Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
File: KVZYS3DOhHwam0AFSLFNsDG-3_I.mft (raw, json)
Hash identifier: quGTFz87Gkp+l1x1YIiHbzbeqruH2sezzoyK4MrzQKA=
Subject key identifier: 4E:FA:B2:C8:47:2E:96:BE:AD:F8:E1:DC:88:95:2E:FA:E8:DF:57:22
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 0194BD857136C898FB043969FB75EE130AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
Manifest number: 070F
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Hg9ftZU-9AaUb-uuud6YLmFeeqc.roa (hash: kIMrWnLBKnZqV6WvzFWIcWQTCQyb5mE+suXdE7Wee/M=)
2: KVZYS3DOhHwam0AFSLFNsDG-3_I.crl (hash: aSi28wWqcee/xDe7V7VMrREjyE1omqXvDj38w377OxU=)
3: UY5PADzbeIj93cBuCOAZIezRods.roa (hash: 94p+JoB1n19vWg1B3h2izrs5nmNxhhnj9iR596bjT+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:71:36:c8:98:fb:04:39:69:fb:75:ee:13:0a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=4efab2c8472e96beadf8e1dc88952efae8df5722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:db:3a:ac:04:f9:02:52:2b:b9:9d:17:b3:
42:34:11:fb:eb:43:10:43:77:53:32:05:9e:89:d9:
75:12:a1:80:4e:62:83:31:22:1c:2a:5c:e7:98:f9:
0f:a0:1d:30:a9:0e:9c:17:bf:6b:11:b2:c1:18:0f:
3c:f8:1c:84:0a:66:f4:4a:0e:7f:2a:62:1d:2e:a7:
21:60:45:ae:e0:d1:40:1e:68:cd:26:32:b8:d8:4d:
8c:3a:4f:95:27:1c:b3:05:91:5d:d2:9c:ac:97:da:
b4:31:11:6d:bb:cc:fc:6d:e5:35:e6:5f:71:a5:9c:
38:7f:2a:ea:97:7a:f4:24:02:00:eb:c1:8c:d7:79:
19:e5:f8:5d:d1:86:7c:a0:8d:6a:8b:b6:cb:ac:18:
df:15:84:9a:a3:04:54:aa:77:74:07:6e:fb:ad:5e:
cb:c4:c2:e7:dc:e4:9c:e7:41:80:62:db:ec:d9:ae:
21:b5:cb:65:2c:e9:fe:23:81:09:87:37:2f:84:84:
d0:c9:44:02:2b:35:d5:f9:5c:9d:85:8a:60:bd:56:
c8:90:f0:a6:d0:ba:ce:8f:e8:12:b7:42:f6:5b:9e:
06:5d:c8:22:02:69:dd:0c:c2:0c:32:5e:af:3a:67:
d7:c0:f8:ef:4a:c8:fd:1f:6c:9a:7b:f6:86:b2:ea:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FA:B2:C8:47:2E:96:BE:AD:F8:E1:DC:88:95:2E:FA:E8:DF:57:22
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ee:32:60:a3:09:c7:ce:87:6e:8f:05:ef:b2:56:09:38:16:
38:af:b5:df:eb:dd:b8:af:4c:f5:c4:90:11:ff:68:cf:4a:67:
df:28:fa:f0:11:09:b5:68:a5:88:a1:ce:ae:9d:52:7d:a9:be:
c3:a0:b7:b6:ff:23:49:40:90:96:b5:63:8e:77:89:e2:72:7c:
7d:61:2e:3b:a6:df:4c:e1:e4:58:31:99:7b:e2:a1:a0:d9:94:
45:fc:92:a5:e9:7f:a5:6b:e1:97:12:66:5c:13:e4:b8:a3:a3:
ca:80:66:e8:53:11:f0:b3:c9:19:47:5b:44:bd:be:c1:44:28:
b6:54:5f:bd:1a:e5:4c:10:e8:82:4d:fd:20:dc:a3:c3:67:d5:
e9:d1:cd:6b:7d:e6:02:68:a9:47:6e:73:94:fc:df:47:55:ce:
b3:60:10:3f:22:a4:cb:6b:70:cb:83:3b:3f:59:94:8f:70:90:
ad:87:ff:8d:7d:ab:c0:72:23:7c:41:75:68:73:51:55:68:17:
b9:88:3d:60:3b:17:86:c0:36:ff:fb:5e:2a:ff:c8:d7:55:e3:
ad:ac:39:2d:1e:b5:88:ef:4c:66:75:11:3a:dc:ac:3a:b5:43:
e9:f2:a5:ae:6b:70:e7:2b:eb:f9:32:c3:78:32:4f:8c:a5:1b:
ef:46:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:45 2025 by rpki-client