
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: /EfwzYMbDjxkKHF6kAh/ArsxQ5BGjCqd/f1UF7mwiMc=
Subject key identifier: E0:36:01:47:1A:96:09:16:C6:6F:C2:E1:27:B0:5B:2C:56:9E:86:E1
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 0194BC727B00A082F07DFEEABD4B123148FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: Uvjk/tXn9s+wOZQ64tPHXcDgbBeW/0+/r+x0Qe2KVf4=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7b:00:a0:82:f0:7d:fe:ea:bd:4b:12:31:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=e03601471a960916c66fc2e127b05b2c569e86e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:c7:f5:7e:f7:9c:58:ae:a0:c4:84:47:93:
c8:b7:f2:2c:01:35:a9:bf:56:5e:86:11:2e:7c:78:
f5:27:74:89:15:35:99:84:b4:a9:16:2f:f0:ee:b3:
f1:f6:78:ca:92:da:2c:97:85:71:31:73:5d:95:9e:
7a:63:47:43:fb:49:3b:8a:7a:2f:a4:2c:14:60:d9:
83:52:6c:0e:39:dc:e0:88:1d:96:37:5e:ef:08:1b:
af:60:a3:88:66:e0:94:4e:52:ce:d4:6b:9c:cb:23:
c7:df:e1:3c:ee:05:a7:c0:61:f6:5d:63:fd:e1:ac:
37:e1:5d:4c:12:73:dd:03:57:e3:3a:2f:6d:7d:12:
c6:86:cc:94:34:d8:68:31:56:bb:24:6b:27:00:bd:
f2:f8:ef:f5:78:57:6b:0f:2a:d2:ab:30:47:18:8f:
53:95:8c:69:39:78:3e:96:a7:7d:99:45:72:37:72:
af:ae:98:20:d2:2f:d0:8c:29:9b:83:6a:d1:f2:57:
34:c6:a4:4f:a8:0f:a1:44:0f:fc:ed:a9:20:ad:de:
64:49:47:a3:2a:0d:ab:32:81:5d:ab:78:f5:73:95:
e9:b8:97:23:26:37:ea:83:1f:cb:46:aa:a9:8c:31:
98:24:47:af:72:39:7d:7c:aa:a4:17:0d:45:e2:cd:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:01:47:1A:96:09:16:C6:6F:C2:E1:27:B0:5B:2C:56:9E:86:E1
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3a:93:cd:89:5f:a0:a2:e2:11:03:f4:50:75:da:c7:36:30:
1e:33:bf:c7:b2:31:7d:cb:69:11:2d:f0:02:a1:07:ed:5e:ae:
6a:30:e5:1c:06:c9:33:e2:63:39:52:8c:81:0b:df:e3:11:cc:
fc:80:4e:8a:e1:70:32:cf:56:5a:0c:95:d6:bc:e5:95:77:da:
7c:1d:d6:98:f0:7b:f2:63:45:19:1c:4b:0e:81:38:1c:f5:a0:
51:1e:76:ab:15:25:51:a6:40:aa:fe:79:43:ed:72:e5:91:81:
c9:c1:d6:e4:ca:53:08:f2:d5:8c:46:45:32:77:f4:98:b8:f7:
5b:b9:c5:03:90:82:e0:94:61:e8:b6:3b:73:c2:68:eb:7f:04:
2f:74:30:b9:41:7d:b0:c2:97:e2:3f:eb:a3:24:fc:bf:b3:1a:
94:ab:c9:e3:18:68:88:2b:c2:35:45:df:60:af:2e:a6:e5:7e:
49:c2:d1:94:42:12:92:cf:fe:65:12:7e:b5:da:d5:19:c8:d5:
2c:18:e8:88:78:62:12:a2:5d:21:bf:43:2d:fa:e9:d1:b9:5c:
10:09:8f:11:03:43:ab:4d:9a:5b:73:02:36:26:0a:45:72:47:
99:03:92:36:fb:05:77:58:8f:b3:a3:9f:e8:0d:b2:06:ce:ba:
cb:09:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:19 2025 by rpki-client