Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: AlAqG3IHA7eqCpu1UQPk8uJ6drctDPiqNblh5/7MYZM=
Subject key identifier: E4:23:46:E4:0C:D7:65:06:32:21:1B:1E:D6:C9:7D:AB:41:9E:8B:1E
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 0194BC3BED6D59D25904097E1EB0BBE6768B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: JSGJZ/WtdaOtbxudMEDCbf9fhnILg6p0zxXFgvBaGuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:6d:59:d2:59:04:09:7e:1e:b0:bb:e6:76:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=e42346e40cd7650632211b1ed6c97dab419e8b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:f8:53:e6:7a:cb:05:88:80:5d:71:1e:c1:
ca:85:fc:93:f8:e3:5e:79:db:ad:a0:80:9a:4c:81:
14:81:a4:c5:ea:4f:79:b5:63:c1:28:4d:56:d8:d6:
c7:52:7f:be:18:f1:89:a9:74:bf:a9:fd:75:a7:c7:
16:18:7c:55:d5:51:d7:ce:2a:41:22:2e:b3:a5:08:
6a:fc:7b:63:22:1c:5b:1e:ca:63:95:00:ac:d3:04:
ae:9f:ed:a4:a6:de:bd:72:f5:90:19:45:bc:83:15:
0b:1c:eb:3b:94:75:d8:ed:0a:8a:12:2b:07:2a:49:
5b:66:1e:71:7e:02:a2:42:4f:50:09:12:f4:70:c5:
9c:96:1c:45:21:c6:ef:15:96:0e:06:1b:22:a2:78:
33:15:79:d5:f4:bb:56:c1:28:67:a3:d1:fd:bd:8c:
53:d2:ff:db:84:8a:9f:5e:b3:c5:51:0b:53:58:e7:
8e:be:8d:b1:e6:14:9e:48:54:47:aa:6a:e4:7b:84:
75:85:30:ab:52:cc:10:c1:db:2f:68:5a:49:b3:f8:
56:9a:14:4c:5a:f6:77:bc:3b:46:bd:c8:56:1c:77:
de:26:43:b5:b2:29:06:b2:cf:23:a1:a0:e0:1f:4b:
8f:9e:83:d8:a6:8c:70:14:00:a1:e4:d4:59:b2:a0:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:46:E4:0C:D7:65:06:32:21:1B:1E:D6:C9:7D:AB:41:9E:8B:1E
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2d:e9:c1:ec:f0:48:cf:70:64:fb:d3:6b:5e:a5:25:57:5b:
8e:bb:ad:ff:0c:95:60:0e:42:60:91:21:27:df:f4:62:27:20:
67:11:14:f9:10:3f:60:0f:7a:79:8c:dd:81:d4:9a:2c:38:a8:
f2:7b:a3:02:c5:a9:06:9b:9d:9d:41:88:98:39:1a:fd:99:47:
2e:4f:94:20:5a:48:cf:b8:22:cf:11:60:07:70:49:ac:41:8e:
1d:61:f1:a7:37:4e:0f:52:b2:3d:46:4f:52:0c:9f:55:d2:eb:
63:25:75:5e:fa:99:72:d1:a8:8c:84:89:41:ee:26:1d:28:4a:
a5:ad:25:8c:aa:15:ce:ca:de:87:73:52:b4:0b:b4:34:36:8a:
7b:42:9a:ce:8c:5b:c5:96:63:5d:44:59:4b:b6:44:26:19:e1:
e5:f7:f8:50:8f:71:85:c8:9a:69:be:d5:28:84:88:71:30:8e:
39:aa:4f:e4:a5:0c:57:26:e2:2c:23:b3:f9:b3:c9:e1:f6:db:
76:65:f6:b5:b3:27:c4:59:7f:6f:cb:cb:2d:9e:6b:5f:b2:58:
75:4d:e7:d3:19:10:11:b7:84:b5:02:09:d4:9c:57:0d:44:a6:
d5:7c:f9:d4:08:18:05:d8:5e:4a:da:2d:71:f5:c3:0b:30:d1:
6e:8e:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:43 2025 by rpki-client