Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: iH3f7FAymqlC08dWdpseFV7QTAHmJGzbJA+qMniWAJs=
Subject key identifier: E3:1D:F6:8D:03:74:0B:4F:77:15:A6:C8:CD:B5:AB:4C:36:61:97:AD
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0195E190627D2E212C9C3B3993E747E375D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 11:01:30 +0000
Manifest this update: Sat 29 Mar 2025 11:01:30 +0000
Manifest next update: Sun 30 Mar 2025 11:01:30 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: wXFpnKeJfa1lhJRzRtXi8LfAziKrWbNOwKSEEvfK/qE=)
2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:62:7d:2e:21:2c:9c:3b:39:93:e7:47:e3:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Mar 29 11:01:30 2025 GMT
Not After : Mar 30 11:01:30 2025 GMT
Subject: CN=e31df68d03740b4f7715a6c8cdb5ab4c366197ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:05:01:30:83:eb:ae:2e:8f:ca:fd:9e:cd:
95:07:14:7c:65:75:9e:0f:ad:8e:31:ce:29:29:c7:
33:f3:18:f7:ae:83:16:44:26:a2:96:13:64:58:5c:
7d:e0:d6:08:3b:62:8f:90:cb:40:f0:48:cc:39:65:
60:36:87:9a:55:94:be:a9:06:f4:c5:59:b9:42:45:
a2:a8:c7:df:ec:25:cc:37:5b:67:e6:09:8b:52:cb:
24:e5:53:33:56:70:2d:f6:f0:ea:c2:2e:71:26:9c:
a5:5e:a1:f2:59:b6:3c:ed:d9:57:1a:88:24:fd:68:
ab:b2:c0:dc:5a:06:a6:eb:9a:cd:30:ea:05:c8:ee:
92:2b:37:f8:9e:dd:a4:4e:ea:55:60:73:3e:cb:38:
1f:c3:c8:db:3c:7b:fa:bd:ee:4d:b0:42:8f:9e:e2:
26:15:32:3d:6d:0c:65:1e:f3:cf:bb:67:5b:65:a1:
6b:e9:ee:f4:09:6e:18:fc:45:07:ae:ad:66:11:7b:
27:32:d0:ff:40:24:1c:b6:32:14:62:86:52:76:e5:
4e:a1:ed:04:14:57:71:5f:34:3e:b8:a0:49:88:b5:
05:26:f3:fd:ff:ae:c5:8d:12:9a:b2:fd:8e:69:9f:
15:b3:35:1a:2a:b3:f1:03:d3:f9:95:b9:75:0c:02:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:F6:8D:03:74:0B:4F:77:15:A6:C8:CD:B5:AB:4C:36:61:97:AD
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:e0:fa:8a:67:0e:0a:21:f3:8c:aa:ae:c8:c0:08:78:e6:
da:80:16:06:e7:8b:d9:4b:4d:14:75:b6:ba:fe:bd:fd:f4:fe:
aa:53:29:7a:c3:a0:e4:40:10:0f:a8:2d:52:ee:33:0e:5b:9c:
b0:39:6b:a9:4f:b5:aa:c0:2c:d4:2a:b6:f5:9f:a7:11:90:a5:
c8:78:36:8e:10:c8:d2:b4:1b:e3:c9:ea:47:70:b2:ee:b6:a6:
00:68:20:04:b6:b5:63:d2:d8:34:a0:b9:e2:92:90:88:2c:05:
67:65:33:23:b3:d4:39:55:b2:10:25:31:5b:98:f4:63:ad:96:
74:77:6b:5f:57:8a:63:bb:22:97:17:fb:78:55:9a:db:61:0a:
cc:ef:de:92:6b:8e:40:97:12:e4:c1:d5:aa:18:c5:14:27:a3:
dc:a5:44:61:91:11:a5:1b:3e:06:67:ca:b0:48:a5:c0:af:e0:
b5:40:2d:fd:f9:6e:eb:5f:ea:bc:94:ea:4e:c9:e1:43:04:ca:
d0:b4:bb:ed:88:52:ea:a8:12:98:cb:03:c7:0e:a9:48:4a:44:
e4:d4:bd:6b:79:ba:8d:49:8a:ae:fa:a0:fb:84:af:94:11:d8:
32:96:87:66:11:88:65:ff:b1:e9:ff:98:81:47:4f:50:0c:a5:
c1:8f:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:51:51 2025 by rpki-client