Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: Z7zG/bNRLLnvmiAaSPrtyFx9mEnsnkTF8II3woW9LOQ=
Subject key identifier: 87:82:CA:00:5C:27:9A:B8:2C:B0:75:45:9A:95:CF:91:0D:3D:C1:EB
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 0194BCA9A7476063FCEB8DF06AA25F8A812B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 1358
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: GbgI+9p9RGBBiQuF122xSQInETGquA//Ksxr7V7Acp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:47:60:63:fc:eb:8d:f0:6a:a2:5f:8a:81:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=8782ca005c279ab82cb075459a95cf910d3dc1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:2c:09:1b:ad:24:48:e8:3b:75:1a:3d:e0:
7a:33:5c:2b:86:a4:00:a8:ed:fc:dd:a6:24:10:0a:
c1:d5:b2:3f:e5:fa:9a:4d:f3:d7:30:c1:69:88:3e:
73:91:f3:cf:0c:45:c5:5c:7e:75:72:9f:a2:2a:7b:
49:55:17:0d:05:2d:94:99:be:fa:ff:03:03:38:0d:
15:f5:73:62:62:21:af:c7:88:62:4a:73:b7:e7:04:
6f:a0:3a:83:98:ec:1e:8c:c6:6b:51:95:14:1e:05:
46:92:d7:03:1a:23:ec:85:2f:52:b0:77:dc:f6:bc:
1e:ba:18:65:16:33:a1:fa:e7:61:63:0b:dc:a3:f1:
50:c8:28:08:d6:34:7f:03:c2:5f:94:29:44:07:fa:
c7:e9:88:23:50:48:61:7a:92:f6:c9:ef:14:b6:30:
87:60:19:04:f8:b7:61:90:7e:08:83:ad:d6:32:45:
f7:6e:8e:b6:2c:b5:a6:f3:83:d9:8a:e2:1a:89:f5:
26:af:16:92:9e:4e:92:60:94:c1:3a:e9:10:37:0d:
97:8a:a6:1e:56:2b:0a:04:a8:8c:f6:0c:26:30:7c:
fc:42:de:17:0d:8e:1a:e0:16:90:c0:53:eb:04:01:
ea:a3:df:1d:bc:c6:be:b2:a6:f8:0d:23:d1:a2:e6:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:82:CA:00:5C:27:9A:B8:2C:B0:75:45:9A:95:CF:91:0D:3D:C1:EB
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:67:5d:cc:ab:8c:ee:5d:3b:04:74:35:b1:8f:81:42:fc:a8:
b1:c4:96:28:fd:e7:46:da:1b:b0:1d:b9:e2:ec:a1:52:a5:75:
42:34:91:2e:35:df:f2:d5:3f:67:8d:b6:c0:f9:27:3e:44:e8:
ae:02:ef:a3:9c:2c:29:32:f4:ed:34:ac:38:89:62:56:b7:86:
4e:4f:9e:e4:8d:f5:ff:47:ab:18:82:be:9c:78:c6:28:14:9b:
af:64:5c:16:4a:0a:3f:e6:2c:4d:b5:ad:02:16:0c:f1:2f:5c:
1b:4a:af:c7:2b:7c:2f:c1:d7:6a:32:f0:87:25:44:35:d4:f1:
c0:c9:34:52:8f:5c:73:73:5e:2d:cc:a0:8e:65:68:dd:12:26:
ca:b1:b3:76:dd:dc:55:90:b3:33:1e:ef:3e:ef:2f:49:8c:cc:
a7:fd:2d:99:0c:46:6a:ea:4e:bf:70:91:b5:eb:53:4c:be:39:
61:ca:b2:40:23:47:9e:7a:f9:5c:c8:1f:b0:40:28:55:e8:94:
a0:62:ea:37:b3:99:a2:f9:83:e2:57:d3:c3:e9:64:9a:69:d5:
cc:ed:ff:a6:b8:da:e7:cd:50:c2:70:04:32:dc:6b:34:0b:86:
f6:d5:37:2b:7b:6a:98:6f:0a:25:56:88:3c:5c:90:36:d6:66:
e7:6d:ad:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:12 2025 by rpki-client