Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: TEO1LPFvwUpLNKcL3BeqA+v7h3c/k+1V/9sXtE+Tl+Q=
Subject key identifier: 7A:7C:DB:A1:79:7B:71:02:4B:1A:AE:39:0A:BD:C4:1C:11:B2:3B:DF
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 0194BD85A58B675686722389C8EF01CDBD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: pqNP+Epp0XNkOkqRpvyq1BKV9iznFgy5HqSHJVp5pO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:8b:67:56:86:72:23:89:c8:ef:01:cd:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=7a7cdba1797b71024b1aae390abdc41c11b23bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:06:9d:68:a2:01:b5:f3:74:67:26:48:9a:
2d:b4:63:cc:c8:10:19:b3:6a:9a:15:5f:eb:d8:c4:
c5:e9:2f:42:02:c1:76:3d:b7:7d:29:b9:31:6c:c8:
ab:61:f5:7c:86:2d:5c:fa:f5:38:1d:df:07:8b:a4:
0c:12:43:af:6a:15:3f:7d:97:a0:74:b3:5f:2c:03:
af:11:29:d5:e3:c3:a1:71:84:a7:bc:ab:21:ab:64:
f4:4d:64:fc:c9:f3:ad:18:3b:b7:9c:b6:62:9d:34:
43:97:81:c0:75:9d:95:5e:fe:5e:40:bd:9a:86:9b:
e4:37:42:57:dc:cf:07:84:5f:66:43:23:a8:43:90:
9b:a8:fc:81:70:09:9c:4a:9e:e4:e4:3a:a0:b9:80:
c2:4a:b7:f1:25:16:06:41:0f:4e:29:97:53:8c:e9:
fe:11:fe:80:d4:07:1a:a9:1c:dc:d9:51:ae:d7:9d:
84:ca:a1:36:fa:ac:25:09:41:4d:6e:71:ab:1e:5a:
2c:45:0e:bf:12:f8:4f:e5:12:2c:e2:bf:a5:46:3b:
67:d6:9b:20:8b:cb:76:74:38:57:10:43:11:7d:7c:
25:fb:9a:fa:6f:6f:43:8c:d8:95:67:5d:1c:8a:8c:
85:be:ce:ca:1d:4e:54:48:84:ac:a3:af:f4:07:92:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:DB:A1:79:7B:71:02:4B:1A:AE:39:0A:BD:C4:1C:11:B2:3B:DF
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:64:65:be:b5:80:f1:0d:bd:bd:32:cb:c6:a0:6c:b4:05:7b:
4d:65:20:74:95:25:fd:d3:6c:c1:90:df:6e:ed:d0:f3:84:8b:
8c:d2:98:19:21:69:94:62:97:00:72:5e:69:7c:68:ae:ce:07:
8f:bf:57:e9:46:c9:7c:9f:b6:1a:29:cf:21:71:e4:19:57:db:
df:eb:25:f7:04:08:91:cb:20:ea:ae:5d:fa:7f:9c:c8:31:1e:
95:4a:1e:dd:b1:62:1d:4e:01:8c:1a:53:11:c6:ab:f7:31:6e:
af:51:08:2a:42:36:b5:0d:fa:33:dc:b6:c9:f2:b0:97:fb:91:
09:cc:df:67:f1:61:af:92:47:0b:49:d4:09:d1:37:72:92:74:
6b:d2:ed:9a:0a:36:92:d0:44:cf:b9:bc:f4:1d:ff:37:4c:eb:
8c:d8:f4:9c:bc:19:33:0f:d7:89:ca:91:76:53:88:f5:b1:8a:
10:c3:68:c0:60:86:59:84:4f:6f:ae:14:7d:a3:e1:5e:a5:27:
0b:12:4c:2f:2c:b0:84:ca:36:eb:a0:8a:71:6f:49:29:9f:24:
be:c8:01:88:6f:fe:fe:81:e2:af:df:0c:c1:e4:70:f4:73:fe:
8d:cb:3f:80:97:3d:86:e6:cc:eb:bb:d3:17:1a:73:20:97:6f:
c5:7e:ac:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:48 2025 by rpki-client