Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: +e6HYyM17HkxsFDg1sRltwfKYL/9tR52DFjv/JLvQuw=
Subject key identifier: 21:D3:8C:8A:B5:17:DE:28:EC:4A:D8:BC:BF:E4:00:1B:A0:4F:E1:19
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 0194BD1773B18C7E9F96060E5CC1B27F9C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0A82
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 9FnOB-XBygoB-RgBBWEsPTbvFTc.roa (hash: faK52ZKxn8mhj7q+v4KziaARqXuKQdUnupgh7Jp3IVk=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: EANOrSnFykmEMitzSG0DdixFwfaDkYGEmLKcYuk2GIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:73:b1:8c:7e:9f:96:06:0e:5c:c1:b2:7f:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=21d38c8ab517de28ec4ad8bcbfe4001ba04fe119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:a6:d4:fe:65:b8:b3:3e:a4:88:44:2d:42:
c7:cb:ce:55:52:a1:6d:34:74:90:46:aa:b6:3a:dd:
c7:13:51:85:a9:77:b7:9f:bd:99:62:d9:85:60:99:
a9:b7:35:d2:f1:ee:cd:0f:68:37:5f:bc:ac:8a:80:
24:90:32:fa:40:fc:d2:b8:04:6a:42:9f:04:25:c0:
05:f7:f7:87:bd:dc:88:95:9e:a8:9e:60:a1:71:40:
c9:8e:a3:89:ef:fc:d0:88:9f:c6:72:2e:30:1f:8a:
90:70:50:55:f5:16:24:5f:14:f6:7a:18:e1:8c:dc:
23:72:d7:89:65:69:91:d1:07:75:9f:86:fd:20:b8:
ad:e4:4d:ac:16:1d:e8:43:06:7f:e2:40:9f:22:68:
92:f4:42:87:68:20:c1:c1:50:3e:fd:43:7d:54:00:
96:9e:fb:3f:03:f8:ea:67:e5:61:9d:a7:14:af:e2:
88:7c:3f:bc:35:9f:4b:19:ab:69:e7:c2:9e:57:e5:
32:16:61:42:6a:fb:a1:7a:28:eb:b8:73:74:2e:b7:
4f:37:df:06:ff:78:b6:1e:90:e0:57:c0:e4:64:32:
cf:7a:c7:39:3e:52:5a:8e:ed:27:c5:e4:d7:b7:af:
d7:a4:c2:54:4c:74:40:ff:3d:f7:7b:4e:a8:d4:55:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:8C:8A:B5:17:DE:28:EC:4A:D8:BC:BF:E4:00:1B:A0:4F:E1:19
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b2:89:ea:76:73:4c:7b:ff:0e:ea:ce:97:0f:87:07:f1:fe:
7c:43:72:32:7a:b3:8d:2f:f1:14:26:18:01:0f:06:7e:46:f1:
77:70:91:77:ea:3d:fd:3b:28:e2:c0:00:85:5b:8d:85:8a:fc:
2b:41:85:d0:43:a8:55:e3:ad:75:c4:4f:70:81:68:31:5a:7b:
da:27:b1:5a:c5:59:db:3b:41:f8:99:68:7f:9a:b2:d3:a2:d8:
cd:0a:ec:da:ad:1b:ad:72:26:8c:64:79:06:9a:66:23:a1:d1:
57:97:3e:ce:fb:8f:80:74:e6:6f:4f:47:2f:67:b6:de:10:c9:
1b:0b:75:c3:35:38:b1:69:dc:e2:8e:f9:71:ae:02:27:f9:45:
38:31:e5:3a:41:fc:3c:67:60:2a:23:dc:5f:76:e2:6c:4f:f3:
d8:0e:82:1e:5a:bb:fa:85:41:ae:c6:ac:b7:30:60:36:40:0d:
e8:83:36:da:89:62:fc:b7:5e:9e:15:b6:14:e3:42:23:22:6b:
0d:cb:aa:fa:75:b1:29:12:69:8d:e4:8c:85:0a:09:56:b8:f2:
0e:ad:1d:36:7c:99:cb:5e:49:aa:17:c3:af:53:26:7b:83:b4:
1b:67:14:05:47:67:1c:fb:ec:53:54:eb:70:9f:eb:3a:04:31:
fc:69:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:04 2025 by rpki-client