Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: kAnm6+AD+I1RcrteYB+WIyzBTgsYLjeU/CJOsKMqr2M=
Subject key identifier: 03:1D:6C:0A:02:09:60:D9:87:66:B5:A8:40:74:8B:B2:65:4F:AE:EC
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 0194BC72C268EFB689638BD5D88AD5DE9F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 0140
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: moc7LVqlMO9tr6m+XwSgJKBGmu2a+JKt6qBTnqKp4nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:68:ef:b6:89:63:8b:d5:d8:8a:d5:de:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=031d6c0a020960d98766b5a840748bb2654faeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:36:c8:96:73:7d:bc:69:2a:3c:95:c4:0c:
be:38:a7:03:e5:67:53:77:91:3b:15:19:93:08:84:
0c:f3:26:5e:97:93:d0:eb:1e:54:ec:4c:dc:4f:05:
76:fa:50:e1:5d:87:98:9f:73:fa:1a:28:69:41:eb:
85:42:9a:27:78:c1:cc:13:a4:b9:83:b7:d7:b1:d9:
ed:00:c2:00:32:7f:6f:31:15:ca:d6:8a:31:cb:c9:
a6:6d:43:1f:90:6c:28:d9:66:f5:97:4f:41:4e:8e:
07:4b:06:4b:8e:2b:8f:b6:fc:b9:39:9a:71:8a:ca:
19:07:d8:75:a6:51:3c:a9:38:29:5b:66:9d:fa:dc:
67:46:92:92:af:73:7c:b7:fe:5b:38:e7:6d:94:1d:
25:4c:2f:d6:f9:b1:db:55:05:c6:b6:a1:37:26:cd:
89:d5:64:6b:78:a0:6d:10:7f:4d:fe:17:b3:48:17:
7b:85:15:73:fa:ae:4e:61:44:7d:ed:d8:3b:f9:75:
7d:e1:aa:1f:bf:66:ad:0a:df:5c:8e:ac:21:64:10:
ad:42:cf:c0:ae:48:41:5b:31:a6:11:2c:b8:df:01:
42:94:0c:13:45:b0:07:7a:1a:3f:56:2c:f4:71:04:
a9:1b:e8:ca:4a:e1:60:6e:83:3b:7c:26:c1:90:a4:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:6C:0A:02:09:60:D9:87:66:B5:A8:40:74:8B:B2:65:4F:AE:EC
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:37:f4:c9:48:8b:ea:6e:e8:aa:dc:a2:57:d8:54:57:50:a3:
dc:50:ad:f3:51:e1:8a:5e:e1:f9:6f:52:2b:e6:be:09:10:f4:
8b:04:49:4a:3b:0b:1f:14:f3:c9:78:44:f1:f3:c2:26:a6:4d:
ed:54:78:d9:f1:98:0e:a7:92:e6:68:2d:24:69:6f:d0:ba:e5:
34:58:30:92:b6:f7:5c:91:14:f1:74:12:7e:97:f7:fc:34:d5:
20:8a:24:cf:48:68:af:6e:e1:e7:91:d2:db:c4:0a:54:b3:6f:
98:2f:84:de:27:e8:0c:db:87:5a:cf:3a:b3:ec:b9:79:27:86:
e4:0d:56:5b:2b:c0:0a:51:68:0c:fd:45:40:a6:29:7a:5a:d4:
b3:4b:6b:c0:a4:63:6a:97:77:7f:93:74:73:59:5d:c1:86:4f:
37:b2:42:51:c9:ad:1c:30:d0:d1:25:28:28:0b:27:af:d4:dc:
cf:c8:f6:e5:2d:97:f3:8a:80:90:80:84:99:af:89:f2:2e:3d:
d5:40:56:68:7b:bc:bd:77:6e:50:55:1d:dd:c4:a2:7a:d0:96:
9c:0f:0a:b0:e5:ae:6e:7c:34:66:d0:6c:a4:9c:fb:1f:8e:77:
77:1b:fe:1c:7b:89:81:06:c6:c9:d9:99:ec:d0:d4:85:8c:74:
2d:fb:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:09 2025 by rpki-client