Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: 1Gxgilhbx3kSQintavqndSXUV8QL/q9XYymiujpKLB8=
Subject key identifier: 9F:6B:2D:DE:DC:51:10:D1:B3:1F:FF:B4:B9:CF:11:6B:81:C9:DA:BA
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 0194BD4EB09E8DB5792E4AC679462EE3DD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 07DD
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: eLZZSkzl5SW7RDrMx+oXHMta0sOKwyclDomDjp3Q0w0=)
3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b0:9e:8d:b5:79:2e:4a:c6:79:46:2e:e3:dd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=9f6b2ddedc5110d1b31fffb4b9cf116b81c9daba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:27:79:67:f5:42:f2:64:58:50:68:bc:83:
e4:01:50:7c:b5:7d:24:60:a6:c1:a9:32:70:89:6b:
0e:42:77:91:90:d9:ca:34:d6:e7:09:06:ea:f9:19:
09:4e:da:ce:96:0c:97:1f:89:f9:7b:b4:b3:ba:44:
b7:f4:c5:ca:9c:8e:d9:ab:c5:eb:33:63:77:74:38:
76:95:ab:fe:a7:7d:12:7b:6b:69:4c:5b:82:18:82:
e0:8f:f6:7c:0f:b9:3e:8e:2a:4c:65:63:e2:4f:04:
fd:1e:a4:0e:80:15:dd:fb:e8:ff:ba:d0:a9:4d:a0:
e2:e2:47:d5:3a:ee:c5:11:fa:e0:8d:a1:58:79:03:
df:cf:04:20:29:7d:a9:28:12:c8:ea:fd:e7:5c:aa:
16:1b:c3:d4:43:43:12:21:d9:08:c1:d0:3b:33:86:
b9:08:b3:5b:6e:59:08:36:e7:38:35:1d:35:e2:99:
10:e7:5d:61:d5:ea:19:06:e4:30:81:a3:fd:bd:98:
3b:42:1f:0d:c5:32:ec:9f:29:3b:70:49:e3:1d:02:
35:7a:be:af:b2:ba:07:87:e9:3e:51:d0:7a:c5:f9:
6f:bb:2f:fe:40:64:56:40:b4:de:7d:8a:1b:ef:a8:
94:af:2b:ae:30:78:fc:5a:12:91:39:0f:99:65:a4:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:2D:DE:DC:51:10:D1:B3:1F:FF:B4:B9:CF:11:6B:81:C9:DA:BA
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3c:91:33:e2:79:d3:d5:13:6e:5e:1a:f3:a8:d3:b9:f6:10:
9a:cb:c0:22:82:c4:d1:33:81:73:a8:dd:cc:dd:59:ea:ef:81:
be:2e:9e:74:07:cb:74:d6:00:bb:d3:44:a3:c9:e6:b7:ba:71:
49:66:9e:7f:b4:9c:b4:65:25:ae:37:62:97:45:60:dc:b3:b6:
d7:fc:5d:c0:c8:c5:43:2e:62:23:9f:10:39:99:2f:ee:c4:03:
06:d0:ab:22:a9:24:0a:42:1c:8f:2e:40:e3:7e:b1:e8:f6:42:
e4:6a:f7:3f:58:7b:bc:bd:81:75:fe:01:f3:d2:24:e0:40:80:
95:27:ea:b9:53:13:d4:90:48:ef:5e:03:35:b4:f4:33:f6:03:
1f:22:6c:8f:31:c5:83:08:c6:27:d6:96:34:46:09:38:0c:c3:
aa:13:6f:21:5a:ad:ea:2b:44:12:2e:21:b0:7f:5a:d2:9c:4d:
4b:9f:0f:15:01:6d:4e:d0:2e:03:75:be:76:16:71:31:da:ea:
93:58:93:12:79:77:c3:4c:1e:99:26:4b:f9:f3:c3:93:c8:8b:
21:59:69:45:0d:a1:ef:e7:c6:05:fa:a3:27:7a:c2:2b:06:b3:
6e:f9:5e:aa:b1:71:b6:0a:41:92:15:57:1f:39:b6:f4:bd:24:
1b:6b:87:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:24 2025 by rpki-client