Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File: CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier: QcXzAuCpnqJF4MSzFJdHP51S3Ap3oCMh8bui2aQS7mQ=
Subject key identifier: 64:0F:61:94:44:90:C3:FF:BC:73:BF:7C:34:7A:15:E8:BE:14:AA:22
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 0194BC3BDEC4D6140864992EBBC3D0B38EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 34veN2ucTJBbi388PrmLekhLRzM.roa (hash: zPkkR8nXQL9mfEVd+D/kn8bIVDt7EDLAoyKRPC1BVEk=)
2: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: mrnyXQ/DvowI/843zrpQNjHLWjr+LwNPhjLKs6axM1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:c4:d6:14:08:64:99:2e:bb:c3:d0:b3:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=640f61944490c3ffbc73bf7c347a15e8be14aa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:66:5a:77:c4:0d:9b:ce:f5:17:9a:ad:66:
6c:25:1f:d7:f6:58:f9:43:4b:62:08:44:e8:2f:d7:
8f:42:4e:80:65:07:11:07:05:4f:83:3a:a2:cb:a2:
af:93:53:eb:0e:e7:4a:21:72:32:86:a5:97:90:78:
17:7c:bc:7e:a5:ab:78:37:30:db:bb:95:ff:6a:ea:
ed:44:ab:fe:0b:3a:e7:b0:a7:8e:6e:1e:67:5b:a5:
ee:36:81:10:0b:36:d9:4a:98:6c:21:e3:ff:bc:97:
fb:02:d4:10:82:0f:68:68:3a:9f:3e:8f:fb:93:b1:
99:85:f0:c9:86:01:19:06:bf:f7:24:08:92:44:08:
d0:dc:58:ce:3d:90:f0:18:56:57:cb:65:ec:eb:c6:
59:5a:20:3a:0c:42:51:0a:b8:e6:6a:de:a1:8d:76:
a1:63:9d:04:fc:29:b6:19:e8:1f:07:70:a2:fa:ba:
db:53:60:2c:ae:d7:6b:43:49:cf:28:da:6e:f2:be:
07:dc:a9:41:56:73:f8:c6:67:20:b3:ad:fb:d5:ce:
73:1b:63:e0:79:e9:21:b3:cc:98:2d:e3:91:cd:c1:
e2:97:76:7a:b0:4a:37:ec:04:61:b5:55:13:50:b5:
c9:8a:8b:ef:07:12:30:74:d7:a3:37:a5:fa:25:4b:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0F:61:94:44:90:C3:FF:BC:73:BF:7C:34:7A:15:E8:BE:14:AA:22
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:6c:6e:9d:cf:4d:45:12:e8:c2:0c:cc:ee:19:33:c6:ec:
bc:ad:02:8d:40:5c:0c:1d:6c:09:63:5c:35:28:2c:75:96:17:
7b:58:89:67:e4:77:87:34:99:fa:ce:af:b3:43:98:bf:08:01:
4b:77:42:12:d1:07:6e:f7:fd:83:0f:4f:2c:1f:d4:02:6d:e8:
e5:4b:ba:5d:6b:e0:6a:77:8e:d7:7a:cd:29:75:60:95:b0:97:
4b:ae:12:1d:68:30:a2:a5:9b:cf:4e:b6:be:7d:1c:1a:eb:d5:
8b:99:05:cb:3e:f7:61:c7:24:81:60:ee:b0:d0:a4:79:27:0b:
8b:0a:12:2b:7b:95:e6:92:e6:d9:f6:a5:37:53:a9:c2:c9:f3:
00:67:32:ce:ed:dd:80:9e:ee:ac:f4:26:72:ad:7d:da:fb:ca:
be:ca:f8:68:1a:60:08:3f:96:e9:b7:00:0a:1c:d9:77:e8:0e:
0f:a7:11:4c:cd:d2:af:ad:7b:66:31:3b:fd:fb:bb:f3:ee:aa:
34:5d:a3:b2:87:d7:a1:e5:06:8f:a2:de:05:40:60:7f:ce:73:
35:9d:d7:45:dc:4a:e8:98:44:85:8a:76:ed:22:93:73:32:fb:
c9:aa:3b:81:7a:25:f4:49:87:ca:6f:01:eb:d4:f2:0d:16:d7:
91:63:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:56 2025 by rpki-client