Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft
File: kZ7tbww3AjTJJisfe0E4pgcXv7E.mft (raw, json)
Hash identifier: 9BwKjdrNqdApicjEMmjj7CmuVqLV6/JcGbi8O9ZwWgs=
Subject key identifier: F3:D8:09:25:87:DA:7D:0C:11:78:35:4E:8F:54:6E:35:72:AE:B4:B7
Authority key identifier: 91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
Certificate issuer: /CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Certificate serial: 0193D7ED6B58D4A9A87B7A7950DF432576BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft
Manifest number: 13B3
Signing time: Wed 18 Dec 2024 04:01:21 +0000
Manifest this update: Wed 18 Dec 2024 04:01:21 +0000
Manifest next update: Thu 19 Dec 2024 04:01:21 +0000
Files and hashes: 1: cARcPGxCtlnc27yEHUmCYA9_tQ0.roa (hash: eK/oOswjetvbSv9fzqVCqZZS9qTtr+9TAXwhha87rkQ=)
2: kZ7tbww3AjTJJisfe0E4pgcXv7E.crl (hash: qVjRSI/u4HHoO1A7b1iwo4M/zQmt+dfJMTcLj+Tdpg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d7:ed:6b:58:d4:a9:a8:7b:7a:79:50:df:43:25:76:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Validity
Not Before: Dec 18 04:01:21 2024 GMT
Not After : Dec 19 04:01:21 2024 GMT
Subject: CN=f3d8092587da7d0c1178354e8f546e3572aeb4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:9b:19:4b:a3:91:38:b5:83:db:36:75:d8:
3e:cd:e2:be:72:87:ef:45:df:6b:85:2b:a4:5c:a5:
b1:47:39:7f:ec:4a:0c:ec:70:52:da:e6:af:9c:f6:
6d:99:c4:b8:3a:be:5d:67:fb:36:9b:2e:40:23:42:
bb:04:a1:d5:d7:db:ab:2f:35:cd:fb:fb:92:12:36:
64:85:39:8e:d8:f8:cd:b4:41:29:32:aa:52:cf:2c:
74:d3:e7:f1:81:1d:0e:c6:8a:4c:27:15:9d:bb:bd:
0f:3a:01:7f:25:06:f3:fb:5c:fe:05:c3:e0:70:ae:
d9:7a:85:ec:60:93:98:f0:07:28:c4:07:dd:6a:b1:
38:43:07:bb:f5:a7:ef:70:40:36:89:b5:ff:18:4f:
ed:01:71:c2:90:f4:5b:a5:40:7c:06:92:e7:43:b3:
76:6e:df:10:56:55:3e:2f:89:3c:ed:e4:24:b7:55:
5b:93:e2:03:05:bd:ad:b2:1f:e8:6f:83:48:5c:43:
90:9a:f1:b7:e6:cd:a3:c2:aa:cc:83:e7:c6:68:59:
42:8e:bc:59:f9:fc:72:f9:cb:6c:f8:da:ba:8e:48:
cc:e3:e3:b6:a1:da:14:aa:b3:b4:8e:7b:ce:10:da:
4d:ee:4a:23:aa:d5:3f:1b:ab:af:c8:56:d0:60:f7:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:09:25:87:DA:7D:0C:11:78:35:4E:8F:54:6E:35:72:AE:B4:B7
X509v3 Authority Key Identifier:
keyid:91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:3d:bb:60:8c:c6:69:74:0f:6d:98:54:2b:9e:ab:b6:45:
52:b6:22:03:2f:7a:0b:2d:b1:74:b5:b5:28:0d:f6:8b:79:98:
11:dd:62:14:f5:11:c9:2e:c8:91:ba:a6:f9:b3:8f:6d:d6:11:
1d:2c:71:1a:cc:34:9e:50:35:a0:5c:6a:44:ee:0d:f7:91:4c:
aa:56:86:1a:dd:1c:79:2e:a1:b7:72:b2:b5:b1:39:ee:5c:7b:
8a:e0:26:88:b6:49:88:61:97:18:82:80:ae:4f:1b:55:63:a6:
74:07:ef:1b:12:07:b2:af:fd:89:dc:9d:49:9f:82:28:ea:28:
70:a1:08:00:2b:ad:55:8f:0f:d5:54:87:e0:fe:f4:1c:f4:f5:
21:3b:42:e2:69:92:bf:d6:0c:eb:cc:4f:fb:b0:77:80:71:f6:
bd:88:94:ef:79:44:bf:1a:e9:ab:fc:2b:3a:f6:4d:1c:be:06:
5d:f9:20:5b:a3:12:fd:90:33:d1:88:fb:d8:47:cb:1d:64:1c:
75:b6:6d:7e:dc:c9:d4:b5:b5:1e:3e:56:7e:72:35:d9:8b:b1:
54:aa:93:c4:95:89:d2:b4:f6:29:99:d2:6a:7c:6a:6c:9e:92:
99:b6:fa:f3:22:e8:75:97:18:53:b0:b7:4d:1d:66:a0:b1:84:
15:90:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:27:25 2025 by rpki-client