e:72:43:c1:40:1b:f4:dc:
f9:08:18:29:ab:ff:ae:51:a2:1f:0f:2f:0c:17:33:cd:31:6e:
9e:59:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:15 2025 by rpki-client