Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: HehjaMosjyKM6dQkPtmqLR6PDKRsHZPT9vQOvhq6xhA=
Subject key identifier: AC:EC:AE:98:AA:1B:F3:55:09:F8:6A:25:7C:9A:B1:B5:E4:56:B1:59
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 0194BC3CB24C06924321FBD54B05594F825D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: JuvJ/w1ltN3f4cJWsbhb2evXOaYd5YPaPkQ4M1TeKFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b2:4c:06:92:43:21:fb:d5:4b:05:59:4f:82:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=acecae98aa1bf35509f86a257c9ab1b5e456b159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:ee:e8:fc:4c:f8:23:c3:5f:ce:c8:0f:95:
9b:c6:0e:84:7c:4b:3f:7c:e5:14:37:07:1e:2a:80:
0f:0c:af:60:e7:46:41:88:49:3b:39:2a:a8:f0:cd:
b8:c2:0f:c9:c5:61:0d:ac:11:8a:d9:ec:2d:43:fa:
54:d2:60:9b:00:f5:81:91:3c:2c:98:f8:6d:d3:0f:
d8:20:d5:e6:2d:6d:77:a4:54:bf:ab:ef:35:06:61:
ef:ec:59:bc:68:3c:c9:b9:89:66:ad:4e:dd:08:17:
40:53:d2:2d:bd:8e:13:73:24:06:b0:a4:75:9f:42:
f1:40:e2:b4:6e:2f:36:76:34:5c:b1:57:c1:68:b0:
33:15:0d:87:0b:69:a7:82:81:c0:4d:a9:f2:ec:dd:
3a:1e:33:4b:83:3a:ba:9a:55:26:19:2e:f5:a8:b9:
d9:43:c9:8a:72:b9:cf:ef:07:65:a0:30:12:3a:1a:
29:5e:3e:a1:09:8f:e2:ed:28:b2:9d:9e:6d:81:10:
ef:5d:b3:96:16:72:b7:10:75:f8:0c:03:1a:9c:c0:
95:75:25:e9:07:e4:e3:db:8e:83:9d:9c:15:39:06:
df:55:20:68:fa:91:bf:6e:07:43:b7:90:db:4f:cc:
b3:c8:01:cd:cb:eb:6e:7d:80:09:9c:e0:8b:cf:95:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:AE:98:AA:1B:F3:55:09:F8:6A:25:7C:9A:B1:B5:E4:56:B1:59
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d2:4a:0d:e7:7f:c5:c6:bd:74:e7:16:22:03:a0:69:c6:16:
bf:71:34:a7:b9:c8:ca:cc:c4:37:d0:f6:f0:aa:de:8e:37:11:
25:59:97:c5:1f:7e:c9:91:25:f4:22:46:71:c2:5f:37:8c:76:
88:ed:f2:71:8f:04:cd:e1:89:9a:d5:28:8e:65:8e:c3:9b:fa:
f5:5d:7d:0f:6c:d6:c1:e4:20:e3:39:ed:02:84:e5:9b:27:a2:
b4:8d:df:42:0f:ed:60:9c:c5:07:0d:6a:0d:30:b1:6f:23:ba:
19:70:45:59:d9:1b:cb:60:2a:0a:57:09:6a:e9:f1:1f:c0:2b:
e7:1c:1c:8f:5f:03:f3:38:0a:f1:82:6d:66:41:43:51:3c:b3:
67:a3:7a:a7:64:1d:18:78:59:97:f8:2e:0d:7c:9d:51:e3:5c:
bf:43:52:ca:ec:b9:82:92:b4:58:ea:b3:26:aa:8e:4d:b0:9d:
d3:b3:6a:1b:d3:b1:56:b0:6e:62:c6:33:8b:6b:ea:14:d7:55:
19:a6:c5:d6:db:f0:f7:66:02:16:15:e1:dd:1e:d9:8a:ed:7c:
70:9a:44:93:3f:88:a5:fa:a0:f3:cf:16:65:0d:3d:be:11:ba:
77:72:48:a6:c5:b9:b6:4d:3e:39:20:a1:dd:13:45:7e:02:98:
f7:af:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:24 2025 by rpki-client