Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: SL8rH3PX3kxQSU/srPiMgIKrWz0Bz9FsuMaG45Dcn+I=
Subject key identifier: D1:C6:2B:E0:85:BB:BE:C1:6D:0E:D6:7E:F5:F9:A5:E4:CA:84:CC:E1
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 0194BCE09C5F3A0911F770AD82715590678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 0727
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: EYAi1ELf5D8/fhfX/bjJZKkjUFrB+WA6DxVeYzU0MSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9c:5f:3a:09:11:f7:70:ad:82:71:55:90:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=d1c62be085bbbec16d0ed67ef5f9a5e4ca84cce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b6:91:9c:30:a2:12:54:ca:ca:8b:2b:44:b2:
8f:f9:ce:91:da:f1:b8:89:19:2c:7a:9e:39:08:e3:
6d:a9:2c:b9:84:c5:7e:83:cd:4c:aa:db:9e:45:9b:
05:a4:3d:79:be:04:2c:88:3b:ab:53:02:bc:f0:31:
a8:61:30:81:86:85:a0:18:c1:0e:5e:95:c4:c4:fd:
59:fa:01:8b:d3:91:f9:26:95:3a:20:f3:a6:da:f4:
e9:9d:6a:aa:0d:de:5d:44:7d:7d:73:e2:a1:2b:b2:
af:56:51:a9:03:20:48:ec:1d:23:da:9c:9b:8c:4d:
56:af:50:78:d4:dd:db:b9:71:8f:ca:9e:a6:58:47:
f3:a7:1a:54:e7:93:1f:83:6e:36:e4:4e:0e:81:be:
66:3a:e3:c1:73:77:62:ae:d2:32:77:46:4d:df:98:
4b:47:1c:25:25:0b:a0:bc:a3:01:4c:ad:aa:f3:73:
29:39:13:f4:22:78:ca:26:fe:f1:d7:7c:82:aa:23:
25:94:79:89:25:1e:97:65:7e:09:81:c9:f2:33:40:
31:0b:aa:39:9d:de:17:ef:c6:3c:e3:73:dc:1b:a9:
ac:b2:73:e3:b3:d4:78:14:c1:07:6b:82:af:39:12:
16:df:16:eb:d5:9a:43:14:64:31:76:15:b2:e6:a0:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:2B:E0:85:BB:BE:C1:6D:0E:D6:7E:F5:F9:A5:E4:CA:84:CC:E1
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:9e:21:32:0a:f3:2e:99:73:56:36:ef:2e:88:9b:cb:a6:
6d:d5:c7:d3:07:7e:c1:02:7d:db:ad:4b:e0:f8:42:eb:49:36:
7b:c9:cf:3c:44:fa:a2:9b:75:5e:33:a8:32:c1:a1:e2:3c:80:
bf:0f:e4:3b:54:ab:45:14:52:5b:cd:a2:56:94:65:da:e4:08:
0e:49:b6:00:5b:f6:2f:8a:62:02:67:63:fe:a3:ab:b9:8a:57:
8c:34:3e:5a:d6:42:fe:2f:cb:ce:d1:81:55:60:b1:fc:9d:13:
59:de:be:49:7e:3d:13:2b:3a:a3:b4:49:d7:c2:b7:86:d0:ba:
ba:53:7e:17:01:cc:c1:9e:18:de:b6:20:78:f5:7e:55:99:38:
49:a1:2d:cc:76:6a:ae:82:f6:e7:16:9b:c8:b8:cc:37:a2:4d:
42:45:c3:af:41:5e:76:63:d4:57:63:69:0d:08:8f:a7:99:95:
6b:56:c3:f9:65:7a:b1:5e:8d:a8:97:36:fa:2e:a9:e8:58:c9:
41:b2:6e:97:02:95:f9:af:11:1b:bb:b6:ca:e7:5e:8b:89:f8:
54:df:09:2e:9d:17:91:f7:13:90:b3:e1:93:d9:d4:3f:f9:23:
d7:5c:b4:0e:62:d7:46:5e:72:dc:31:4b:38:6f:70:f6:d5:96:
03:f5:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:09 2025 by rpki-client