Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.mft
File: k38Sq69hOXP-swc9jOY38bAMv6k.mft (raw, json)
Hash identifier: WgzBy5ldhm0faOl8VBUV95ZhuRQnEad6KNa/MLf/Lbk=
Subject key identifier: 5B:DB:9B:78:FF:9C:25:CE:51:B2:D4:71:2B:F5:BC:4F:BF:80:EB:6F
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Certificate issuer: /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial: 0192E0840D1535F3CF4D472F1EB4930F08DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.mft
Manifest number: 133B
Signing time: Thu 31 Oct 2024 03:00:03 +0000
Manifest this update: Thu 31 Oct 2024 03:00:03 +0000
Manifest next update: Fri 01 Nov 2024 03:00:03 +0000
Files and hashes: 1: KhxHEzHaThoochQrhW_7S5zJowc.roa (hash: Fy356FrwVsBLkaM4zzsVZu/fh7Tv4g4qFoPpDFpXUoc=)
2: WI8vXMORAvZHFiTZISMcJhBZ-io.roa (hash: obY8AhHD347kG1rj0GtH4nlZKEZysY9jQFC1ssA6U4s=)
3: k38Sq69hOXP-swc9jOY38bAMv6k.crl (hash: DRKgkdNXDmgmMKlYD/dIpluknEF3NqntPl1D6Rgja+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e0:84:0d:15:35:f3:cf:4d:47:2f:1e:b4:93:0f:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Validity
Not Before: Oct 31 03:00:03 2024 GMT
Not After : Nov 1 03:00:03 2024 GMT
Subject: CN=5bdb9b78ff9c25ce51b2d4712bf5bc4fbf80eb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:51:e0:0a:56:c8:56:58:4a:9f:db:87:9e:
61:8a:43:25:8c:57:76:3b:91:10:d5:79:d2:08:b8:
79:b6:bd:73:0b:99:4e:6d:33:34:09:d5:09:be:c4:
c4:0b:10:af:8b:dd:fc:0d:97:f2:cf:96:1c:99:28:
68:49:dc:0c:30:59:fc:c5:92:4f:42:cf:69:ca:01:
04:57:c9:c3:f2:6e:81:7c:3b:df:2e:4e:41:59:8b:
9c:bc:1f:75:cb:ad:70:d5:ee:96:fa:26:c0:2b:3b:
76:b5:1e:35:1e:84:35:ca:70:b2:b3:5a:60:c5:c4:
d6:3a:db:28:3c:9f:cb:4e:fa:d1:24:a4:c1:0b:11:
04:d9:68:54:5d:0a:c6:41:0d:ea:94:08:9a:0b:83:
21:05:f8:e2:b1:99:47:68:e4:63:df:ce:c9:da:e1:
55:f5:04:6d:78:72:ff:60:d6:a3:2b:ed:08:8b:61:
6b:8d:80:90:ae:59:57:d4:34:dc:ee:de:85:bf:75:
2a:12:ba:20:99:a7:8a:1f:75:50:15:3d:a4:03:06:
ff:a1:45:3d:3e:67:98:30:61:ff:f2:82:c8:f3:ed:
7e:d5:51:f7:85:68:8f:99:d7:b9:ce:49:86:b7:e8:
65:3f:a6:b7:c8:97:04:d3:a5:64:e9:9e:09:ed:a3:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:9B:78:FF:9C:25:CE:51:B2:D4:71:2B:F5:BC:4F:BF:80:EB:6F
X509v3 Authority Key Identifier:
keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:38:bd:a2:71:c3:50:8a:c6:bb:d2:29:cb:80:5a:31:c6:01:
dc:e8:b1:af:89:89:65:29:c4:dc:2c:ab:28:56:cf:2b:31:e9:
d8:cc:db:02:c1:62:ba:51:b9:99:99:2f:47:a6:8e:f7:1b:59:
b3:ae:2e:03:7e:60:cb:f1:00:be:e0:86:32:88:84:cf:8c:bb:
fa:8f:f8:ec:b4:dd:78:77:13:48:a5:e8:aa:06:64:d8:35:31:
98:d3:79:d5:cf:94:0c:0f:96:6e:a9:fa:ac:eb:57:46:42:d3:
d4:aa:73:1d:ed:89:64:6e:d0:78:3d:71:42:53:3e:28:31:31:
74:06:0c:a1:06:c1:86:4d:83:6a:15:78:9c:6d:31:2d:98:0c:
7a:fc:3d:73:d3:63:fd:91:d5:8a:3f:2c:a9:77:10:48:02:61:
b7:6d:a2:64:a2:05:c0:b0:eb:56:42:1f:95:25:45:4b:a9:65:
bf:6c:dc:b0:d1:f3:64:98:2e:61:69:14:7c:7f:27:15:e1:bc:
df:d2:6d:18:3a:2e:cd:ca:b0:2b:e0:97:e7:a7:0a:1d:23:66:
8f:5d:1d:0e:ea:10:63:7a:72:89:41:f9:8d:9a:9b:42:0f:b9:
62:ed:65:69:92:c1:db:a1:bc:96:5b:d5:74:be:9b:08:cf:d1:
e9:dd:ed:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 11:39:22 2024 by rpki-client on console-fra.rpki-client.org