Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: TsNiCMWwiOpnTnMbKeOgeO0u3MIWcN/0XYjVYKGKagU=
Subject key identifier: 56:17:02:D1:BE:07:33:D7:A7:8D:56:1E:98:99:0F:49:0A:48:9A:C9
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 0194BD856E5893BCA38CFC391058F562D6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 11D1
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: /oO7bShrR49T06477dg7G0jmafNryztup3zHAUCLls0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:58:93:bc:a3:8c:fc:39:10:58:f5:62:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=561702d1be0733d7a78d561e98990f490a489ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:33:76:8e:08:2e:97:bc:92:c6:a5:4a:b2:
4f:1c:5b:ad:8c:90:df:ee:97:3a:da:db:a8:d8:91:
e3:9d:91:58:a3:e7:1b:b8:dd:f4:5b:00:7b:3b:67:
27:c7:29:49:9e:32:37:f1:57:02:be:41:f6:bc:56:
98:07:ad:dc:93:6c:01:d7:de:73:39:c5:0d:0e:f0:
a5:a5:20:62:a2:94:2b:19:ac:45:b1:5f:e1:16:61:
72:bb:72:cb:9b:97:e9:c1:06:8e:ce:58:34:1b:fd:
ac:82:f4:b0:b9:40:04:8d:1d:08:b6:f8:72:53:5f:
a5:0f:17:b1:7a:d9:df:8b:b8:ee:5a:c8:5c:9d:40:
26:45:73:d1:bf:4e:a5:9e:ff:b4:7e:fb:6c:83:92:
ec:b4:4a:d9:4e:2f:ec:b8:60:61:09:ec:3c:6d:2d:
c9:67:e0:61:45:7c:bd:18:1d:b9:6b:3a:73:ae:a7:
86:96:0f:b2:bb:f9:fb:74:33:84:66:af:65:33:47:
54:6d:1f:f0:b4:92:22:12:c4:fe:73:3d:a1:40:3d:
94:2a:f1:a4:c4:af:4f:21:66:41:5f:6d:7f:52:aa:
56:7b:7d:0b:5e:74:74:a0:52:1b:8c:98:3b:cf:50:
ca:4c:0a:40:8d:06:d2:6f:3c:7a:1b:71:03:83:b0:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:02:D1:BE:07:33:D7:A7:8D:56:1E:98:99:0F:49:0A:48:9A:C9
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:77:b6:c7:64:fb:8e:47:ac:37:63:82:80:3a:f3:a7:24:
18:16:b0:7d:3b:c6:3d:6d:52:ab:fd:9b:a4:f6:6d:05:f3:cd:
05:29:41:0b:05:ad:47:c1:c2:6f:56:a8:af:bd:ca:4a:80:3e:
e3:15:5a:4f:dc:29:75:93:c5:f7:8d:b1:c6:a0:47:5d:45:f7:
19:4f:bd:a1:3b:23:bc:25:e8:bc:9b:2a:49:45:ed:6d:66:31:
fc:29:48:62:42:ca:bf:67:ea:22:b5:52:b6:b9:ab:a8:20:0a:
86:17:b4:f7:a1:fb:ac:f4:3a:a8:2e:fc:f2:ed:26:d2:51:63:
b0:08:94:ca:a3:f8:dc:01:fb:8d:f1:7b:94:fc:2d:51:ba:27:
f7:98:26:a5:5b:d7:b8:8f:4f:b6:be:02:08:30:b5:ed:7f:6d:
df:c4:c7:d6:da:4e:58:3b:a7:6e:0e:9a:3f:86:10:49:73:44:
d4:24:13:c9:30:48:5a:b9:ae:a7:38:3e:8d:fc:43:ec:11:32:
9f:42:f7:ae:b4:8f:b2:32:fb:68:b8:9a:fa:0d:07:f7:6c:f0:
60:1d:41:a2:cc:bb:4f:2b:07:a3:df:95:33:5f:c9:53:39:4a:
e4:4a:e8:e0:94:6c:b6:6c:40:c8:16:1c:5d:b4:e2:86:61:29:
17:44:d2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:37 2025 by rpki-client