Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: Zu+zyYQDUb83eN+6FteHnOEEIIPjUuTgkUkLV57OXR4=
Subject key identifier: F4:41:95:15:E1:A1:73:E9:53:5B:82:98:27:E7:AC:8C:05:A9:D1:C1
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 0194BD4E4E7BBF068672CA80A65F38C8DC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 13F0
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: SQwHFbcSVo2ufcBkh7EYxIs9YsDFYT4ulqOgpcA2FiE=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4e:7b:bf:06:86:72:ca:80:a6:5f:38:c8:dc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=f4419515e1a173e9535b829827e7ac8c05a9d1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:1b:50:28:e3:98:a0:de:19:42:0c:84:94:
0d:e3:cf:59:8d:9d:86:70:72:97:d9:ec:48:2b:a6:
89:e6:b4:bb:99:7c:5a:95:5d:52:3b:1a:9d:fa:34:
0f:12:87:27:fa:a1:99:e4:38:cc:b9:b0:ed:ac:03:
a3:ff:bc:3d:81:5d:09:5b:c9:ed:f0:e6:fb:d5:8b:
58:03:9c:4e:4a:40:a9:10:88:ec:7b:1d:25:c0:d1:
0a:bd:b4:a5:d2:7f:b9:79:ee:af:d3:a4:d5:52:9b:
81:1e:e1:80:98:ab:ef:a6:a1:6e:87:51:d2:56:db:
a0:b6:15:be:8e:e7:7b:a5:8d:e5:bd:b4:36:69:b1:
38:9d:6b:e1:ac:c8:17:c0:70:c6:af:02:62:21:91:
70:4c:d3:be:c6:17:28:0c:76:48:86:2e:61:c2:16:
f9:61:87:cb:67:21:f7:09:be:13:aa:a0:ca:c8:45:
4c:0b:5c:cd:44:b4:00:27:23:86:8c:48:5e:a3:89:
25:74:bb:8e:27:97:13:27:54:14:74:f2:08:9a:ef:
50:b6:28:99:13:51:a9:3e:30:16:67:f0:d6:b3:cb:
15:1a:ad:d6:c6:c2:71:68:b4:1b:15:be:92:8d:6f:
72:d1:52:b0:01:98:62:4e:a4:28:26:74:52:0b:ce:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:95:15:E1:A1:73:E9:53:5B:82:98:27:E7:AC:8C:05:A9:D1:C1
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:44:71:cd:60:69:85:0d:e8:56:87:ab:68:63:98:54:a0:
7b:f8:0b:08:85:29:a0:69:9b:d2:d5:84:32:26:02:22:d6:4a:
56:d0:be:2e:eb:3b:c9:be:97:09:35:5d:f5:f4:01:1a:a1:28:
17:c4:1a:e2:6d:8f:ee:41:81:ae:5d:9c:fc:13:ad:e6:b2:b2:
18:3e:71:71:89:4f:25:8c:a2:a7:52:f0:9a:db:ae:7e:c7:63:
b9:30:b6:d8:1d:55:58:93:59:cb:01:65:1f:93:5c:2e:a2:86:
53:13:f0:ce:26:df:e5:82:4c:aa:37:27:a1:fe:82:56:7a:d2:
8c:ed:e0:ca:bd:95:c8:a3:f7:ba:f4:e3:0d:63:bf:4c:95:76:
90:0e:3c:6e:2c:21:11:6e:84:a4:c8:a4:38:9d:34:29:d1:86:
08:33:41:ab:f8:eb:90:7c:15:c2:e2:75:75:76:f7:1e:de:00:
d5:5d:17:14:88:ce:d9:a1:58:a3:58:d0:9c:2b:06:b5:95:ea:
14:dc:2c:fd:a7:68:c4:de:16:bc:dd:84:13:bb:6d:d9:2d:9d:
0a:bf:cf:fd:21:90:3a:71:49:3d:0a:f9:02:70:9f:b9:8c:77:
e4:45:42:36:a3:58:21:9c:af:2b:90:64:c5:39:f4:b3:22:98:
18:65:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:08:00 2025 by rpki-client