Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: OX43X1Xt6ZTfYD7Sef4ciyYsOBvECgJwbZpYXEMlDt0=
Subject key identifier: 35:0C:49:7C:9A:AE:90:CC:E7:02:BD:B6:A5:CD:7A:D0:D0:38:1B:93
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0194BC3CB350257E12BA0070BAA7517BF383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 01D9
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: Oo15GTcnGxdams7W8SOqY2Tu3KQ.roa (hash: SPZrYYn8eR1ANpkKzJitLECRyTeQovVBfhYuL5RMBfU=)
2: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: n4cJhEoG71ismMu7NrX7PP0rFWvKfIa7QxvmQc4bWKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b3:50:25:7e:12:ba:00:70:ba:a7:51:7b:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=350c497c9aae90cce702bdb6a5cd7ad0d0381b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:6c:aa:c9:ed:39:a4:8f:81:0b:89:7c:6c:
bb:2c:48:46:de:2c:4d:34:d0:0c:f8:bb:71:76:dc:
2e:81:a1:cc:02:db:0b:b3:01:5a:0b:9a:b0:bd:cc:
56:7d:4f:76:98:db:28:2a:f6:ad:4d:13:59:48:00:
61:0f:ff:60:90:9a:c7:63:66:81:9c:5e:55:74:d2:
76:87:a6:f7:7a:84:73:62:4f:ea:bd:dd:92:b2:ef:
54:ae:e3:d1:28:6c:3e:54:d5:69:cd:c4:25:f1:80:
ab:b6:ca:b8:76:88:a9:3f:d9:75:6f:d4:20:65:12:
06:f0:13:87:72:3e:ec:c2:3d:b3:a1:c7:c5:29:0b:
4b:bf:4a:d4:e5:34:d9:4b:21:48:1f:49:06:44:0e:
05:8a:43:bd:7f:70:05:c6:43:a8:de:dc:df:11:a5:
3c:94:8f:ee:ec:42:ba:b9:2d:32:f3:cf:1a:e2:6f:
5f:e9:d2:7b:43:4f:cc:03:0c:18:8f:f7:7d:45:a4:
f5:40:e9:97:e4:82:01:61:1d:8e:66:53:c3:19:e7:
70:4e:46:6d:d9:bf:14:a2:6b:9f:9d:7c:93:16:1b:
38:45:33:26:90:be:1f:e7:a1:1a:ae:e0:15:6d:a6:
56:98:a1:98:5f:0d:9a:d8:43:60:a4:56:1a:32:67:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:49:7C:9A:AE:90:CC:E7:02:BD:B6:A5:CD:7A:D0:D0:38:1B:93
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0f:46:37:50:30:75:b7:30:4a:21:49:06:59:6d:26:76:2c:
be:49:55:61:eb:92:08:70:d0:ba:5c:dc:c5:7f:38:54:9e:31:
8f:85:b2:1c:7f:46:80:81:1f:91:b0:4d:b8:f6:3d:ba:9e:b3:
e5:f0:9d:f4:7b:44:92:e3:1c:45:1b:10:ac:f2:c9:97:a4:ad:
90:27:9e:c2:8e:3a:30:36:0e:45:d4:bd:85:d4:48:8c:53:d9:
41:95:a7:7c:d2:ee:8a:ef:c5:e6:44:18:b0:2f:f4:8c:8f:87:
2e:22:20:00:65:16:05:17:64:ee:d6:9e:86:8f:4f:59:54:9e:
58:7f:83:f8:9d:bd:7f:e9:24:1f:7f:30:ba:3d:18:8c:94:b2:
b7:c6:10:fe:f0:5e:fb:59:b4:b5:74:e7:c5:83:7e:5d:35:a1:
63:18:05:6c:21:00:11:9c:94:5a:16:76:59:1f:a9:12:d2:4c:
42:6d:9a:61:ec:41:ed:f3:6d:f8:ad:06:00:7f:df:47:a1:e1:
2a:7c:b5:3f:b9:64:40:f7:50:9c:93:4a:6c:0f:46:e0:6b:8a:
8b:ec:fd:ff:58:f1:1a:63:20:b9:e9:0e:5b:8f:4b:78:21:82:
ce:22:9c:74:05:30:23:4c:a1:8e:e1:a2:42:fc:b0:c2:18:66:
c4:db:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:52 2025 by rpki-client