Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: WkK+FXj+QmlD2/MAaKQQtCLWJ3EknEkLkz0hroq0CqM=
Subject key identifier: 27:B7:81:71:10:F3:31:00:AC:28:13:E6:B5:55:6B:41:96:A2:A4:97
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 0194BCA9815F2959A0EC369E8B643334B2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=)
2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: SRIq8hfp7WW29KxiLMR8wOP396mrB1FDPVntr/5+WyQ=)
3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:5f:29:59:a0:ec:36:9e:8b:64:33:34:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=27b7817110f33100ac2813e6b5556b4196a2a497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:cd:2f:f8:d8:64:58:e7:71:c9:85:fd:cb:
f5:34:f4:2c:60:fc:eb:be:86:7c:01:f5:c2:37:2d:
66:69:71:05:dc:f4:5b:b9:2a:23:97:11:24:59:b5:
1d:81:78:a6:e8:ef:dd:e0:fc:be:62:4f:5e:ca:be:
9a:b0:b9:d1:89:9a:c9:3a:17:0e:f6:34:47:f6:f1:
9d:84:90:bb:30:e0:17:e5:e8:d5:c0:f4:3a:21:53:
a4:34:33:69:95:90:4d:92:53:da:c1:45:96:89:93:
05:a5:b6:b2:f2:3c:eb:30:78:fc:8d:a4:ee:e7:aa:
a8:c0:51:88:82:65:a6:0e:a4:48:41:24:6a:db:93:
c1:5c:15:ee:8c:33:b2:65:e1:78:cc:20:6c:bf:b4:
81:60:05:e1:18:b1:da:82:71:fc:c3:11:92:98:e9:
a2:e4:e4:7f:f1:49:10:80:b4:23:2d:2a:0d:9f:05:
e2:33:fc:0b:29:ac:16:be:1f:ab:0e:f2:77:9d:b7:
41:d7:a6:80:41:96:98:21:7b:31:2d:0b:74:8a:f0:
da:29:7b:c6:47:20:f6:ab:71:4e:0d:f3:28:03:ab:
9d:c4:89:fa:da:fd:57:22:7f:37:bb:5b:56:03:f0:
8a:5d:a0:ea:2e:63:10:7a:fe:e7:e6:4b:b8:aa:d4:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B7:81:71:10:F3:31:00:AC:28:13:E6:B5:55:6B:41:96:A2:A4:97
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f7:f1:75:16:62:60:e1:68:3e:e5:ad:26:44:b5:ee:0a:27:
ea:d9:da:fa:50:69:6b:19:57:2a:df:1a:9c:62:c8:b7:4c:45:
93:b4:85:d1:be:76:4e:0c:d9:b3:bc:e8:e9:bf:25:4c:fd:a1:
1b:d7:0c:a1:32:00:de:62:c0:0a:9f:95:27:13:8c:b0:b8:0d:
64:0c:fc:e2:5c:2b:49:21:a6:77:b2:9f:f4:7a:17:4d:7c:04:
6b:ba:f9:c4:5e:29:98:5c:52:e3:21:54:22:d4:b7:5f:2b:01:
22:fe:11:75:51:05:1d:f2:13:57:e6:a2:2a:ee:4a:80:e8:8c:
2c:da:72:0f:bd:c5:fb:4b:e4:6a:fe:06:78:20:65:e4:76:93:
07:14:64:ec:74:76:0e:2d:da:89:76:da:63:2b:d2:96:ab:b4:
54:30:b4:33:88:3c:11:fa:d4:5c:dd:1c:28:46:b0:ca:1a:81:
13:00:b2:e5:a1:b9:89:1b:4a:06:05:80:46:25:f5:41:f2:69:
ec:bb:cb:88:7b:88:5e:58:55:31:7c:76:26:72:9e:c3:2b:6c:
50:54:03:90:61:f1:b9:7d:85:84:42:9b:ae:e8:ee:7a:07:2f:
e1:d3:de:9a:a1:16:c6:96:d0:71:f4:8b:77:a6:ba:45:c5:bc:
3a:16:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:10 2025 by rpki-client