Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier: 0LyzF6gGcGwmZa7gg57+ta3wr0UEKItzcvfAclPfMPA=
Subject key identifier: 36:14:33:FB:03:B6:73:55:D5:F1:89:6F:70:2C:A2:B3:78:08:4E:EF
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 0194BD17A574E4B4A3C6F80E47D46AE0CAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=)
2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: 3Y7kO9NEe3eTAMNxjVewOugEAtYKD7Weha+2D6QYSAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a5:74:e4:b4:a3:c6:f8:0e:47:d4:6a:e0:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=361433fb03b67355d5f1896f702ca2b378084eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:05:db:fd:3f:54:f4:cc:67:01:c5:88:d1:
2b:a1:20:2a:fd:b0:c5:79:5f:22:20:27:f0:f1:7d:
39:a1:7a:da:2c:8d:2c:cc:82:98:5c:43:16:15:f9:
94:c1:cc:b8:af:6b:e6:e9:8c:9b:85:a1:52:1d:04:
ca:9b:67:ea:c0:33:6a:14:24:7a:ed:83:54:d7:0e:
f7:09:2b:b4:dc:94:90:7c:9a:1f:8b:69:a8:ae:bc:
8c:d1:29:36:0a:1f:fd:91:02:4a:6b:c1:cd:68:07:
1a:a4:96:26:93:5b:c1:90:21:3d:f8:92:ef:29:b4:
e9:e0:1b:aa:ec:11:c1:c7:6e:66:43:b9:8c:b3:25:
5c:f4:4f:e5:14:5a:df:5a:e3:fc:85:fa:d1:a4:2f:
22:62:98:f9:51:68:0c:77:1a:57:a7:c8:82:f0:26:
bb:cf:73:13:3c:50:15:d0:be:cb:b7:52:a6:dc:e4:
f1:4e:75:dd:53:5f:bf:b7:4b:69:4e:1e:a2:c3:6c:
fa:95:91:7b:0e:a2:7e:f5:03:19:28:c4:c1:7f:2e:
89:07:90:86:11:bf:7c:09:9c:4e:67:56:0e:65:47:
64:99:2a:f6:45:88:5d:08:d0:39:0b:99:4a:b5:12:
02:74:7d:0e:71:29:a6:80:47:f3:a1:c8:eb:44:4b:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:33:FB:03:B6:73:55:D5:F1:89:6F:70:2C:A2:B3:78:08:4E:EF
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8c:e8:4a:2f:e6:87:26:c8:37:dc:12:b5:3c:bd:5d:5f:d9:
17:57:4d:09:d0:ff:f3:84:d3:10:b9:8e:4c:08:c3:82:68:cf:
72:f3:a9:cf:e0:eb:ed:05:85:25:23:86:93:64:ad:57:8b:f8:
73:8b:ed:7d:a0:8e:80:19:e1:b4:2b:ec:f5:1c:6e:fe:26:85:
49:aa:ca:ba:4c:b2:b1:44:b9:72:74:ba:8d:d4:0f:8b:57:19:
81:b5:5f:c8:43:73:ec:08:c8:52:fd:77:74:70:ca:26:d3:b3:
80:29:5e:53:19:be:b2:bc:2d:d1:a9:32:15:68:b0:e0:14:8b:
76:a5:12:14:66:10:ae:ee:98:2e:ba:ce:98:1f:6b:85:39:9f:
38:f0:53:24:e2:98:6b:33:32:d3:a6:58:78:50:c6:b4:a3:98:
5d:50:5f:ac:ff:3a:bf:ad:7f:0d:b1:48:0b:5b:42:02:4c:ea:
ff:a9:e3:5e:f6:c8:b2:43:5d:c9:4c:0d:fa:d3:b0:67:5f:b8:
42:c0:3e:61:77:cd:25:81:5a:a9:99:7c:46:88:98:23:93:01:
f5:1d:c0:d7:ea:b2:e1:91:2c:19:8f:76:fb:e7:4f:1a:08:5d:
44:d1:09:b2:8b:dc:c2:d4:86:c7:16:51:51:29:80:3b:9b:00:
b8:b1:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:12 2025 by rpki-client