Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: sAfhUUkyvz8TRcDPcUB+D7hZ2wr64NhBvzr2TgvK4mI=
Subject key identifier: B7:01:D0:B5:25:D0:69:89:38:FB:A3:F9:96:BB:3E:0B:B3:7B:DF:19
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 0194BCA9A935AAFFFF3FDCE947CC67431137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 10ED
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: KeMBAdHa4O1Wh51P37KEKcvix5pJuMfM3iX5XqmHLuA=)
4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:35:aa:ff:ff:3f:dc:e9:47:cc:67:43:11:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=b701d0b525d0698938fba3f996bb3e0bb37bdf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:6a:c8:44:15:2f:5e:3e:ef:36:e5:b6:67:
a0:9f:61:12:a1:d0:4b:95:73:a3:ae:35:43:a3:7f:
09:95:a9:d0:09:bf:fb:f8:3f:3b:15:68:c6:03:b7:
f0:bf:5e:92:88:49:46:3d:b3:4c:59:a5:11:b4:59:
97:4d:45:a4:a0:26:c2:e8:5e:e2:4f:a8:60:cc:35:
19:c1:78:65:17:22:4b:ac:df:c5:39:fd:90:88:44:
38:d1:77:16:f5:2b:d4:18:86:e5:c9:17:e2:85:53:
97:e3:a7:56:8d:e2:6c:aa:be:52:dd:ab:f8:be:83:
07:5a:a9:90:97:18:fc:db:a4:2c:19:75:22:1f:5d:
ec:7e:51:3d:bb:52:ee:fc:c6:68:0f:10:2a:3c:4b:
bf:2e:06:20:7b:74:dd:9d:63:df:ef:47:36:ae:55:
49:e8:51:21:7f:f3:51:16:69:d1:e3:4c:18:04:7f:
26:ad:82:fb:ed:72:ae:8a:c1:69:b8:d2:aa:98:32:
5f:76:f2:f1:ab:9d:97:1e:ec:fe:45:97:38:45:29:
3d:a7:89:ef:73:e2:fe:3c:ca:18:31:5c:41:cc:80:
84:2e:23:95:89:90:d0:a9:03:64:a0:d0:67:b4:12:
de:ff:0a:f0:48:00:36:d0:a6:e4:47:bd:fd:92:c8:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:D0:B5:25:D0:69:89:38:FB:A3:F9:96:BB:3E:0B:B3:7B:DF:19
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3e:0f:5b:f6:e2:0f:ce:06:98:12:35:26:1e:39:8b:6b:ea:
6b:ab:b0:72:ec:41:68:fc:1c:36:b2:0e:97:b2:9b:69:2f:66:
2b:a8:41:5d:12:75:96:03:6f:11:8d:e0:25:e4:e1:cc:9e:e3:
59:ee:21:2d:b9:9a:68:c4:87:70:ce:24:f5:87:6a:a8:5e:19:
71:de:ad:af:bd:c4:3a:0d:d4:31:88:2f:0c:d3:fa:a7:a5:1d:
62:57:70:f3:4a:a3:c0:cf:d3:64:3f:58:fb:e8:5e:f9:44:d1:
32:17:43:e2:67:db:d1:83:ff:ec:49:94:c4:18:f6:8e:86:02:
50:db:30:d8:35:c3:a2:da:a2:e6:18:a5:ec:ee:79:20:b2:d6:
ba:5e:e9:3e:a2:f6:22:cd:7a:71:03:f4:50:fc:91:e8:b3:04:
31:e2:98:a9:ea:6e:6f:d0:0a:8b:6b:cd:e1:61:90:0a:d9:ff:
39:be:3d:46:06:1d:7d:74:d9:64:5e:71:b1:23:58:19:3e:1c:
e0:48:c9:b7:9d:3c:05:ca:28:f8:a7:9c:f4:9a:91:e8:67:de:
1a:44:ef:96:95:84:a2:65:d6:6a:2a:7c:46:b7:43:15:43:87:
4c:51:c7:58:b6:43:e4:48:d8:de:32:9d:ec:0e:28:c3:28:6f:
a4:de:df:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:47 2025 by rpki-client