Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: XHzLSgkbXaumh8KvMh2152lA4l9UjXx8rJCT+/qP6is=
Subject key identifier: A2:2E:5F:31:E9:AE:31:61:DC:35:F8:A8:B5:14:69:C3:09:5C:D3:9F
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 0194BCAA3CE82F6FF7FB8F203C8625F854DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: leZAamX+STKGd5RvNFcWtPiUsgLdfemU+LYFCoSaeUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:e8:2f:6f:f7:fb:8f:20:3c:86:25:f8:54:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=a22e5f31e9ae3161dc35f8a8b51469c3095cd39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:72:d3:92:2d:cf:ca:28:86:59:f1:87:47:
74:22:88:c9:9b:8a:e0:fd:e2:9a:70:eb:da:cb:13:
0f:82:c9:80:5e:37:22:9d:75:89:b1:e7:80:2a:61:
63:7d:b7:e8:43:6b:cd:57:f0:27:1f:46:a3:99:2c:
cd:fb:b1:a5:af:4e:5e:9c:15:ad:34:3b:66:b2:3c:
61:2f:45:9b:aa:16:02:ec:79:ea:1a:c0:8a:d3:d9:
ec:93:c8:14:7e:fd:78:29:4b:5e:79:e0:dd:78:7b:
5b:2e:81:e0:39:0b:34:1b:85:66:7d:29:ae:b9:fd:
44:75:ef:7f:49:92:8a:97:e8:c9:52:7b:5b:31:a9:
e6:ba:6f:f2:c6:01:85:64:f6:c8:db:cd:a2:f6:79:
ad:4a:1e:d4:51:67:f2:da:0c:a1:2b:65:ce:24:01:
5f:45:d0:9e:30:f2:c5:13:70:cb:73:f8:e8:81:18:
cb:72:ce:40:e1:74:7b:ea:92:d7:b1:e0:a3:c0:45:
a3:cc:d0:45:45:4a:42:de:5f:e5:57:ba:12:65:b1:
ec:1d:94:be:76:e6:3d:6f:18:93:81:01:d1:f1:63:
72:df:9e:26:6f:02:c8:7c:6d:65:f0:fb:14:92:d6:
8a:06:36:7e:31:53:25:b7:d9:ad:4d:0d:6f:f8:d8:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:5F:31:E9:AE:31:61:DC:35:F8:A8:B5:14:69:C3:09:5C:D3:9F
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:de:6a:a2:29:ca:2f:b9:32:c9:d6:7b:c2:60:d1:9f:08:6a:
c5:7c:a1:4c:b0:5b:27:55:5a:99:b2:80:9a:3d:cb:0c:2d:35:
37:cd:84:cc:d5:4d:0d:40:75:fa:91:b2:07:66:c2:75:9c:16:
cd:2a:82:b1:21:9e:ce:81:1b:50:70:ba:f1:59:56:5f:14:69:
61:34:26:bd:35:8f:7f:ce:ed:f2:7d:13:a1:2f:ac:31:1c:40:
ae:d7:f5:9a:ad:f7:2e:b6:d7:6a:aa:d6:5c:ca:12:73:df:a7:
70:37:3a:a0:8b:29:54:fb:7e:e1:c6:09:c4:12:10:9c:63:7e:
75:b1:cd:52:d4:9f:0c:5d:11:b7:44:fc:1b:e0:df:9c:04:28:
82:68:ba:9e:12:97:62:2e:59:32:c4:9a:ff:36:a9:af:e7:1c:
6f:62:0a:95:20:0d:ce:ab:1c:3f:6b:a5:10:7b:d0:1e:96:2e:
af:54:a9:6a:6d:69:c0:d5:16:60:3a:5f:02:9d:e9:8a:bb:10:
f7:d9:e6:cf:5f:50:f1:df:8d:ef:18:ac:34:28:5a:f1:d6:c5:
6a:64:0d:0e:10:62:78:c0:a2:ea:89:6a:02:52:85:ec:2e:96:
6a:5e:48:96:cb:98:fe:df:3f:62:4b:46:7a:6d:ef:a8:35:bd:
fe:4f:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:27 2025 by rpki-client