Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: fZg8RmS0uVVnFz/2Nmg8Vr0jfZ++7ANEJveSdSowXnU=
Subject key identifier: 75:4D:3F:BD:39:47:14:97:2D:AD:37:D7:FA:AF:65:69:3B:BF:21:5C
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 0194BD4EA09E27F44298EE6DEC82202AF355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 0468
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (hash: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: v6WENslHffrOw4jstQybt8uMYnqFs8+2JaHtB3eMivs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:9e:27:f4:42:98:ee:6d:ec:82:20:2a:f3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=754d3fbd394714972dad37d7faaf65693bbf215c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:e0:71:bb:8e:06:94:8a:17:3c:cb:dd:1c:
9c:aa:48:ec:38:1d:bc:3d:6b:31:24:a7:08:ae:84:
df:9f:9d:01:a1:a7:d7:eb:79:7f:40:6d:f0:4f:29:
0e:0d:9b:7c:1f:87:fd:99:c6:d8:29:9a:30:b0:f9:
64:f1:59:cc:50:17:c5:71:15:b2:23:92:62:02:ea:
f6:6d:c2:1b:79:08:51:30:55:54:cb:14:bc:7a:8c:
ce:cf:dc:6a:32:5b:8a:17:4f:dc:77:13:dc:95:2b:
5b:27:fa:a7:f2:f6:c2:da:ab:70:de:76:af:61:f9:
0a:cc:f3:3e:9b:b9:76:6e:2e:0f:03:e4:ec:82:82:
71:33:7b:6b:25:96:f0:c1:51:e2:dd:85:a2:a2:2a:
56:b0:d4:c9:62:48:dd:2c:d9:67:89:4b:92:c4:69:
2e:ef:1e:64:c1:91:58:4a:d6:00:40:d8:a8:4f:8c:
ea:2d:da:cd:46:b2:77:31:6f:64:04:4c:6f:14:dd:
77:63:2f:1a:0b:4e:0b:69:03:61:7f:da:a0:c1:c6:
3e:a9:57:51:01:0a:2e:7e:a4:4a:f9:ef:10:a0:18:
eb:10:83:1a:22:e5:20:f8:bd:4e:04:48:77:8a:9a:
73:78:a6:1a:1d:3d:61:26:80:34:76:b1:e3:ef:9d:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:3F:BD:39:47:14:97:2D:AD:37:D7:FA:AF:65:69:3B:BF:21:5C
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6f:41:6d:c0:44:c2:93:21:dd:6d:b6:1d:ad:be:c2:54:2b:
00:5d:15:61:60:db:4f:e2:f7:8d:3e:80:6a:76:93:37:31:b3:
da:32:3e:dd:98:a2:2b:41:91:9d:f6:1c:4e:64:6b:52:be:fa:
3e:a5:1b:32:97:c0:86:04:76:9a:ff:ba:70:a2:06:6e:2c:27:
3f:86:58:d5:47:e3:61:5e:ab:fe:0e:1a:9b:2b:52:c3:67:95:
3a:c6:05:64:1c:7b:ad:63:72:92:0d:7f:18:3d:63:68:d8:dd:
0c:1c:43:59:ea:54:05:cd:51:73:23:5b:fc:2d:2b:87:57:0f:
ed:41:35:ca:e4:43:19:8a:2b:d1:90:24:28:0c:75:a3:7e:10:
a5:17:79:c9:8a:e5:32:90:da:ec:98:dc:32:10:f5:bf:0e:73:
38:49:90:53:1a:c8:be:f5:3e:d7:dc:0e:74:d5:6d:a4:ac:24:
04:54:23:33:dd:93:6f:c8:5e:26:28:4c:fa:ac:f2:4f:34:31:
cd:1a:a3:93:4d:0e:96:18:75:a7:f3:26:bc:2d:96:2a:a1:8b:
e5:39:e4:c9:0a:f8:fe:3a:10:d7:83:db:de:45:9f:c7:5d:b7:
1e:21:63:8d:68:a2:0c:0c:6b:c7:22:11:72:99:e2:90:6d:ca:
6e:b4:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client