Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: vScr9fXAHlxkjFe6HdlpOTgvn/S/fPB9zAhiAqYLGX8=
Subject key identifier: D2:82:71:4A:3A:D7:52:67:D4:BF:8B:3D:B2:91:99:4B:14:CC:31:B9
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0194BCE0956FAEA485A6E18716DB0909BB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: j3hrgY977WGzzKJItZoMCapaD9YilKoyfbzRrwf4q/E=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:95:6f:ae:a4:85:a6:e1:87:16:db:09:09:bb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=d282714a3ad75267d4bf8b3db291994b14cc31b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:35:04:ec:e7:71:74:a5:89:2c:60:89:47:
08:78:76:c3:bf:61:35:ff:de:1f:0f:c4:62:c5:34:
60:1f:c4:b5:92:e7:6a:7a:f0:b5:7a:c9:58:db:61:
5a:73:74:ef:5c:73:6a:00:8f:ce:6f:a1:6e:1b:96:
51:ac:26:f4:98:57:95:31:fc:4c:b7:1b:59:ac:18:
5e:ce:32:f7:1b:fa:eb:f0:14:f6:6e:8e:70:2b:dc:
61:cd:64:b7:a3:51:0e:7d:a4:c7:a2:75:3f:a9:4f:
73:c4:60:30:f8:c0:0a:9e:c4:45:25:77:f4:f7:59:
29:06:62:db:90:4b:ef:e9:a6:f4:b8:e3:42:00:50:
2b:20:2e:24:fc:08:58:67:41:b2:b1:81:ad:ef:70:
0c:53:5e:29:18:7d:f0:a1:44:57:3a:a1:7f:8e:b9:
11:b2:ce:55:01:d8:ee:e4:ee:da:3b:7d:b1:81:34:
c5:a6:40:c5:73:12:d2:20:e3:a3:cc:f9:82:3b:46:
3d:9a:13:7d:e7:67:ac:c5:34:f6:b7:48:a3:06:20:
82:b7:4b:91:32:c9:2f:79:1c:26:ba:cb:92:ce:3b:
49:39:79:f7:bc:d2:f2:df:ac:39:da:20:80:57:34:
07:6d:c3:8f:95:31:2c:ec:a2:3b:ab:ac:5d:79:26:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:82:71:4A:3A:D7:52:67:D4:BF:8B:3D:B2:91:99:4B:14:CC:31:B9
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:cb:27:ad:82:1a:2a:82:d5:26:6f:e5:7b:3f:eb:fd:94:
dd:63:ff:35:35:02:85:1a:bd:09:1a:04:5e:44:3f:80:41:b6:
a4:83:2a:a4:ce:ae:16:3c:a5:ed:9e:5d:8c:a3:d0:c3:6f:cd:
d5:fb:ae:58:56:14:90:71:fc:1f:39:96:e7:0f:f4:76:5f:a2:
41:73:e7:31:03:c9:91:a5:12:b2:6c:63:35:e6:a1:30:83:e5:
6f:cb:a8:0c:0e:d9:e2:34:ee:5d:87:a2:97:6e:b2:19:e7:ac:
07:b1:09:96:6c:c9:aa:a9:34:6b:1b:26:ce:16:15:2f:fc:d2:
db:db:42:62:88:0b:4e:1c:4d:b9:df:37:be:1d:95:f1:97:5b:
b2:8a:ec:0c:66:14:12:27:d0:75:e4:f6:aa:8c:88:44:6c:2d:
46:d9:d7:f6:6b:4b:2a:da:a5:68:18:95:6e:bb:f1:2d:31:90:
fb:77:b7:d6:7b:01:c0:ab:ab:f8:0e:9b:f8:5b:0c:00:db:a9:
81:33:3f:99:db:41:a6:88:2d:c9:f1:74:5f:14:33:be:41:72:
87:9d:ff:36:8e:63:b7:d3:4d:39:9b:e9:33:b3:1d:61:23:e2:
5a:96:80:98:04:95:c6:18:db:50:7b:a0:2b:be:80:80:9d:f5:
b5:66:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:48:49 2025 by rpki-client