
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: Is0mokz025BwK1PQGEmIn1JGUAgBwKbohnx5ALZEv+s=
Subject key identifier: 90:C3:EC:45:D8:ED:8A:D3:DB:E0:51:FF:9D:0F:94:F7:5E:02:DA:7C
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0194BCAA28F5B48AB5101C6BF8A585ABAFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: q8oyR7vmSi/B8bC1Nrhkc0Ng8XePq8AmzX9X4UsddVc=)
2: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:28:f5:b4:8a:b5:10:1c:6b:f8:a5:85:ab:af:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=90c3ec45d8ed8ad3dbe051ff9d0f94f75e02da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:30:0d:fb:29:82:fe:29:68:43:2c:8f:ae:
16:c9:66:da:1d:aa:28:df:82:28:81:6c:e0:ae:2c:
f7:a6:ac:15:cc:88:ac:04:d2:db:30:e6:0c:59:ef:
2e:50:c2:b1:5b:3f:42:39:ec:cf:63:e1:03:ce:d8:
9b:6c:51:4d:75:a3:f2:0a:3d:28:4d:12:b1:ec:03:
a7:0b:8c:65:f3:d5:24:5d:05:44:19:a8:37:d2:9d:
77:18:ac:b5:a9:79:a9:f7:58:21:c2:18:8c:df:63:
f0:5d:a7:3c:20:a7:e4:26:d1:37:a5:b0:2a:04:bf:
b5:82:1a:72:2b:1c:48:f5:0a:67:df:23:e9:8e:a8:
8f:82:fd:e1:e1:ee:fe:13:08:95:f1:00:61:cb:6b:
7b:26:2b:9f:e9:e0:9f:6b:db:0d:2d:d8:0e:df:50:
62:60:d8:b8:44:d2:db:f6:91:85:70:c5:70:b4:7c:
c7:7b:1a:0d:b8:a4:fe:2a:ff:d2:94:7f:af:53:8f:
7b:44:c4:e2:2e:69:6c:1f:f8:52:94:ad:7d:d7:ef:
7c:3a:0b:69:c2:b3:28:81:0e:eb:cb:dd:4b:76:01:
b4:11:ef:f5:95:9c:d8:3b:ac:e3:c7:1e:4a:a1:4c:
dc:f5:69:ff:49:ad:78:f3:80:48:59:ab:b1:88:77:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:EC:45:D8:ED:8A:D3:DB:E0:51:FF:9D:0F:94:F7:5E:02:DA:7C
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e6:f6:a8:a7:85:31:e9:b3:83:48:84:d8:48:ba:bf:85:59:
75:74:b9:e1:7a:27:e7:6b:9a:e2:d8:94:9d:ab:43:36:55:44:
88:ca:c2:a7:ce:12:1f:84:6c:34:69:eb:9c:9c:04:3d:31:99:
c2:e1:2d:62:55:73:dc:94:b0:e2:cb:f8:a0:f9:e2:3f:bf:c6:
c2:6e:28:1e:9b:b3:ed:18:73:e2:17:69:ab:3b:3e:87:66:92:
e2:de:5c:68:2e:21:37:04:bc:bf:6c:c9:ae:21:52:34:ba:68:
77:d3:9e:19:e3:7c:de:a5:49:dd:2e:87:9e:2a:5a:ed:f0:c5:
79:07:5e:1f:ec:fc:fb:56:14:5f:0e:70:cf:3d:97:ef:41:d7:
07:2a:97:df:51:f1:42:66:75:eb:2f:17:7d:9a:49:1b:18:f0:
40:08:cc:49:9b:80:75:ab:5c:b1:21:cd:50:a9:41:6e:ca:bc:
a5:17:e6:73:fa:b4:ca:0b:73:db:ed:c0:02:d3:1b:25:06:58:
36:12:1d:64:67:42:1d:e4:3a:d0:46:f3:c6:59:6a:23:97:d5:
1f:a9:e2:df:53:7d:37:87:c4:9c:82:9e:86:24:d9:c6:dd:ab:
a2:5f:8b:3f:7f:50:a5:9c:4a:c1:1a:f6:2b:61:0e:3d:b7:c2:
93:5a:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:51 2025 by rpki-client