Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: VOUErcoO8QBHXwZw9L1wNumd9W1p1dYRd6FDlONZIF4=
Subject key identifier: C7:28:87:74:DF:B5:D2:0E:7F:09:81:80:E2:22:F2:43:E1:71:39:3B
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 0194BD856D5BF856C5DADEA37FB96101E445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 0231
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: NlXzaysziOA5bkMpRPFcFzmxhEaRrow6RDs2YN0tvr4=)
2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6d:5b:f8:56:c5:da:de:a3:7f:b9:61:01:e4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=c7288774dfb5d20e7f098180e222f243e171393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:5c:92:03:29:18:e6:65:e9:b3:dc:8a:f8:
ae:cf:01:11:f8:3c:0c:e5:ce:a3:b6:46:4a:f8:86:
0c:62:6f:4c:80:40:d8:c7:de:10:ea:9b:f8:4b:fa:
45:b3:31:e5:91:81:e5:d1:b0:22:6b:db:14:4b:9c:
92:a3:24:e6:59:f4:85:b7:8c:2e:6a:72:7b:5d:61:
fe:e3:b7:e1:d5:c2:d1:fa:fc:18:ca:a0:ff:e5:ad:
10:0e:f3:55:19:56:cd:cd:ab:77:10:ac:e7:b1:67:
d7:6d:c7:41:6b:9f:f1:8a:1d:08:ef:84:f3:ea:df:
45:9f:fa:5c:09:14:10:4b:f3:20:37:2d:6b:c6:f7:
c6:45:42:0e:27:af:6c:38:07:4c:83:60:f7:dd:df:
33:a2:50:c9:20:5b:ba:44:9a:a4:d0:d6:92:c5:8b:
a5:87:8d:74:b9:7e:e6:f7:98:b7:34:25:2b:67:a8:
a2:66:30:a8:2b:40:2b:cc:e6:dd:cf:fd:97:f5:2c:
b4:e8:18:d5:3e:26:52:8f:9f:de:0c:c0:a8:44:45:
88:fe:42:b7:3a:23:7e:ab:4d:6c:ae:af:99:5e:96:
db:ab:52:b8:fa:22:ee:2a:0d:2f:3b:b1:8b:78:a1:
33:89:82:dc:54:33:32:e8:76:9a:a1:43:f0:b3:cc:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:87:74:DF:B5:D2:0E:7F:09:81:80:E2:22:F2:43:E1:71:39:3B
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:64:22:2d:53:3a:2c:fc:0d:7e:98:71:ce:5f:6c:39:46:7c:
d1:92:df:8d:2a:e4:6a:54:67:73:21:5f:d0:f4:db:e5:54:28:
ba:bb:aa:0d:0e:80:60:ea:80:97:45:85:9d:a9:f3:99:5d:bf:
f2:ef:5d:e6:f0:be:6e:ff:c7:fb:f3:43:70:3c:09:7d:0b:c0:
56:d7:46:81:61:46:22:e1:2b:89:6d:10:81:35:b1:82:51:bf:
9a:69:48:66:32:56:56:89:99:d6:d3:f9:8d:70:cc:da:70:8f:
e7:36:06:49:b8:59:3d:b2:d5:b5:4c:b7:90:66:f6:fe:d7:5c:
88:9b:62:26:40:f1:b0:66:cf:4c:f3:e3:5f:64:7f:db:11:ee:
3b:23:6d:2b:18:58:13:dc:68:7f:00:d9:02:46:96:43:0e:1c:
4d:a1:7d:7e:a2:27:34:3f:eb:df:d8:d3:40:cc:5a:9e:34:61:
1c:15:f4:1c:91:57:fb:26:64:c6:6d:df:46:07:ad:2a:95:39:
c0:99:66:ec:b1:5a:4c:24:c4:14:71:16:19:a6:e9:69:59:c2:
8e:5c:1f:4f:8a:69:c5:c7:e2:61:7b:dd:7f:57:56:a8:2d:cc:
45:19:b6:0d:eb:1d:6f:8e:7e:a1:f0:55:28:8d:e8:0a:82:de:
10:53:15:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:43 2025 by rpki-client