Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: hCQ5N/S3Pk6Gel3HvJ9hxeReVBuJ6bYuvqViFWu5U3A=
Subject key identifier: A3:56:4E:67:08:06:44:58:BA:DB:E0:99:88:EA:28:BB:05:0E:79:0F
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0194BC04FE7549686B71A126532510299DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: HwzOZ48Ovurh1ayov+/yhOhDdbGIh8mTQ2sbSzTl8e8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:75:49:68:6b:71:a1:26:53:25:10:29:9d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=a3564e6708064458badbe09988ea28bb050e790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:67:4b:5a:7f:65:72:8c:df:73:bc:bd:35:
d9:1d:93:4d:a8:88:4d:be:ea:9a:12:7b:40:56:a9:
83:28:a8:10:59:53:4c:90:4b:c9:36:08:b5:44:2f:
ff:1a:53:b0:c5:88:71:40:2e:c7:06:e5:aa:47:03:
98:59:53:de:a7:62:a8:cf:c7:d8:cf:4f:07:2a:6b:
e1:46:92:3f:e3:31:e5:a2:a4:48:b8:d7:33:a2:02:
a9:c5:54:90:29:a6:0f:5f:80:e0:f6:f6:51:bb:74:
6b:50:fb:21:0c:30:be:41:90:98:25:c7:37:00:32:
f2:06:27:a2:9a:84:e6:89:fc:de:f9:7c:05:9c:de:
42:b2:aa:99:28:c1:e0:86:63:d2:f4:db:22:d0:ef:
c3:03:22:4e:b7:c9:fd:2f:eb:0d:6c:19:0c:60:1f:
08:20:b1:5f:fc:ae:5c:29:9b:10:8b:23:89:4e:24:
d4:4b:9d:c7:36:08:46:9c:9a:00:db:54:db:68:42:
bc:e5:cc:89:62:50:d7:28:66:b1:7d:3f:fb:17:a3:
6d:f9:dc:09:b4:2d:11:5b:5f:c7:49:ac:50:d8:be:
85:00:82:0a:da:bb:12:8f:54:88:14:cc:02:94:de:
5a:e6:64:41:29:fa:49:85:bc:97:9d:82:a8:ba:ac:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:4E:67:08:06:44:58:BA:DB:E0:99:88:EA:28:BB:05:0E:79:0F
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:7d:09:f3:a1:f0:67:d1:87:e2:33:f7:60:2f:6e:6d:36:
10:56:70:55:c2:a7:c5:cb:bb:37:94:59:ed:3a:d4:af:b4:37:
33:81:a7:2f:a6:b7:5e:de:8c:d5:e0:f9:51:ea:2c:8a:50:e2:
1a:24:40:2d:94:15:0b:ac:a8:13:c2:4d:de:c6:d9:4a:6a:7b:
c9:31:3f:89:9f:dd:09:f7:c9:81:7a:1c:0c:75:df:00:26:a8:
01:61:b7:b2:0e:4f:11:e9:52:8c:2b:9d:69:79:5e:a4:b3:29:
90:d6:17:ca:e3:a9:44:16:31:b6:7c:b4:59:dc:3a:7a:35:5b:
d1:75:ee:d0:46:14:8b:ac:86:9e:68:d2:43:87:d7:93:df:eb:
e5:b7:73:89:c3:a2:15:8b:7f:49:c9:8e:d2:5e:fb:a6:91:0e:
ae:36:0d:84:6c:ae:86:cc:ac:71:b6:db:37:a6:b9:85:6d:85:
33:73:37:67:43:3e:d9:91:b7:6e:b6:f1:90:27:08:b0:aa:fe:
26:e1:07:f5:4a:40:e7:29:89:00:22:30:cf:5a:43:9b:06:0b:
fa:e6:6f:89:8c:1f:f6:6d:5f:4a:55:13:d1:a3:15:2b:a5:bd:
ba:ee:65:a3:77:af:e2:92:f2:9e:62:51:18:f5:97:e7:82:aa:
0a:cc:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:53 2025 by rpki-client