Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/KEccNqbrsc8aGFo2VUbqhIhY6sM.mft
File: KEccNqbrsc8aGFo2VUbqhIhY6sM.mft (raw, json)
Hash identifier: 4tEpynvSmXTDolye/+Y0I8czw5D0iqO4ZyNF9xP61Ns=
Subject key identifier: 70:D3:11:93:20:AA:D7:38:33:4E:CA:DC:EF:5B:0A:2D:70:1F:AF:16
Authority key identifier: 28:47:1C:36:A6:EB:B1:CF:1A:18:5A:36:55:46:EA:84:88:58:EA:C3
Certificate issuer: /CN=28471c36a6ebb1cf1a185a365546ea848858eac3
Certificate serial: 0185C383A9377C323B54E3ECE96EAEE264E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEccNqbrsc8aGFo2VUbqhIhY6sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/KEccNqbrsc8aGFo2VUbqhIhY6sM.mft
Manifest number: 042A
Signing time: Wed 18 Jan 2023 06:14:23 +0000
Manifest this update: Wed 18 Jan 2023 06:14:23 +0000
Manifest next update: Thu 19 Jan 2023 06:14:23 +0000
Files and hashes: 1: KEccNqbrsc8aGFo2VUbqhIhY6sM.crl (hash: ytN0EZm1d/T+qMgZCh/UmhV/LAfzvJWM7eHetgHWQbo=)
2: z0W6tnIb8n6xb2AZ-9_Woa4eoP0.roa (hash: Do0d/kfcG0KxRheWCFAB+cS41wNgkGUanBjmgkkJBIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:83:a9:37:7c:32:3b:54:e3:ec:e9:6e:ae:e2:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28471c36a6ebb1cf1a185a365546ea848858eac3
Validity
Not Before: Jan 18 06:14:23 2023 GMT
Not After : Jan 19 06:14:23 2023 GMT
Subject: CN=70d3119320aad738334ecadcef5b0a2d701faf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:08:27:f2:d0:aa:cf:f7:68:41:90:9e:43:
de:14:48:85:6f:59:76:f5:fd:35:73:66:e7:81:c9:
0e:ab:da:af:8b:15:58:f5:52:f0:5b:13:02:5f:f8:
1c:2d:cc:0d:48:65:4d:e6:10:82:01:25:c5:db:d6:
e5:75:98:4c:d1:94:0c:69:db:d3:cb:be:1e:d3:79:
70:55:af:92:3f:bd:d6:39:73:3d:d3:30:df:51:5d:
3f:b1:76:25:60:5e:97:f9:90:8d:42:d0:a1:d4:80:
3c:f6:a7:d7:a7:e0:f6:03:da:0d:c4:8a:83:e0:21:
f1:84:76:f9:d4:d6:f8:e4:44:9a:5e:b0:b7:c0:0a:
82:8e:10:bc:7b:f1:11:2e:35:33:b7:e9:5a:fa:40:
e0:d5:7a:f0:3b:14:bb:ca:fc:fb:1e:bc:3d:51:18:
45:02:c7:2e:db:58:38:b6:5f:05:d1:75:d0:84:e9:
2e:2b:11:a5:e8:4a:98:95:5c:0f:59:3c:c7:24:a6:
0a:78:ce:5c:94:ea:ef:14:0b:07:bd:cc:b1:0e:42:
d4:41:40:9b:72:a6:2e:5b:d3:b7:c7:47:ae:a7:e3:
09:6c:3f:36:a8:51:43:81:e7:0e:ff:2e:43:74:52:
37:cb:31:ca:c0:54:f9:21:81:33:19:6b:ad:7b:a5:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:11:93:20:AA:D7:38:33:4E:CA:DC:EF:5B:0A:2D:70:1F:AF:16
X509v3 Authority Key Identifier:
keyid:28:47:1C:36:A6:EB:B1:CF:1A:18:5A:36:55:46:EA:84:88:58:EA:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEccNqbrsc8aGFo2VUbqhIhY6sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/KEccNqbrsc8aGFo2VUbqhIhY6sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/KEccNqbrsc8aGFo2VUbqhIhY6sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:5b:e9:b2:7e:22:f3:8c:ab:e2:bb:32:82:10:a7:f7:22:
d3:1e:f4:d2:93:1b:9c:f3:3b:4f:1d:a7:37:1f:90:5f:4b:4c:
d0:41:cd:6a:3f:f8:f0:e6:8f:1f:38:47:21:fd:c1:63:76:ed:
8c:cf:a1:2b:16:be:bf:86:21:63:e5:96:9f:27:25:f2:49:1c:
2a:87:66:e4:af:46:6b:49:74:6c:07:5b:27:9d:95:53:77:b2:
29:86:da:dd:87:f6:46:a6:a0:56:24:c0:b4:35:83:44:78:21:
24:2e:09:d8:c8:bd:6f:c1:44:3f:bd:81:15:dc:7f:af:79:4d:
a0:95:45:c2:f4:df:6f:bb:c4:ab:30:9c:80:c2:f6:49:e9:30:
d6:fb:1b:0f:c7:86:e8:72:9a:d5:68:74:c7:f6:c4:7c:16:24:
4d:12:af:60:ac:c6:fb:cb:d5:74:75:22:54:a5:7c:c9:b2:76:
02:e2:c2:56:bb:6a:f7:1d:39:7e:d9:09:24:30:dc:37:ff:02:
20:a3:c7:86:d3:0f:3f:e3:c1:6f:51:f9:16:82:54:7a:c2:4b:
74:c2:47:88:72:ea:29:85:61:42:1c:07:31:b9:04:2d:7b:bb:
36:60:6c:53:8b:f0:03:8c:c0:01:43:25:89:c6:23:0a:f4:38:
78:8d:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:45:15 2025 by rpki-client