Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: cLx3aVnRmfETJg+MWxCLRCdvuTv3hzCq2ogoG5DR1d4=
Subject key identifier: 6A:91:25:B2:C4:ED:20:56:02:27:E3:D0:89:93:46:A5:AE:B7:B8:1F
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 0195E122634772213D299CCD88222EF75A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 03B6
Signing time: Sat 29 Mar 2025 09:01:22 +0000
Manifest this update: Sat 29 Mar 2025 09:01:22 +0000
Manifest next update: Sun 30 Mar 2025 09:01:22 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: yvQBdb0aKmHkj+/xG+qKWjUOvL7ohhn/M+qpVvtG1PU=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:63:47:72:21:3d:29:9c:cd:88:22:2e:f7:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Mar 29 09:01:22 2025 GMT
Not After : Mar 30 09:01:22 2025 GMT
Subject: CN=6a9125b2c4ed20560227e3d0899346a5aeb7b81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:2f:c2:f7:1a:e2:04:18:56:eb:02:34:66:
8b:b4:28:be:d5:60:d3:bc:c8:e1:b6:a4:bd:87:61:
b5:04:a0:09:5c:83:f6:83:04:f8:5e:e9:82:32:2f:
73:c6:f7:a8:ed:f9:8e:d6:80:1d:88:13:39:70:e7:
db:61:45:3e:c0:88:ce:fd:b2:d9:98:2f:09:1d:1c:
bc:da:08:a2:25:3d:5a:88:41:a4:63:b2:f2:56:7f:
51:74:31:1b:f4:fd:da:f3:c3:36:80:8f:bd:38:69:
5a:63:03:8c:3e:c5:2a:57:36:bc:0b:2b:c8:5a:e0:
23:12:61:a3:af:66:d7:3e:c9:d8:47:43:bb:6d:00:
1c:e3:17:ed:28:8f:ab:1e:3e:ae:22:5e:02:49:7e:
26:3a:ef:2b:c4:70:46:a2:3a:66:e5:86:64:59:fd:
08:f3:ce:b4:c7:09:2c:66:7c:43:8a:30:eb:27:31:
8c:ff:38:da:54:50:b5:e2:eb:0f:a2:eb:8f:3f:ff:
59:07:93:4d:3d:f8:50:f8:6d:27:62:81:5a:66:32:
c0:e3:49:fc:ba:ff:db:a4:a7:d1:94:93:a8:88:f8:
33:15:06:81:fa:93:1e:f2:d4:f3:17:3a:39:26:82:
d6:ed:42:07:92:ef:c9:38:50:c6:26:d1:9d:b7:04:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:91:25:B2:C4:ED:20:56:02:27:E3:D0:89:93:46:A5:AE:B7:B8:1F
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:d0:50:c6:fc:83:85:82:b5:25:84:c9:6c:ba:7f:25:1b:
10:f4:3e:c5:58:d3:5c:c2:4a:f8:b2:cd:2b:ae:55:71:8f:e2:
85:6e:f8:d6:93:ad:6d:b5:03:7a:4a:c9:f6:89:98:da:b9:68:
35:0d:12:84:4c:49:43:9f:ed:5b:e5:e6:86:a8:44:0a:e9:50:
bd:2c:5c:7c:f9:0c:3c:c0:36:dd:32:38:78:01:c2:ee:10:96:
29:c0:b8:9b:2d:ac:62:50:1d:72:ad:f4:6e:98:bd:14:9f:d0:
8c:5e:dd:dd:ba:09:f2:0a:4b:98:b5:7a:5d:47:b3:29:b2:f2:
e7:4f:4e:d8:a9:ee:f8:e0:ee:2a:cf:dd:b0:16:c4:ae:15:b3:
0f:4f:1a:f0:16:cd:31:51:a2:ae:5c:f9:32:7b:a3:3d:d6:e8:
d6:0b:ac:2d:28:3d:69:c8:32:39:02:bc:13:d9:9b:b1:da:47:
47:b5:be:12:9c:99:6b:46:91:ae:66:fc:3f:55:70:e4:ac:e3:
30:ed:31:cc:98:e6:bf:c4:6b:03:19:7c:b2:04:db:4a:db:f7:
7b:e5:70:4b:2a:8c:d5:66:63:ee:ca:33:4a:ec:5f:dc:c5:a9:
63:53:d7:3f:16:52:39:fa:47:aa:ef:58:8e:7e:54:38:58:14:
e8:53:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:13 2025 by rpki-client