Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: hK2woMvrYFzbCINui7YnaImyuJgPoAyNR1hLu9gcUew=
Subject key identifier: 35:78:05:6D:64:BD:52:E9:4D:62:03:9C:97:FB:DE:D1:A2:6B:17:18
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 0194BCE0E0D25E1A81FC5A0DDE2B55A6C0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 0236
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: 9Dwq/4hQ3Ed3BDUb5C8brvIdrPHk7VeCYzxV37LgLuY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:d2:5e:1a:81:fc:5a:0d:de:2b:55:a6:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=3578056d64bd52e94d62039c97fbded1a26b1718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:74:c1:85:a2:ea:b9:f8:f8:89:73:db:7f:
fa:af:cb:5d:70:38:bf:a0:ee:12:59:08:d7:0d:5f:
d5:6f:e7:00:a5:da:cc:a8:f8:d3:29:a3:11:c0:46:
d6:80:50:db:22:9c:83:d0:a3:08:66:c3:aa:e2:0d:
04:ad:a7:fd:d8:09:53:09:93:8b:91:3c:98:21:fb:
1a:df:d7:c4:4a:1c:0b:88:55:68:91:e4:68:90:e5:
b8:9e:2e:18:57:46:ba:7e:21:71:2d:cd:a2:70:72:
8c:6f:e3:3c:a0:5d:46:98:01:02:52:4e:fe:84:23:
c9:48:a7:fd:0b:71:8a:83:0f:63:5d:da:ac:e7:06:
d8:d3:61:aa:3e:8b:65:90:2e:9d:31:c0:38:f3:51:
6a:90:45:d0:d4:39:85:2e:c8:d5:a0:aa:d1:7c:85:
47:f0:95:e9:ad:34:cc:1e:2c:9b:4a:04:d0:64:85:
8a:d4:e5:32:45:37:a9:b2:85:7d:4d:65:02:b0:6e:
92:f1:1e:7e:9e:ca:db:26:da:e6:25:1c:2a:02:9f:
2c:2f:50:4b:05:8c:71:d7:b0:4a:72:27:8f:9c:7f:
90:59:9e:e0:fd:5c:08:2f:ec:cc:cd:94:3b:76:97:
49:d0:27:e6:62:85:ec:ea:c8:9a:fd:43:b1:9e:2c:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:05:6D:64:BD:52:E9:4D:62:03:9C:97:FB:DE:D1:A2:6B:17:18
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:0a:c5:f7:8c:3f:66:a0:ad:3a:b1:79:5b:12:36:ae:9d:
2f:91:6c:63:a4:22:c8:83:57:c2:a1:50:99:43:0d:79:d6:31:
c7:e7:2e:ae:81:7f:ec:03:f5:4e:58:ba:c8:81:a0:38:c4:6d:
fe:31:48:c4:15:45:87:46:8b:b4:00:10:c1:a0:28:02:10:43:
a8:d2:3d:07:c3:7b:0d:cc:98:6f:09:c2:72:12:de:6e:3e:d7:
1e:f2:92:bd:07:b4:fd:30:f2:9a:5f:58:e6:bf:8c:b9:fe:4e:
cd:1f:2b:75:83:02:47:a1:e4:a7:51:e7:18:6d:cc:44:bf:1b:
0b:54:22:7f:68:7a:7b:ee:03:c9:fd:ae:c9:8b:10:91:b0:c4:
24:ac:5d:5f:3a:31:53:e8:a0:06:54:f1:16:39:86:9e:d9:24:
76:01:21:f5:12:5d:b3:7a:c8:6e:ec:0d:d3:0b:ce:11:bb:30:
5c:ab:77:83:a5:80:8c:70:51:47:e0:37:f8:7a:58:bd:51:7a:
95:19:44:dc:2f:e1:ca:54:15:a1:93:24:d4:0e:ce:92:df:06:
22:85:f2:33:d7:53:2c:1c:ef:70:9e:c6:c7:fe:1a:22:7e:6d:
73:fe:30:0c:02:22:d1:87:b7:95:37:6a:e8:49:e7:0f:61:75:
be:a6:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:13 2025 by rpki-client