Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: RcEk+esvV3GUj5XFLG5i5DL+KRKcKRiJHOznCGgDwYA=
Subject key identifier: 74:01:DF:AD:AA:5A:B2:47:3B:E2:BA:04:E3:D4:13:2C:BA:86:41:94
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 0194BD17A1913FE7C81761FB8AD3E4C5FEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0B01
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: 3V/ylmH2hGkbElyZX6bV8k+7kvomWz+uWrRm4IQd4mk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a1:91:3f:e7:c8:17:61:fb:8a:d3:e4:c5:fe:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=7401dfadaa5ab2473be2ba04e3d4132cba864194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:52:e6:e4:bc:09:ee:b8:dc:32:3f:79:17:
53:64:b1:f1:94:51:01:4a:0c:5c:aa:40:c7:20:63:
23:73:79:96:95:18:ec:60:3d:ba:e4:31:39:4a:c9:
c9:a8:59:d1:f0:6a:c3:25:25:09:3b:41:3a:c9:29:
06:7a:91:a1:e1:c6:61:60:1d:a1:a7:fb:ff:78:7b:
d6:e6:ff:8d:8f:7d:b5:bd:7e:de:2d:23:e6:fd:09:
96:f6:39:b9:70:5b:78:11:0c:b0:08:3e:e0:bf:e6:
af:05:49:e1:bf:0d:9e:04:9b:6e:4a:da:e8:7f:f3:
64:d7:12:0e:c8:98:d9:12:7a:cf:26:a7:97:3e:6c:
f9:ff:ae:9d:5c:97:0f:b9:98:db:24:07:48:90:bc:
28:00:d8:ab:07:4d:63:5d:9c:33:90:c7:28:4d:be:
ff:67:b4:d7:f2:7c:ac:53:29:f1:26:bf:e8:98:1f:
53:6e:3c:38:5c:fb:f3:af:81:ec:6e:c1:18:6f:ce:
9c:7b:47:fe:6b:54:17:02:04:4e:8e:bc:02:cb:02:
a6:8c:c0:91:37:25:dc:41:69:1a:ab:a2:ae:4f:fb:
89:a8:c6:76:a1:69:d5:c2:91:07:ff:17:74:b1:8e:
b3:c3:54:e7:51:a6:0b:b4:2b:dd:1b:af:bd:bf:52:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:DF:AD:AA:5A:B2:47:3B:E2:BA:04:E3:D4:13:2C:BA:86:41:94
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a0:ab:20:73:39:68:d8:97:da:0d:cb:e9:61:7e:9d:dd:38:
70:2f:c5:c3:31:8a:3d:dd:a0:bb:a1:20:9b:82:e3:21:30:5e:
17:f4:44:46:8a:99:83:d6:ad:3c:cf:6b:fd:58:19:45:ed:82:
47:e9:2c:d9:7c:9f:89:3e:cf:4f:43:f9:2e:7a:de:80:49:25:
19:65:8d:2e:cf:3b:8a:78:fc:80:0e:0f:c5:7b:0d:45:ce:07:
f0:3c:ae:13:24:b3:a6:17:70:59:a5:21:d7:42:3b:75:fc:54:
f1:60:b4:93:0a:02:1e:0b:c5:f2:d6:bb:28:02:b7:ae:55:97:
53:b2:4b:d2:47:a4:e4:13:27:3e:3f:20:81:95:82:32:fd:e7:
01:f7:b5:85:70:04:bc:5a:1a:a9:64:e6:e5:ea:c0:60:84:bc:
c6:28:20:2b:b7:af:ec:86:9c:77:d2:71:2b:e5:f6:0d:b0:b1:
96:c7:75:16:01:55:8d:20:e7:5f:02:03:4f:83:69:32:56:cc:
94:78:3b:8f:82:82:93:0b:3a:7a:98:65:53:ab:e4:51:e0:09:
15:f9:2a:9c:e8:38:ae:15:d9:f4:c1:1f:df:ac:0a:8b:6d:24:
3a:99:2f:53:27:3e:37:49:03:4f:81:da:15:f5:54:d6:63:f7:
67:33:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:43 2025 by rpki-client