Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
File: kNsAB0OFNxZs8-WWltskCpQSvvE.mft (raw, json)
Hash identifier: GwrleI7oE0kdQYLExeM2nHILPQSqpk6AbiLpK0W57lI=
Subject key identifier: A9:C2:E4:79:F1:04:4B:88:97:37:7A:1A:51:F4:C6:87:14:C6:5A:C6
Authority key identifier: 90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1
Certificate issuer: /CN=90db0007438537166cf3e59696db240a9412bef1
Certificate serial: 019230FEE7999D9D27C38E89D49C948AE9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
Manifest number: 0A79
Signing time: Fri 27 Sep 2024 01:01:04 +0000
Manifest this update: Fri 27 Sep 2024 01:01:04 +0000
Manifest next update: Sat 28 Sep 2024 01:01:04 +0000
Files and hashes: 1: EZ-uG791xT4_kyLh71Y9NKol9es.roa (hash: gxp65J5FxS0gwZJopWnRREKK5kAEfnh3NLZ6wRpIigA=)
2: kNsAB0OFNxZs8-WWltskCpQSvvE.crl (hash: kLx73hTLURYqOWEa/WVwzjCrsl9xI7+Ma6G+AgZSkwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:30:fe:e7:99:9d:9d:27:c3:8e:89:d4:9c:94:8a:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90db0007438537166cf3e59696db240a9412bef1
Validity
Not Before: Sep 27 01:01:04 2024 GMT
Not After : Sep 28 01:01:04 2024 GMT
Subject: CN=a9c2e479f1044b8897377a1a51f4c68714c65ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:d4:f2:fd:4a:28:96:11:04:a9:b0:11:5c:
15:c7:84:fe:77:0d:47:6b:22:b1:7f:1f:bd:d8:7f:
16:0c:49:f0:d2:e8:d4:81:66:2d:6e:0c:8d:4e:95:
9d:0f:db:7c:c2:3a:d6:28:a3:c1:67:d8:a8:35:3b:
f8:a9:58:93:5b:77:1d:5e:6f:59:ce:4a:ce:e1:d3:
80:d7:f0:7a:b6:a2:76:c1:52:27:47:6e:6b:25:9e:
63:0c:03:0b:81:09:35:80:e4:e4:34:db:28:3b:09:
ce:9c:37:b4:54:9e:7b:ce:f0:05:6e:69:f8:eb:bb:
a0:3e:b1:86:fa:eb:67:22:ce:56:19:ec:ff:3f:8f:
cd:c3:3b:39:86:87:67:ab:a2:20:c3:71:57:f9:2d:
c4:81:e8:fb:5c:cb:ee:a2:3f:1d:84:cf:99:08:69:
21:13:55:77:29:25:d0:e3:a4:bf:64:85:fd:52:72:
50:b8:d9:a0:aa:25:ff:22:b3:69:59:c0:ad:16:6a:
2e:c9:ae:a8:3b:e5:ae:4d:0a:79:33:93:dc:75:e1:
2b:84:7c:0a:7a:6a:c3:7c:f7:28:77:a1:ad:68:d2:
4f:d9:d3:33:f2:84:91:bd:42:07:9e:81:9a:a6:ff:
90:5d:d3:f4:60:6b:6a:67:b2:cc:18:c4:02:b1:4b:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:E4:79:F1:04:4B:88:97:37:7A:1A:51:F4:C6:87:14:C6:5A:C6
X509v3 Authority Key Identifier:
keyid:90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3b:36:42:be:53:fa:ae:ff:9c:54:ea:27:47:02:4a:29:58:
ca:1c:14:0b:91:6c:e6:82:77:b0:5d:dc:95:4e:7b:78:f2:7a:
07:0d:f3:79:b9:80:c5:c9:02:66:ba:46:6e:ff:d3:66:df:fa:
49:fd:5a:e8:9d:bf:0e:65:b9:83:f8:77:19:33:3f:4d:62:ec:
2a:e1:f6:93:d1:7c:2e:86:65:e5:95:90:7b:9a:af:67:13:2d:
b4:cf:01:88:ed:f1:99:eb:9a:57:76:5b:eb:82:2b:c8:5f:8c:
b7:51:02:06:ea:e4:8c:3c:9f:95:68:e8:8b:a2:f6:3b:37:3b:
99:76:83:76:16:be:ec:88:88:91:01:b3:43:04:05:ad:60:9e:
1f:87:dc:70:74:41:be:13:fe:43:75:3b:1b:d9:c9:2e:3e:42:
bf:21:d0:16:57:27:7b:93:3a:99:87:82:80:d6:c4:1d:77:ad:
b5:14:6e:7c:77:35:bf:74:7d:fa:04:2a:1b:bf:69:e0:74:f4:
14:60:26:ee:90:80:e0:9f:93:7e:73:fc:bb:81:42:80:80:f8:
23:05:3b:0e:9f:b7:44:51:97:69:93:29:9d:cb:ef:f6:cd:7c:
68:43:ca:b1:7f:b5:97:50:ce:e8:21:86:76:40:5a:f7:0e:0d:
05:af:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:25:33 2025 by rpki-client