Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
File: KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft (raw, json)
Hash identifier: bfU3j4Bci4NlT0PP9hZBhLnxMjVIQB/nxwoSYbTwHCg=
Subject key identifier: 09:FF:3A:51:CA:18:7B:A5:CF:50:CF:3C:AF:16:9F:2D:2F:13:7B:93
Authority key identifier: 2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
Certificate issuer: /CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Certificate serial: 0193CE4540EBBD760AE6E9E3C660A92847CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
Manifest number: 0935
Signing time: Mon 16 Dec 2024 07:01:05 +0000
Manifest this update: Mon 16 Dec 2024 07:01:05 +0000
Manifest next update: Tue 17 Dec 2024 07:01:05 +0000
Files and hashes: 1: 2vnWNpa9n6_uQA8_P5SizsK4cwY.roa (hash: SUTV3wb047Rd9aklRlapacjw4HXLC5ea5rMvDHlobqk=)
2: KwsaUXc9Gg8J9ibmH-BXuBpDK7I.crl (hash: pkx09lwH6+3PMl8rWu01Nt1Hi1jDS6Il0ExSJ2HmWMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:45:40:eb:bd:76:0a:e6:e9:e3:c6:60:a9:28:47:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Validity
Not Before: Dec 16 07:01:05 2024 GMT
Not After : Dec 17 07:01:05 2024 GMT
Subject: CN=09ff3a51ca187ba5cf50cf3caf169f2d2f137b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:e5:43:3f:83:07:51:c1:ba:7d:6d:89:34:
d4:d8:80:48:c6:3b:1e:94:cf:f6:9b:31:9e:ba:4b:
b7:ba:d8:26:ff:25:34:69:53:f6:1c:e0:c3:d4:52:
fb:2e:76:09:9b:19:56:61:5f:fe:4b:90:34:08:8e:
ce:db:fa:8d:ce:94:d3:c3:f9:8f:1f:84:dd:80:56:
32:87:ee:b4:df:e1:cc:ca:40:28:35:05:a3:64:ee:
0e:5c:ae:9a:11:b5:c4:2f:f7:7e:ef:3a:cd:0d:1f:
bf:f0:f5:5d:da:0e:dd:66:d1:2c:66:6e:61:6f:cf:
47:76:eb:7d:4c:e3:96:58:78:8a:d3:c9:59:89:ee:
cf:94:91:b7:8c:61:86:1c:3e:67:9f:be:7c:a5:cd:
88:d2:36:c6:0e:14:ff:4d:69:fd:6f:0e:61:c8:82:
86:9e:26:36:af:54:2e:26:2c:f2:ca:88:59:33:16:
a4:af:1b:46:93:9a:9b:70:e5:82:4d:f5:61:a7:f1:
ed:4b:98:81:44:40:28:48:01:b1:75:54:57:c5:b9:
81:df:f9:84:7f:56:49:3f:e7:4f:08:58:fd:ae:2b:
cc:e0:3b:70:1d:c1:93:82:8d:1e:9d:a4:2b:97:7b:
87:b5:27:b9:17:d3:2f:50:a6:c4:fa:d6:37:20:40:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:3A:51:CA:18:7B:A5:CF:50:CF:3C:AF:16:9F:2D:2F:13:7B:93
X509v3 Authority Key Identifier:
keyid:2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:52:51:b1:32:4b:38:66:3d:7b:d2:d6:8d:ec:78:f6:c6:b6:
4e:b3:6f:49:22:51:4e:f0:60:e1:5b:55:97:b9:82:f7:a1:67:
43:22:87:35:30:37:af:08:70:a4:32:65:6c:7b:02:42:a1:96:
ca:0d:be:92:5f:0b:18:22:93:11:7f:39:f6:0a:3c:59:8b:aa:
e0:47:ad:5d:9f:61:ad:27:29:b7:0d:a5:6a:d2:3f:96:e3:ca:
04:d7:38:d3:43:8d:52:7c:fc:d5:c8:04:4d:39:b1:22:a2:20:
1d:54:b9:c9:d6:c6:06:84:95:86:4b:8d:f4:6f:e4:d0:43:72:
b0:07:4f:62:c6:b0:20:e3:69:7f:aa:4d:0f:6f:a8:59:0c:bd:
48:7c:12:69:4f:9c:fe:61:d4:82:f7:8c:ad:e4:af:e1:2b:b6:
e9:4d:0d:98:09:0d:69:47:b8:57:9f:12:15:a1:04:23:91:94:
7c:29:24:f5:dc:1b:55:38:ef:b1:be:56:fc:35:93:f7:da:e4:
cb:b4:f4:f2:9c:4e:10:17:e2:52:0c:41:25:fb:20:c8:4c:cd:
47:ea:95:fa:2b:d3:6e:f9:a3:c8:b0:38:11:92:d8:77:f1:9e:
ea:73:fb:a1:57:0c:98:68:14:c8:a6:be:66:bf:e3:37:4e:96:
67:eb:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:08 2025 by rpki-client