Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: bBGwGU0OkLGgyXthiNujGO4zWs4SrZn0vp7nWuODdvY=
Subject key identifier: 37:98:CE:86:46:F9:AE:D2:97:B0:79:D0:B4:FF:CB:6A:DD:F2:66:D6
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 0194BCE0C6970EEE2C4430C0E4519A4ACB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0BC7
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: 2AeTRmf1eYjrKjumXFvxHAoEWsienhwj+Kq+PpvvuJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:97:0e:ee:2c:44:30:c0:e4:51:9a:4a:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=3798ce8646f9aed297b079d0b4ffcb6addf266d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:45:4e:09:7e:91:b6:20:f1:cb:81:7c:ab:
61:30:ca:63:28:4d:9f:b2:4b:b3:13:a3:80:43:55:
45:1b:18:bd:80:69:6c:5e:8f:f1:54:ee:1c:b5:83:
5f:e6:e2:48:f9:ce:9f:71:ff:8d:ed:92:e0:93:cb:
af:a8:a1:b5:77:86:cb:ad:c5:11:86:b1:aa:0c:5c:
5c:64:d3:67:87:53:8e:05:53:05:c9:b8:20:24:14:
35:9c:ee:27:c9:9c:2a:47:60:80:3a:a8:77:a9:c9:
70:a3:bc:16:cf:60:0d:19:b2:cf:90:3b:fa:0c:3f:
34:16:54:a4:25:b1:2c:d2:74:34:53:a8:f3:11:19:
7e:10:47:a9:ee:30:22:79:93:9b:c1:76:7f:51:9e:
ad:6f:51:51:8e:ff:74:38:dd:cb:92:f3:8f:61:7f:
79:a2:d4:d0:77:f9:1a:16:dd:7b:8d:fa:31:4e:7e:
05:ee:83:bc:1c:62:23:5b:f6:c9:97:89:ca:67:5f:
0b:0c:72:6b:98:f2:92:42:9c:0a:d9:83:ea:81:00:
00:2a:fd:17:22:76:b0:1a:8b:76:14:8a:69:56:65:
2c:64:53:86:dd:76:fa:d4:1b:cc:2e:78:2a:5e:d8:
bc:fb:76:f6:11:1b:ef:bc:d7:6a:8b:a2:55:03:42:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:CE:86:46:F9:AE:D2:97:B0:79:D0:B4:FF:CB:6A:DD:F2:66:D6
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:a4:42:c8:0c:d5:21:09:43:f0:25:ed:99:ec:88:31:58:
0e:60:7e:f5:30:f0:08:6e:a2:36:3e:cf:7d:2b:db:37:76:d2:
c2:e2:7f:56:b1:69:ca:61:b3:d1:99:97:c2:de:15:58:42:f7:
c8:e1:e5:76:ca:35:c5:11:6c:9d:28:f1:cd:d4:8f:bd:94:a5:
6b:10:e1:06:55:3f:c9:cc:f6:ae:e3:75:76:2b:61:53:d5:5d:
00:50:88:1c:6d:82:71:5e:b9:c9:ac:ba:cd:35:95:d3:95:00:
1d:c8:b6:02:d9:34:a9:5d:08:01:27:f3:ef:8e:1e:4e:ae:d1:
39:4f:51:3c:8a:cb:bb:cc:be:a0:74:bb:d0:2d:50:ae:08:f4:
9b:94:4b:9d:e8:b1:41:6b:21:f3:4a:ef:28:f7:fc:f4:62:ae:
5e:7d:a1:60:01:17:a0:30:26:ae:1f:91:3d:1f:e6:85:d7:c6:
d8:14:ea:52:fc:69:30:d5:b9:df:00:05:3c:b3:cc:71:a2:94:
01:c6:26:c3:5b:bd:1a:19:b4:d6:79:5a:5c:1e:bf:3c:95:c5:
b0:6d:fd:bc:3e:7a:df:d4:8b:f5:db:fe:d4:6a:74:e5:6e:f7:
0b:6b:cf:39:64:09:06:fe:28:98:2f:ec:fc:57:66:f2:70:d3:
a1:86:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:00 2025 by rpki-client