Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: AmVaFz8QybeKoRrkbiVlHnByqZXI2RbPURObbOzMdck=
Subject key identifier: 89:74:A3:D5:E2:C2:71:4C:BA:0F:1F:06:03:0D:26:E4:70:46:01:E3
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 0194BC72CFFBA9A98F0A2133BF9D7B415F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0744
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: 0wMhWrDaoOJEoPcRZc0lkCf/8lFHLiAFU0ceOmN8/mE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:fb:a9:a9:8f:0a:21:33:bf:9d:7b:41:5f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=8974a3d5e2c2714cba0f1f06030d26e4704601e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:96:27:86:0f:40:3f:ad:33:ab:22:f0:95:
04:85:e0:0f:a8:f8:21:a9:f1:a3:fd:f2:3a:09:d6:
17:52:72:34:86:cf:ae:06:af:14:3e:51:e7:18:3e:
89:45:48:85:aa:54:d7:ee:46:f0:80:3f:2c:e8:e6:
09:0e:54:6c:ab:45:5e:bd:c9:03:98:03:e9:67:91:
c8:bd:a3:10:96:8f:a4:a3:8c:fd:50:5f:dd:be:ae:
42:45:90:84:1c:81:32:e1:5e:94:fe:6a:52:c3:15:
39:4b:e9:5b:0f:0a:37:37:d4:db:fb:26:8a:ed:3e:
ad:ec:8f:03:7d:76:f5:c9:1c:37:89:bf:4a:ba:0c:
eb:09:ca:d8:ba:80:d7:5a:48:5b:bb:87:99:43:bd:
24:e3:25:cb:da:d3:ac:9b:58:ab:39:36:fb:52:d4:
74:a3:b5:0d:cc:02:39:13:f4:2a:c9:8b:fe:ef:63:
41:80:e5:5a:a7:3e:80:ce:d4:31:d3:b2:e1:8c:41:
1e:19:e4:fb:91:5f:df:88:3c:e0:fd:0d:ff:35:d1:
56:c3:34:92:93:13:9f:52:97:da:b1:da:fc:c2:48:
0e:bb:b0:0e:fd:c8:30:56:eb:f6:7a:56:3c:7b:5d:
4b:39:d9:9b:58:21:ba:6a:dd:bc:6c:96:18:4b:56:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:A3:D5:E2:C2:71:4C:BA:0F:1F:06:03:0D:26:E4:70:46:01:E3
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:c3:4f:15:43:84:54:85:b0:5d:d4:4d:89:b3:cf:03:e6:
49:6b:df:97:ef:8a:e5:54:01:3c:96:87:8c:c7:a1:4c:08:66:
2d:63:6c:b8:33:ac:61:e9:c1:90:da:18:b8:86:a0:69:65:a8:
44:c7:69:27:6c:e4:10:1b:da:c9:ad:7d:83:27:47:36:e4:31:
71:d6:22:90:96:b4:96:9b:06:2b:0d:46:11:90:23:11:99:2d:
b5:0b:f3:ee:5a:ec:be:af:46:51:d0:31:9a:36:6b:67:e5:2c:
5f:4b:8c:7f:8d:dd:fa:0f:9a:38:ad:9e:44:17:06:23:d5:fe:
db:f8:f3:e6:cc:8d:9a:17:3d:1c:9a:ad:41:c2:80:d9:9a:c9:
b7:a8:93:9d:84:56:d9:7f:24:a9:10:c7:48:f8:e0:2c:ad:b6:
36:b8:e0:24:e9:ab:3b:0a:bd:a6:e8:e6:75:95:d8:9b:0c:ec:
73:bf:0a:05:23:d6:b6:40:b9:af:66:5d:21:98:73:a2:08:75:
7d:82:27:ec:70:d4:bc:e8:06:b1:62:de:67:91:1c:51:d3:65:
1e:2c:e1:d4:0d:1a:eb:d4:4a:60:7d:81:9e:c8:d8:43:ca:e7:
fd:03:de:eb:20:08:82:61:7c:89:43:2c:df:77:74:90:3d:20:
98:82:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:46 2025 by rpki-client