Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier: BrCt+DCeEDrKk3xqgxdzkYTiKHPV9EaEietZ2aQBaV4=
Subject key identifier: 68:4C:AA:38:50:73:3B:E9:C0:EF:C0:A4:86:67:78:D2:0A:78:81:34
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 0194BC3BBD02FB0592C8E3762DF31AC11E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: Dnz/8oCSuszmQwbWOzKSynlOl3Rf7OasXxL6kyacgFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bd:02:fb:05:92:c8:e3:76:2d:f3:1a:c1:1e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=684caa3850733be9c0efc0a4866778d20a788134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:84:d5:80:e1:80:b3:50:e3:cc:ad:f7:0b:
db:73:00:d3:fb:63:e8:da:49:65:7d:69:41:1e:6e:
8a:37:7a:eb:fd:66:70:26:63:cd:b0:57:9f:36:30:
2b:07:d3:48:20:5a:2e:e9:c3:80:11:6c:ed:ef:c7:
51:25:93:78:c9:60:45:5a:53:12:63:75:74:39:78:
0a:f4:6e:cf:7a:83:0b:4c:03:6a:04:0a:69:58:bd:
39:35:8e:c2:94:1d:5a:57:c2:66:7c:25:19:ba:0d:
67:1a:8f:ff:0b:7b:59:30:e8:f0:08:94:ae:2a:3a:
4b:ed:32:19:b5:90:80:2a:11:24:73:b3:55:04:d5:
b8:47:df:89:9a:c3:07:20:98:6b:37:6d:eb:6a:07:
9f:61:a6:71:4a:f4:d0:32:09:95:69:71:09:30:05:
34:6e:16:b2:40:5f:3a:e7:e3:ac:a6:7e:1a:0d:88:
1b:55:69:6e:33:6f:f5:ab:a4:78:69:40:2b:22:82:
18:5f:30:8a:87:a5:2d:60:f3:a7:2a:75:09:e2:75:
56:7c:7c:62:b4:57:35:a5:ce:04:5d:1a:a4:bf:cd:
87:d0:86:41:76:4d:9d:a4:12:65:a7:fd:7f:c9:a7:
0d:1f:24:b4:70:ea:e2:e5:39:74:f4:52:69:cd:1a:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4C:AA:38:50:73:3B:E9:C0:EF:C0:A4:86:67:78:D2:0A:78:81:34
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a3:b3:7f:ae:d6:78:97:3f:d3:e5:c9:2c:6d:30:03:42:83:
d1:1a:fe:d5:88:35:36:c2:d3:db:fd:e0:69:fa:73:45:2a:f1:
aa:a5:20:96:d9:e9:dc:5c:fa:08:9d:72:d5:d8:60:2f:19:39:
7a:f3:7a:b1:8d:bd:66:ea:aa:8e:fb:7b:49:81:fa:7c:54:48:
c3:64:78:b8:32:02:4f:ab:41:ad:2f:af:b1:f8:c9:fc:71:8c:
15:81:4c:b2:38:3a:8f:98:3e:ac:ca:9c:01:55:73:a8:53:1f:
41:d8:91:d5:7a:f9:55:17:ff:36:3d:5b:da:25:1e:df:b2:9d:
e3:fe:f8:14:e2:f8:7b:04:82:76:b6:f5:f2:1a:04:60:c1:45:
cb:43:d4:e7:a0:79:ac:d5:0c:18:f5:43:e3:c4:6d:20:3c:3d:
5f:03:e0:60:0d:cd:7d:e4:37:d6:da:ed:50:71:45:3f:6d:d6:
73:a8:15:74:25:2b:3e:56:40:c4:2d:1c:2e:eb:46:0c:fd:32:
bf:5c:92:96:00:43:9a:3d:cd:0e:9d:3e:1c:a7:f8:99:f4:7a:
1c:53:71:8d:b5:15:fd:a3:8e:3a:48:52:90:c2:0b:7a:37:51:
de:da:6d:d6:7b:75:d3:5f:c6:42:cb:ee:ec:be:2d:30:88:47:
7b:40:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:23 2025 by rpki-client