Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: YnWtjfvJK48UVeUIR21Fuf1RzOfBYE9NPHGYoEJK7xw=
Subject key identifier: C1:14:7D:CF:25:85:4D:EA:45:89:75:FF:98:BA:CB:93:46:13:D3:B5
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 0194BCAA3D9F2F1334E88E17AF949582CA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 0308
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: AuNJNFgJGT+bKN6RVYIGhxXXF2cqMVO7Ff5m7MtdZmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3d:9f:2f:13:34:e8:8e:17:af:94:95:82:ca:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=c1147dcf25854dea458975ff98bacb934613d3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:4c:7d:f7:4a:76:bb:ad:9c:4e:72:8d:60:
1e:b6:8a:8a:07:b7:7c:1b:38:13:b1:0e:24:db:06:
12:b4:d5:ac:80:0b:e8:28:ee:6c:1c:1a:d6:97:f1:
21:86:09:2d:61:1a:db:23:ce:60:73:88:1b:6c:6a:
d9:cb:2b:a1:2c:77:f5:0f:65:49:b6:69:8e:d5:75:
15:b8:70:ee:9c:63:dd:f8:21:51:17:ab:ac:d1:1f:
01:33:1c:2c:de:44:a9:73:4f:ff:8b:df:ef:f2:6c:
b9:72:4a:f6:97:8a:e4:58:26:ea:ea:e6:0d:4f:50:
5e:6f:04:b1:93:ea:ae:c3:3a:6a:84:29:88:7a:92:
b8:db:fe:12:39:1e:9d:e8:9b:26:25:2c:27:5b:11:
76:f4:97:f4:69:39:6a:c5:1f:dc:5d:6d:bb:ab:b3:
b6:86:5a:d6:28:8d:84:5e:ce:91:10:0c:81:be:50:
b0:32:ef:c7:c0:3e:ea:05:15:01:a3:40:89:26:63:
1a:3d:e3:a6:b7:9f:f4:94:38:61:12:c6:d9:5d:23:
e8:0d:04:20:2b:ae:48:4c:f5:46:7c:07:a9:16:5f:
29:1c:c4:ad:a6:a9:78:3c:4a:64:86:bc:cd:3e:ae:
25:bc:4d:1d:ba:b0:d7:95:38:8b:93:60:ca:5d:3d:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:14:7D:CF:25:85:4D:EA:45:89:75:FF:98:BA:CB:93:46:13:D3:B5
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4f:19:02:9b:2d:d4:40:ad:83:3b:5c:9c:47:ee:44:e7:29:
1d:d7:6c:a8:90:b8:e2:56:c6:af:14:56:9d:55:c9:f2:1e:2c:
ec:25:83:e0:a3:92:01:7c:30:a6:68:c4:f9:60:04:b1:df:27:
99:59:00:57:4b:8c:24:b6:d6:5d:8b:e8:51:d5:9c:05:e7:eb:
7d:5e:81:52:94:ae:9c:7b:06:27:8e:78:20:cd:e3:37:9f:43:
0d:e2:ab:b9:c1:a3:10:04:e8:e7:a0:74:77:f6:5f:53:ef:c5:
26:d6:96:55:18:56:20:84:b0:83:34:57:e9:fe:1b:7e:39:29:
cc:4f:a2:3e:de:6c:80:9b:5f:a2:ff:a1:56:ad:4c:57:30:b4:
5b:a8:f0:86:4a:78:14:d2:96:c7:79:00:3c:4c:88:ef:5a:e6:
dc:a5:b7:91:26:60:c1:0d:8c:ff:c5:02:89:fd:f2:1b:3d:33:
8a:35:fe:4e:1c:6f:59:02:76:9f:39:f7:bc:6c:4a:92:fe:eb:
dc:13:17:a9:64:98:3c:ca:fd:d4:e1:37:c9:4c:9e:2c:33:22:
05:b0:e0:48:61:a2:52:50:4a:2a:84:ae:0d:14:24:82:c5:3c:
cc:07:95:56:6d:f6:3e:b4:f2:74:b6:95:4c:d7:b9:1f:0e:f0:
f5:58:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:40 2025 by rpki-client