Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.mft
File: k8iuIQ6km06tpIsdoiICPHNNMhE.mft (raw, json)
Hash identifier: LbO90MoOJv3qp0q8vC798ghZX++wI7RL+i2wVFLjPe4=
Subject key identifier: 1C:23:50:34:B1:F3:8F:08:6B:6D:9A:FF:F3:16:95:34:21:FC:BD:84
Authority key identifier: 93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11
Certificate issuer: /CN=93c8ae210ea49b4eada48b1da222023c734d3211
Certificate serial: 01937193F5AE73F0787EC7BED63A5C4CE1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.mft
Manifest number: 137D
Signing time: Thu 28 Nov 2024 07:02:22 +0000
Manifest this update: Thu 28 Nov 2024 07:02:22 +0000
Manifest next update: Fri 29 Nov 2024 07:02:22 +0000
Files and hashes: 1: DCbKRmRVLaR0v4cPlePhnE9lVR4.roa (hash: sqXNJ4ys9BGIqxLtfhKAhTEnBWaTQv73MrJNBd6rc7o=)
2: k8iuIQ6km06tpIsdoiICPHNNMhE.crl (hash: AxMFM+bA1oMfztvM0c4SvP8hyWTtmL4vS9oHWcyFePM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:93:f5:ae:73:f0:78:7e:c7:be:d6:3a:5c:4c:e1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c8ae210ea49b4eada48b1da222023c734d3211
Validity
Not Before: Nov 28 07:02:22 2024 GMT
Not After : Nov 29 07:02:22 2024 GMT
Subject: CN=1c235034b1f38f086b6d9afff316953421fcbd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:e2:0b:fc:b8:54:7b:d5:d3:bc:d3:80:94:
fe:61:85:6f:ff:e9:d3:7f:4f:ce:ef:86:e9:de:74:
05:28:91:18:6e:49:93:2a:b0:b1:65:52:31:42:29:
d7:47:cc:c2:7e:81:fc:de:bb:e9:e6:5a:d8:f0:c0:
d1:f5:b7:7a:35:de:82:74:0d:52:8c:ae:32:47:f1:
fb:57:21:fe:88:3e:46:40:2d:55:71:81:97:85:55:
35:21:08:17:3a:fb:59:54:62:bf:c3:23:8c:7a:7b:
88:92:72:03:c6:eb:58:e5:68:ee:01:54:26:60:e6:
a7:93:ef:41:1e:02:3a:1a:66:ac:71:ba:d9:27:e9:
89:ab:e0:1a:7a:bd:a4:54:da:6c:d7:f3:79:e3:b8:
b7:23:c4:1f:f6:29:a4:11:00:2e:95:47:f1:fe:3a:
36:a2:ea:7b:53:6c:1c:c6:80:f8:dc:25:28:d6:79:
1e:da:9d:fb:6f:72:6b:0d:4e:d5:5d:00:05:17:59:
e3:f1:37:4a:99:3f:79:6a:2a:9c:88:ae:47:39:94:
a8:06:84:ce:16:eb:b6:07:7e:db:c6:c6:c7:c2:05:
2d:d9:7f:a9:a2:19:b2:23:03:1e:35:42:53:e4:ca:
9e:6e:13:24:43:9b:9e:05:bd:bf:96:1f:21:66:a7:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:50:34:B1:F3:8F:08:6B:6D:9A:FF:F3:16:95:34:21:FC:BD:84
X509v3 Authority Key Identifier:
keyid:93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7f:8f:2d:99:ec:d1:e9:df:cc:3e:8e:92:27:0c:7f:99:0c:
a6:09:48:4d:ca:b5:c8:b7:cc:fe:d4:98:46:16:c6:ea:f3:a6:
8d:cd:df:61:79:a2:46:b0:e5:8e:9b:56:21:a1:8d:a8:45:9a:
c1:24:f1:f5:e8:3e:7d:68:63:c3:c6:a4:fc:74:52:fc:fc:75:
c1:cf:13:b2:26:6b:f2:24:a1:7d:ba:5a:15:8e:a1:00:76:3d:
e8:73:47:6d:b9:e9:30:40:04:ec:9b:ae:87:a1:e4:66:3c:05:
4d:4d:ae:9e:eb:50:33:c0:f1:72:e1:91:62:9e:0f:41:0f:b3:
b7:da:e8:22:aa:8b:3a:30:e0:f9:c4:74:a6:6d:a4:a7:fe:2c:
a0:41:a0:e9:3d:3c:43:71:06:a0:24:9d:ce:e4:33:6a:94:cd:
8a:e3:29:ca:c6:7e:34:0b:40:90:fb:8b:a8:5d:eb:22:5a:c2:
f6:61:75:6f:e6:3d:4b:29:19:a8:18:bc:d9:36:c4:69:73:62:
f2:dc:a3:52:10:78:5c:26:2e:da:e4:dd:c0:3f:18:bd:10:8d:
5c:10:ac:43:27:0e:94:28:89:8d:82:66:81:43:ee:c5:9c:ba:
48:a6:05:6b:e0:3f:81:5f:dc:74:87:64:a2:ba:8b:bb:82:45:
34:d4:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:15 2025 by rpki-client