Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: 8LdmFDGWiRA3j6PVEDIn+SYKVQENL8KV2jXnNZ6qVio=
Subject key identifier: DB:79:CE:27:05:66:2A:C8:B5:44:58:F9:DF:B6:78:C1:BC:11:67:87
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 0194BD4EA7F98EB593F127D2EB1ECD1592E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: vMz1OcoELmWJCzaY8t8eqysCUx0r1w8+D+7eIL9oMDw=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:f9:8e:b5:93:f1:27:d2:eb:1e:cd:15:92:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=db79ce2705662ac8b54458f9dfb678c1bc116787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:c2:3b:79:c9:f3:85:49:d5:07:e5:00:42:
cc:e2:0f:ba:57:85:3c:04:d4:9a:32:7e:da:86:c4:
20:05:c0:32:aa:0c:cc:05:5c:4e:16:ab:32:27:63:
22:b3:97:3a:cb:52:06:79:5f:07:06:7d:9d:bf:81:
69:4b:3c:1f:b7:73:71:05:99:93:61:4b:f1:9e:c6:
05:9f:b8:11:64:c8:b4:9d:92:13:9d:ff:c9:94:e5:
af:0e:8f:33:95:24:35:9b:21:ae:96:0b:bf:16:b1:
db:88:35:7e:c6:58:0c:b6:79:a9:ea:e7:d5:bf:47:
64:43:61:d5:1a:ee:52:2f:5d:d2:22:d8:30:db:0d:
fd:ea:4f:2a:d2:a9:b7:cd:d6:bc:5c:b2:ff:93:fb:
f7:68:b7:85:3f:0d:d9:18:8e:73:ed:b6:24:44:6d:
00:1f:f9:1c:ce:9b:63:98:9d:fd:49:15:75:f2:64:
95:65:07:ec:8e:06:37:d2:a1:c9:19:40:78:b9:b7:
67:1b:81:d9:48:22:76:d9:61:74:4d:07:97:56:5a:
fa:b9:25:99:81:e7:df:99:aa:1e:63:01:70:9a:2c:
08:be:78:b9:36:4b:a4:9e:cc:16:9d:2d:bf:03:e3:
ba:cc:27:00:e5:55:e5:d0:f5:be:61:54:cd:76:bc:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:CE:27:05:66:2A:C8:B5:44:58:F9:DF:B6:78:C1:BC:11:67:87
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:0d:e2:f1:c2:a7:e4:c2:6c:10:75:20:80:9e:c1:e5:5b:
c8:d5:8b:a0:47:2e:04:37:3b:9e:1a:ff:ea:04:90:dc:41:45:
8d:a6:84:c9:13:ab:74:36:17:92:15:d1:04:6e:09:c9:f9:ae:
e0:ae:53:d7:3d:07:89:ec:a0:d7:6c:c4:ba:e1:b4:36:21:07:
16:4e:9b:33:45:73:4e:bc:64:8c:d1:06:73:de:c2:2a:4d:2a:
3b:b5:c4:c1:82:21:45:54:0d:36:32:a0:e1:db:8a:9d:ce:b7:
71:11:a9:a7:4e:66:a3:a2:bd:b8:78:42:29:f9:be:8f:06:d7:
50:6c:ec:3a:52:38:93:6b:68:1f:50:a0:a1:fb:25:84:cc:6f:
90:6e:5b:bc:ab:e4:d8:6e:f3:26:35:7d:e9:3a:76:17:a1:e2:
fc:2a:fd:97:5e:b3:ab:3d:3c:91:2b:50:48:4e:e7:3a:33:03:
38:c7:2d:ff:a1:f1:18:ee:66:a7:e3:21:e6:1c:13:89:25:ff:
ae:d7:ee:3a:c4:46:6d:81:f1:c6:e7:48:0b:aa:96:b8:f2:2d:
e2:a6:34:f4:e0:bc:a8:97:b4:af:b8:e1:67:6a:32:c6:f8:0e:
11:80:01:61:ea:63:46:63:57:81:9b:f3:4f:b4:d0:88:e1:b7:
60:ea:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:04 2025 by rpki-client