Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: UqEDMWDzjE+Xj+v3MP9Y/5eazTufbOW/kOvn7YqcsnU=
Subject key identifier: D9:91:10:A5:22:27:25:F0:36:FF:D2:CA:FA:AE:5A:5F:99:59:2D:EF
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 0194BC3C8397BAB874F2AD975F8A409C0B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1208
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: LkB7HSdQKcebZeOcllEj9XpXLQari41vHeWzvoMqM5U=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:83:97:ba:b8:74:f2:ad:97:5f:8a:40:9c:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=d99110a5222725f036ffd2cafaae5a5f99592def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:d0:c2:e4:b2:66:90:a7:25:0a:ae:fb:e5:
22:9a:d0:19:9a:42:4f:13:d0:c1:6d:8b:fb:b2:7a:
5c:9f:b9:7c:ec:38:39:2c:c2:d3:9b:ca:c7:e6:3a:
22:e5:71:24:fd:b3:e5:d7:b8:cd:17:58:16:57:67:
68:01:f2:25:88:b3:d0:32:ae:0e:23:06:ee:6b:e0:
21:a5:0c:35:4c:c5:aa:48:bc:18:69:bd:a6:15:9f:
e8:7d:0e:fe:47:c1:fc:19:35:16:96:f8:02:b1:33:
20:59:b9:f5:0b:62:c0:5f:97:13:c9:14:f5:48:e0:
c6:4d:4b:c1:ff:df:f1:c1:4b:da:e8:53:95:43:75:
cc:7b:99:a0:63:26:4e:c3:b6:ac:ce:01:38:eb:c5:
2e:e7:70:f8:8d:cf:58:79:b0:5f:6b:ad:ca:ad:7e:
68:a4:e5:06:1d:52:96:a6:c7:35:4d:64:c2:8a:26:
4b:88:d6:58:2d:60:11:1f:c4:a1:7b:1c:7b:4e:ba:
a7:f0:c0:88:a9:d0:b1:78:67:6e:74:04:e6:64:86:
cd:43:0e:fb:51:99:4e:0e:5f:63:4f:f2:52:90:80:
83:59:2c:6e:ca:d9:b1:05:c4:fb:ef:c1:22:72:76:
8c:fa:fb:cd:d6:6f:2e:4b:c2:f9:cb:16:41:5b:12:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:10:A5:22:27:25:F0:36:FF:D2:CA:FA:AE:5A:5F:99:59:2D:EF
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:f7:e2:a3:01:c7:ee:8b:f3:d8:8b:93:44:b1:a5:4f:77:
97:6f:62:25:92:51:ce:89:75:92:4c:02:ae:0c:3f:8e:77:ac:
17:10:ae:45:15:ca:d3:50:a9:82:2e:fc:18:28:fc:75:44:8c:
91:14:6d:f8:18:1b:16:b0:3c:5f:a7:63:e6:4e:c3:2a:94:60:
cc:71:83:ac:53:e8:d1:21:d3:14:14:74:b1:63:9b:35:59:c5:
35:a9:f1:78:08:46:ff:6a:f5:0c:f0:34:fe:29:82:b0:7e:e1:
12:87:13:e3:d5:5f:12:80:46:3e:0d:d1:2d:d2:0e:09:f5:c7:
61:5a:98:3b:da:de:5e:7e:09:18:29:88:2a:66:9a:8f:cd:bf:
e4:e1:b4:34:24:d7:ac:aa:0a:28:2f:fc:70:d3:81:03:2d:d6:
0d:e9:9c:ee:58:1b:25:02:82:e5:c7:c7:18:0e:7d:f7:5f:51:
ae:be:09:bb:59:02:ec:34:e4:63:9b:29:35:9a:d2:91:4a:e9:
e2:4d:39:5d:fb:54:54:e3:c7:43:52:37:51:07:d9:ea:c2:8b:
ff:9e:39:5c:64:ae:2d:36:33:a8:3e:36:42:2f:ef:25:4c:80:
6c:d6:d9:72:c1:93:a7:a4:71:0b:e3:a1:aa:45:9b:b2:e5:06:
4c:aa:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:52 2025 by rpki-client