Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: JvIwmeZJQuob/3T59clnt8blSfXBB3tl17cXhrMOJ/I=
Subject key identifier: AF:38:75:59:C9:D5:87:0C:03:0F:D7:83:22:94:C5:AE:F2:21:C1:4F
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 0194BD17549CC034FA036E53580361A8C4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 0763
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (hash: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=)
2: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: oAEsJKaEamKWKHGDlayioOIcRJu4aUdPJtDNLflMIuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:54:9c:c0:34:fa:03:6e:53:58:03:61:a8:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=af387559c9d5870c030fd7832294c5aef221c14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:7d:e4:e2:9b:cb:e2:58:ff:36:5a:67:11:
53:b8:92:89:45:ac:e2:5f:f5:6e:66:e4:11:76:19:
46:69:dd:df:0c:e7:df:1e:d8:da:e1:96:f9:cf:04:
94:6b:5b:50:02:70:f0:dc:dc:f6:9d:ea:cc:0f:34:
0a:f5:ae:b4:bd:6a:c2:86:6b:06:a4:29:83:ff:45:
9f:eb:90:68:84:07:c7:e9:2e:81:59:d4:77:3b:4c:
83:08:95:e3:25:f2:a1:8f:8e:6b:dd:df:e1:94:34:
8b:c4:80:df:a3:91:c2:2f:60:68:e2:c9:d3:01:8b:
31:9a:3a:e7:a6:69:bd:b9:ef:76:fa:f6:95:0b:c6:
09:46:b8:b1:a3:b0:76:98:ab:46:c0:aa:ab:6f:2c:
2d:eb:c2:39:ad:9a:19:c2:d7:90:a9:40:ce:a8:ff:
e0:c4:c6:4e:f3:dd:1c:d2:96:84:b2:55:20:2f:e8:
1c:e4:83:4d:01:e0:87:e8:90:1b:11:8e:1b:42:ad:
07:88:ac:68:9a:15:ac:4e:e5:db:7c:41:eb:b4:03:
a0:61:94:88:21:69:a3:25:31:ef:de:bb:05:3c:66:
d7:48:9e:de:11:e7:73:fa:d9:d9:15:7e:d2:98:f7:
6b:d0:b8:ef:a3:84:d5:26:1c:97:39:93:2c:95:0d:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:75:59:C9:D5:87:0C:03:0F:D7:83:22:94:C5:AE:F2:21:C1:4F
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5c:6a:0d:c3:b1:b5:84:c0:b6:5d:d1:fd:89:31:19:e3:4c:
9c:03:9b:78:09:c4:84:ae:36:de:dc:d7:4d:93:45:7c:26:33:
5d:0d:86:8a:e0:7d:75:12:aa:73:e3:5b:f9:df:59:35:97:4e:
47:1c:3e:1f:c2:4d:65:47:74:35:11:66:5b:4a:b7:42:5a:3e:
d3:2e:af:02:09:15:6d:e5:12:17:b9:92:02:df:41:be:74:64:
ca:f9:d9:4a:21:d0:0d:3f:47:d1:48:46:6d:9a:19:79:e0:96:
d6:2f:d9:e8:63:0f:52:79:67:04:29:34:8e:fa:0a:75:80:95:
d7:4e:05:dd:92:7c:fd:10:9f:3a:48:15:c4:44:28:e2:ba:74:
f9:5d:e5:9b:01:8c:5f:71:ca:a2:57:15:f6:22:34:b5:ff:74:
0f:f4:be:6e:14:82:4d:9a:4d:d2:78:51:fb:d9:cd:1a:d2:3a:
45:ab:d5:df:2d:72:4d:03:90:22:43:29:cf:96:ac:73:55:4b:
ad:53:55:4c:be:c7:4b:76:c2:81:ea:23:e9:c9:32:d8:73:86:
ed:2c:aa:93:83:bf:5d:93:b9:91:68:ae:94:75:6b:75:53:3b:
9f:e1:4f:9a:e0:af:33:f5:25:86:4e:72:cf:27:a5:44:fc:ef:
98:18:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:09 2025 by rpki-client