Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.mft
File: kG5BciGLSRLjmSwBFK1fOhJSB00.mft (raw, json)
Hash identifier: i+5FolyGvLobviTFw2qvz0qSBMjZaK8v2L+F8YGpp6Q=
Subject key identifier: 21:EE:6E:34:6E:82:2A:B4:A6:F8:E9:34:68:FA:7B:1C:00:A1:DD:7F
Authority key identifier: 90:6E:41:72:21:8B:49:12:E3:99:2C:01:14:AD:5F:3A:12:52:07:4D
Certificate issuer: /CN=906e4172218b4912e3992c0114ad5f3a1252074d
Certificate serial: 01938AAF3F4F8C26245B2A55AF1B3F6F1FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kG5BciGLSRLjmSwBFK1fOhJSB00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.mft
Manifest number: 1251
Signing time: Tue 03 Dec 2024 04:02:40 +0000
Manifest this update: Tue 03 Dec 2024 04:02:40 +0000
Manifest next update: Wed 04 Dec 2024 04:02:40 +0000
Files and hashes: 1: kG5BciGLSRLjmSwBFK1fOhJSB00.crl (hash: jOL9YomeXqtZhJQamcjyyOcfrSaqvnsxUf3BCQzyAcU=)
2: vzQCI-JyCEbChpvNxLZnzJF1680.roa (hash: YuBklvkjHZAU08AWO1UgzrefLH+ZUaQJBWmNtIQxUFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8a:af:3f:4f:8c:26:24:5b:2a:55:af:1b:3f:6f:1f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906e4172218b4912e3992c0114ad5f3a1252074d
Validity
Not Before: Dec 3 04:02:40 2024 GMT
Not After : Dec 4 04:02:40 2024 GMT
Subject: CN=21ee6e346e822ab4a6f8e93468fa7b1c00a1dd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:55:39:2e:d6:e2:aa:6a:f4:ab:2e:c8:a7:
19:ce:b6:08:68:56:97:f0:cc:42:a7:00:4d:48:8f:
2c:66:ef:f5:76:79:b3:ff:d0:d4:37:db:ea:88:e7:
f3:9b:23:9f:d7:76:ec:73:31:4b:fe:9b:b3:95:fe:
4c:16:1a:a3:8b:09:97:d9:09:3d:21:c6:93:19:85:
df:cd:b4:db:d7:c7:86:22:3c:ea:73:58:b2:12:f9:
de:07:a5:af:33:f0:af:c5:2b:e9:d6:10:31:76:ab:
69:96:ca:33:7d:17:d5:84:58:30:42:8b:02:82:7e:
3b:8f:f1:cb:18:82:b4:09:ec:46:a3:b6:14:31:c3:
53:c0:b4:2f:80:d4:26:15:47:41:98:56:6c:49:10:
53:79:cc:16:2b:b4:ac:92:a2:7e:e4:26:0a:ab:39:
63:1d:f4:fa:1f:9f:65:3a:73:13:28:b9:7b:2e:cd:
44:68:f3:80:e9:b6:40:f7:ef:70:ff:54:bc:ae:e3:
da:61:54:e6:52:f6:f3:23:e7:ac:e5:45:99:45:d1:
f6:1c:16:04:90:29:09:e4:b7:a3:d4:9e:be:cc:df:
2d:4c:07:a5:cd:d9:df:ae:7e:ea:b2:cf:5c:97:e4:
32:d4:56:e3:96:8a:20:03:42:68:70:da:e0:1e:93:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:6E:34:6E:82:2A:B4:A6:F8:E9:34:68:FA:7B:1C:00:A1:DD:7F
X509v3 Authority Key Identifier:
keyid:90:6E:41:72:21:8B:49:12:E3:99:2C:01:14:AD:5F:3A:12:52:07:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kG5BciGLSRLjmSwBFK1fOhJSB00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d4:3b:a8:06:9f:aa:f3:bc:ea:d4:5b:ac:ac:4c:9e:46:f8:
e6:59:50:2d:55:ba:02:01:6c:84:3e:98:6d:73:68:f2:8d:65:
48:e2:63:d8:0f:29:4a:e3:cb:a3:91:3e:78:9d:cb:dd:c8:b7:
29:f4:1d:b0:48:94:20:b9:20:df:7a:42:09:05:27:a6:c9:79:
96:b7:01:1a:18:73:e1:82:e2:73:0c:c8:93:c3:e7:7a:8b:61:
92:2b:ab:ef:63:c5:8c:f2:b0:8d:ed:ab:1e:09:13:c7:8c:6d:
da:71:c2:7e:e6:5f:5a:62:85:ef:63:5d:20:25:b9:58:3a:c0:
e0:66:58:2c:2c:02:fb:c3:17:86:72:97:1e:be:f4:a8:5d:40:
c2:e8:e0:7b:51:cb:2a:bb:02:80:d0:15:a1:32:8d:21:a7:06:
3b:11:14:c8:6c:8e:24:cc:6f:99:6f:ce:33:a2:51:f7:18:03:
51:bb:0f:28:52:c4:c8:9b:0e:10:df:1d:af:41:f8:69:9c:28:
83:c4:93:16:8a:89:72:f1:11:c9:45:54:ac:38:31:04:72:2b:
d4:5c:ac:e1:28:aa:1d:cc:17:b9:82:30:a7:27:36:1b:a8:26:
89:71:70:fb:96:48:c6:ec:a4:4f:ab:ca:77:4b:55:0a:14:e9:
de:3b:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:51 2025 by rpki-client