Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: TrWJLcGlMlxZzykk7lOEQlkFyTkqi6BMSkWygzn/ltA=
Subject key identifier: D6:FD:E0:FC:B7:B9:5A:DD:DF:D5:4B:5F:C0:EF:8C:45:FF:78:BD:AE
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 0194BD175017972CBE7949970FCBBBBE79FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: 4H+A/ViG66Jjcylv5HiY+xIp3l9VjeHg1m3/pLXzzRQ=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:50:17:97:2c:be:79:49:97:0f:cb:bb:be:79:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=d6fde0fcb7b95adddfd54b5fc0ef8c45ff78bdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:52:af:61:ac:f7:f7:76:67:e0:b0:7b:cd:
9a:c6:eb:62:53:79:b3:f9:07:c8:84:e6:ca:c4:d2:
e8:1b:90:72:f3:93:7f:e1:d3:82:11:05:de:6b:c8:
e0:cd:7d:c2:d6:28:2f:7e:6e:f2:f0:b0:1c:30:83:
2f:94:26:ce:a4:0e:41:d2:3b:e0:6e:9e:32:66:93:
c3:d7:1d:3c:1e:31:f5:96:e8:61:bc:ab:30:14:d7:
3c:0f:f2:6a:1d:78:23:c2:2c:22:c2:d4:5f:07:15:
8e:43:0b:ce:fa:70:ad:54:e8:76:ae:e8:23:64:a6:
e9:1f:91:b9:a2:b1:e8:bc:8d:d1:ad:c4:af:0f:3e:
8c:e3:2e:6d:96:14:05:74:a7:1d:04:9d:e6:8a:9a:
44:12:13:60:6d:ab:da:bd:40:20:71:ce:5b:0d:b4:
e1:2d:79:d7:40:c3:78:a1:6a:1a:10:f6:a4:c6:fb:
bb:55:d7:27:ba:c0:ce:91:5c:74:80:5b:ff:c8:3d:
d8:72:87:ce:1c:ad:a1:96:27:d9:e3:d9:6d:9d:5b:
d5:4d:cb:71:28:8a:16:ce:24:f3:dc:8a:6c:f0:91:
cd:6b:a2:5f:83:ef:2f:c1:6a:4b:1a:a0:23:f5:cb:
6b:36:d3:e3:be:17:63:8e:41:48:d3:55:58:fb:a0:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:E0:FC:B7:B9:5A:DD:DF:D5:4B:5F:C0:EF:8C:45:FF:78:BD:AE
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a5:eb:bb:5a:0b:53:8d:7b:3c:9c:ce:e0:e7:9a:99:2e:05:
75:2e:15:39:a6:cb:79:aa:50:0b:62:51:49:2d:7a:b1:06:d1:
9e:a8:0a:d6:2e:f3:2f:c9:73:95:7e:9c:f8:a0:7e:71:0b:61:
92:9d:9c:c4:09:4c:d4:91:6c:77:67:37:4e:cd:0d:16:57:10:
3c:a5:35:f0:74:cc:00:23:ff:20:2b:6f:66:14:38:99:f9:d9:
58:84:16:d0:61:97:db:26:60:16:f5:2d:91:a2:31:70:ca:13:
9b:9f:90:d1:4a:5a:2f:2e:25:d3:b8:39:8c:de:12:6e:ea:65:
e9:f3:25:a0:56:6c:c1:41:24:4a:76:a1:48:64:a4:83:0f:22:
ca:5b:98:8d:37:f3:0c:a0:81:4b:51:47:a2:64:02:56:fc:6f:
26:d0:60:0c:86:67:13:c8:31:99:89:52:15:88:f5:24:1f:4b:
ec:7b:98:2d:23:6c:3c:0f:39:05:8a:da:89:09:47:2c:f0:ba:
48:40:15:75:a5:43:8c:cc:8d:5f:8e:cc:7e:ad:d7:96:51:0a:
33:e2:9c:da:bf:37:76:c9:bc:35:60:2b:70:d1:84:25:2c:a8:
3b:75:58:a5:e6:0a:f9:29:32:f7:8a:bf:22:81:a1:f9:0c:cc:
e6:ff:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:03 2025 by rpki-client