Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: ElFPB5ptRxHEu+vvItMfJxAQymAjA79uBFKfo7G4oTA=
Subject key identifier: 50:68:AE:CB:51:DF:5A:AE:BC:87:AD:B5:F4:72:E6:2E:25:57:B2:6E
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 0194BCA96DD853D83227381D82347B775702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: F0
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: IjCthIS0awbmFhI7QHPawP7/+dL+RwcONIVPgp+8d8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:d8:53:d8:32:27:38:1d:82:34:7b:77:57:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=5068aecb51df5aaebc87adb5f472e62e2557b26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:d7:7c:7a:f6:86:f3:fd:a9:fd:c6:44:01:
83:d4:c5:9e:62:8d:02:a9:55:4d:f3:5c:91:94:c8:
4c:23:ac:b4:ce:44:04:4b:ea:69:77:6d:41:ab:50:
45:dd:a9:86:83:fa:89:ef:0b:f1:ec:c7:32:3f:50:
aa:d6:83:01:85:6e:18:6d:89:b2:55:a4:7f:7d:59:
db:c8:54:7b:e7:f4:fa:1a:2d:9c:f5:bf:77:2a:75:
14:51:47:e7:42:e3:9c:7e:af:9b:ad:02:20:5b:26:
72:17:46:c6:50:da:40:51:28:4c:6e:5b:74:0f:67:
62:82:15:04:0a:da:a2:ca:a4:56:12:c2:73:39:06:
53:53:28:92:77:d5:3a:a9:49:82:82:1d:72:ab:89:
cf:00:5a:db:ec:75:9e:af:83:f7:68:46:2a:2a:d7:
e7:48:74:6b:8b:86:83:f8:ce:8d:51:83:52:ce:ad:
3d:0b:04:f9:b2:b6:7b:c9:f3:91:66:28:87:6e:00:
ec:13:94:90:dc:28:90:f2:c1:c3:9c:34:0f:8a:f5:
79:19:53:17:d0:c7:e0:fb:70:db:7f:44:c2:14:9a:
13:bb:4f:c8:bd:34:51:c9:64:e1:9b:79:7c:71:0f:
ee:ef:b3:9c:58:5e:5f:ae:04:91:5f:86:75:eb:52:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:AE:CB:51:DF:5A:AE:BC:87:AD:B5:F4:72:E6:2E:25:57:B2:6E
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:47:c7:51:69:ed:e6:c3:f1:64:10:17:11:9e:41:44:98:36:
34:3f:15:0b:01:c2:11:4c:fd:63:9a:a4:e4:6c:19:31:12:e9:
9c:65:19:4a:91:ed:93:b1:7a:28:f3:dc:ea:9f:a3:7e:ef:13:
1a:01:fc:9d:dc:51:3c:76:f7:b1:ac:e7:8c:36:3d:76:c0:5a:
4d:9e:e1:a6:b0:df:8a:49:95:3b:8f:73:c9:b6:fd:6b:d5:75:
01:81:4f:cb:95:69:05:35:56:c9:03:13:6a:3e:02:23:2d:c1:
31:77:c8:4c:bd:82:7a:d3:3e:54:c4:73:64:7c:73:31:b2:87:
ee:56:17:03:31:5c:ea:4c:e5:ed:49:ea:82:16:5e:56:76:c3:
fe:91:27:4e:95:d1:1b:b2:bd:7a:ef:22:c7:df:46:7c:ea:3d:
6c:5c:d7:e1:a8:64:6e:49:45:9e:f8:99:eb:b1:bf:f2:bf:ac:
5a:0b:2b:39:f5:1d:17:ed:dc:3a:df:91:55:31:b7:a3:67:4a:
4f:4b:fe:b8:cb:42:23:ab:d9:2a:a6:94:d1:a6:72:04:5f:82:
e8:e3:12:e3:83:09:72:f0:d7:ad:98:dc:89:d2:cf:5d:fd:4b:
a5:89:97:99:0f:ec:56:60:fc:ef:94:7c:16:66:0f:4f:09:f0:
aa:0f:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:33 2025 by rpki-client