Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: bRkXa7ot3Ct7WRNYgK7593EnzBY3m8tS3f67IoNBNlA=
Subject key identifier: 38:B0:73:19:F7:F1:AB:88:A3:0E:D1:F1:29:01:D6:2E:6E:57:F7:FD
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0194BD85955E4A36562C9D193790E9D6F2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 111E
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: Adrbs5NlhRUNV2cisyNwo-BCgig.roa (hash: JRCSzf27iDiymKtOrQAggmVQVUm0Qmo2Jy69WSaHvcg=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: oJFNNg/0ZGiz3MZCTW2CWzaSw8KouG9xFDZ/YHaGGgM=)
3: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:95:5e:4a:36:56:2c:9d:19:37:90:e9:d6:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=38b07319f7f1ab88a30ed1f12901d62e6e57f7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:4b:45:a0:79:d2:64:e1:ce:91:06:0b:7f:
97:32:30:47:49:12:06:38:2a:b7:11:74:2b:ad:d7:
0c:f9:0a:b5:68:b8:7d:52:4b:15:de:c6:6a:a9:dc:
bf:49:80:d5:1e:3f:ee:06:f8:58:ed:c4:bd:78:57:
ff:a7:c5:5c:a2:ef:ea:a4:30:eb:c0:30:47:7e:90:
fb:0c:85:eb:22:65:cf:0d:75:5a:f4:47:3e:fb:aa:
a4:92:53:e4:88:1e:7e:11:c1:f2:1c:a1:05:cd:0f:
df:f9:3d:fe:75:38:b8:b7:0b:e8:3e:76:08:54:c6:
e4:df:ce:e0:da:f3:bd:f8:e8:8c:62:b7:b1:83:de:
76:65:4b:39:ae:b4:b1:59:21:ea:8c:12:d2:50:6a:
30:d5:18:df:1b:de:59:82:23:c5:df:1e:6d:e9:f7:
ed:1e:bf:a7:14:bf:00:8b:37:62:fc:19:36:12:84:
c1:7d:d3:48:41:81:91:7e:d4:c9:63:ca:df:0f:f9:
75:e7:f6:7a:1b:f9:a2:af:a8:cc:01:2a:06:0d:4c:
2f:60:43:12:68:1e:c0:e9:b3:45:5e:0c:d3:92:c1:
9d:21:32:b7:3d:6f:9a:f8:48:2b:c4:ce:91:54:ff:
94:10:be:0f:8b:4a:78:af:6d:17:5c:81:98:f9:9d:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:73:19:F7:F1:AB:88:A3:0E:D1:F1:29:01:D6:2E:6E:57:F7:FD
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b9:c2:a8:31:e3:d6:f3:af:e8:a5:fa:93:f0:e7:e4:85:1e:
ef:f6:c6:1f:7e:a6:53:3c:0a:a5:8a:b8:17:37:7a:2a:74:24:
95:5c:fe:f9:06:d7:f1:1d:4e:db:bd:ce:38:dd:76:8f:cc:46:
a9:76:1a:6b:24:bd:ba:39:4d:0c:04:9d:2e:77:12:eb:5a:09:
a5:56:61:4a:1d:df:31:c8:b0:dc:bf:9d:36:b7:ce:a6:16:62:
1a:b2:21:bb:97:3d:3b:3f:f1:11:9f:eb:a0:8b:9a:d9:cf:55:
47:00:d6:e3:08:79:f8:18:77:9a:33:16:44:d3:38:87:13:be:
8f:ad:c2:d9:09:4a:8e:e8:4e:80:02:67:c6:33:38:d9:e7:b0:
ff:5f:c6:30:12:cb:3d:1a:9c:94:71:8a:e2:ea:15:e4:50:05:
a6:ca:81:19:9a:6a:25:c4:34:32:b7:68:f7:51:d7:79:4e:28:
c4:c9:3c:17:91:56:ce:d5:cc:6b:80:b7:1f:b4:ff:15:09:8c:
86:f1:1e:80:7f:73:dd:80:f4:f7:f2:a2:ad:6b:44:3f:3f:f6:
fb:99:10:d4:82:20:6d:19:72:47:ea:be:67:b6:55:b7:01:ca:
b8:7c:3f:7e:98:c1:26:2d:11:c0:5b:c5:13:01:37:44:bd:fe:
30:00:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:50 2025 by rpki-client