Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/kZr_HPc7WDUGorrYvHpj9cLylls.mft
File: kZr_HPc7WDUGorrYvHpj9cLylls.mft (raw, json)
Hash identifier: 9NrsIu3hMa7RpNT3t8qKj3p4B0bT65Hu993UEqhWh30=
Subject key identifier: 7B:B6:04:30:2D:F3:25:D3:A9:A8:AD:6C:8A:4A:FC:50:6F:44:7D:23
Authority key identifier: 91:9A:FF:1C:F7:3B:58:35:06:A2:BA:D8:BC:7A:63:F5:C2:F2:96:5B
Certificate issuer: /CN=919aff1cf73b583506a2bad8bc7a63f5c2f2965b
Certificate serial: 0184E70CF03E46F472354DA61A4E93466473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZr_HPc7WDUGorrYvHpj9cLylls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/kZr_HPc7WDUGorrYvHpj9cLylls.mft
Manifest number: 05D3
Signing time: Tue 06 Dec 2022 10:48:15 +0000
Manifest this update: Tue 06 Dec 2022 10:48:15 +0000
Manifest next update: Wed 07 Dec 2022 10:48:15 +0000
Files and hashes: 1: 1-PBxkil4THzy0545DPbkydFXH94.roa (hash: KuxoPulA+Qm/8mkFQcKpCN9vbPxtNjC0ItbsBLVGlBM=)
2: kZr_HPc7WDUGorrYvHpj9cLylls.crl (hash: y90OF6p6aZeu/hA5cLZXNy9Byo3atvBHLxi9xaHoVg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:0c:f0:3e:46:f4:72:35:4d:a6:1a:4e:93:46:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919aff1cf73b583506a2bad8bc7a63f5c2f2965b
Validity
Not Before: Dec 6 10:48:15 2022 GMT
Not After : Dec 7 10:48:15 2022 GMT
Subject: CN=7bb604302df325d3a9a8ad6c8a4afc506f447d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:14:8a:48:34:f9:6c:17:3e:c3:ab:37:d4:
fd:3e:a1:98:c5:86:3e:86:46:6c:ae:f0:5f:52:47:
b0:1d:41:86:c0:75:bb:65:a3:ea:52:74:a9:c0:a3:
88:fe:36:a6:dc:31:c9:ef:fb:e9:4b:17:33:c5:b5:
4d:3e:fa:24:36:43:61:b0:ca:17:ad:0f:fe:29:bd:
36:6e:8a:84:6e:14:32:3e:46:ef:50:9b:e7:59:99:
0f:54:68:93:35:0f:22:43:67:1e:6e:b3:a0:08:71:
f6:08:6c:63:9b:c3:fa:e2:7d:77:fc:8f:29:d1:1d:
8d:f8:fd:f3:4f:8c:34:69:72:c0:4b:2b:7d:74:2d:
98:ed:3f:ce:66:dd:bb:60:20:7d:f3:12:ef:fc:dd:
ff:33:63:9c:7c:b3:5c:4a:50:b9:ed:d3:01:70:11:
a0:cb:ab:95:79:30:ba:7a:be:a4:32:84:f4:72:17:
70:cd:37:1a:f9:fb:e5:de:80:eb:ea:e3:27:2d:03:
8c:cc:6b:d7:5f:64:a5:af:82:1f:03:59:8f:a3:10:
84:7c:bd:3c:9c:9b:11:d3:79:4e:66:47:e4:52:35:
a6:65:42:ff:61:60:2c:c5:9c:15:c3:32:89:9c:a1:
53:5a:4f:bb:ca:25:fd:c6:60:55:ad:04:55:df:cb:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:04:30:2D:F3:25:D3:A9:A8:AD:6C:8A:4A:FC:50:6F:44:7D:23
X509v3 Authority Key Identifier:
keyid:91:9A:FF:1C:F7:3B:58:35:06:A2:BA:D8:BC:7A:63:F5:C2:F2:96:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZr_HPc7WDUGorrYvHpj9cLylls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/kZr_HPc7WDUGorrYvHpj9cLylls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/kZr_HPc7WDUGorrYvHpj9cLylls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6f:7c:e8:40:06:9f:10:7b:bb:7c:82:2d:bf:b8:09:eb:17:
5c:84:53:53:21:b5:36:70:7e:53:a4:ec:96:9b:37:6f:c1:3d:
7d:e4:1b:29:24:4f:0a:9a:1f:04:90:8a:60:f3:00:8f:94:d8:
39:ad:0d:69:d7:d6:d9:94:de:d6:da:76:1e:5e:a2:c7:92:b7:
1c:af:c4:9f:69:66:ef:f4:2c:96:8f:42:68:cb:c3:24:fb:e6:
57:d7:c4:52:cd:66:36:6d:dd:7f:d8:46:43:f1:6b:e8:21:fc:
42:a6:d3:b5:d8:80:de:a7:61:24:7e:d1:69:2f:fe:02:b3:4f:
8a:2a:e3:d0:70:fe:35:8c:20:84:f3:50:fd:96:0f:a7:cd:21:
7e:e0:dd:ec:14:f3:2e:30:e3:6a:d5:02:d0:05:11:1d:91:d2:
04:49:7b:c7:f1:2c:3b:e5:67:e1:15:f2:74:f7:90:2e:67:64:
64:ef:cc:9d:88:da:ce:c7:f1:7a:e1:28:3a:d5:bb:7b:9b:3c:
06:6a:f2:fd:b3:d5:dd:a1:f2:ca:4d:9e:f0:d2:89:93:d7:de:
69:fe:fa:50:7e:d0:0e:9f:de:0c:a1:87:4d:ed:00:e0:1e:d9:
d7:a7:b1:8e:54:89:22:11:d0:1d:8f:83:43:5c:c2:08:78:66:
53:b3:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:20 2025 by rpki-client