Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
File: K3xCZNrN-ss7ejru7VZZdapSQ0w.mft (raw, json)
Hash identifier: IbeEirZag4y8fykx7av7Uv8pbZYWgciPdo+6UH8jNxg=
Subject key identifier: 6C:E9:DB:51:F0:6C:DF:EC:16:BF:31:A4:99:B1:34:CE:4A:7E:FF:44
Authority key identifier: 2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
Certificate issuer: /CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Certificate serial: 01938F66045859D6F23B2DE893BB5037056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
Manifest number: 0E5B
Signing time: Wed 04 Dec 2024 02:00:47 +0000
Manifest this update: Wed 04 Dec 2024 02:00:47 +0000
Manifest next update: Thu 05 Dec 2024 02:00:47 +0000
Files and hashes: 1: 1-KvYMWJATPxtEC1Zj6bjDZBBxF4.roa (hash: iMoZy60HRf6GWQ8zG2gcgKS9jslpq/esHb9BexHjLdc=)
2: K3xCZNrN-ss7ejru7VZZdapSQ0w.crl (hash: NESnQe1nSl2eOSHOJgFqeyZbJsDaDzFLYJfKdOcSMSk=)
3: XTUgVvqZkMKvQ_lHF1o75eq2S4c.roa (hash: 4U8tjl6TmCB3cb1s4eT3hx6DVBSTvM8lTtEnDDrYASg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8f:66:04:58:59:d6:f2:3b:2d:e8:93:bb:50:37:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Validity
Not Before: Dec 4 02:00:47 2024 GMT
Not After : Dec 5 02:00:47 2024 GMT
Subject: CN=6ce9db51f06cdfec16bf31a499b134ce4a7eff44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:20:e8:09:89:ac:9d:d3:7d:b0:72:da:4b:4f:
8e:dd:1b:1f:3f:91:eb:86:20:cf:74:d7:9b:89:63:
5b:46:29:4e:05:94:9e:2d:71:2c:3e:ad:7c:ff:37:
6e:04:d2:87:d4:11:ed:86:03:c0:80:a7:3b:cf:09:
9d:a1:13:dc:fa:21:45:44:2f:3d:8a:a7:27:18:9c:
1c:96:c6:a8:f6:49:74:5e:01:81:d9:ae:9c:6b:db:
ad:f1:9a:a8:e9:ef:8a:22:e4:92:4e:d8:41:84:04:
08:a4:5d:3a:57:1b:e1:72:8b:27:ae:94:4b:ed:a7:
f9:18:4e:25:f4:c0:8e:27:02:e0:af:60:03:27:4a:
69:b7:82:d1:42:cb:86:e3:79:b4:8d:43:63:1d:71:
cd:9b:64:3e:e4:4a:9b:5d:33:26:0d:ae:37:d3:dd:
cb:8d:62:ec:16:1a:79:8c:cb:07:f3:38:e3:0f:2a:
a9:df:4a:c5:cb:ec:29:2e:2f:7a:7d:68:7b:d8:9d:
42:b6:3e:54:77:f2:09:0e:70:d8:da:bd:1b:be:9a:
39:94:71:e8:dc:2a:08:56:47:91:5f:81:e1:db:a6:
1c:42:f9:3b:08:66:6d:4b:4a:93:2c:6c:0a:94:c0:
68:63:88:9c:7e:7b:c6:cb:42:c4:53:4f:04:b2:62:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:DB:51:F0:6C:DF:EC:16:BF:31:A4:99:B1:34:CE:4A:7E:FF:44
X509v3 Authority Key Identifier:
keyid:2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cd:14:02:af:24:3d:71:99:19:ee:e5:9d:f7:15:b1:88:53:
db:69:8c:ab:91:09:15:1d:4e:b9:6b:82:97:f9:92:d9:89:96:
86:cd:ec:59:0f:c8:aa:ae:06:66:9b:8a:c1:44:01:38:60:a8:
7c:b9:a9:0f:b7:fb:19:d4:c1:e0:35:82:a4:4d:de:43:4e:3a:
e5:91:6c:29:e7:05:df:59:72:0f:60:56:40:0e:5c:88:98:b4:
d8:f2:38:87:8b:16:d5:03:ce:57:b0:3a:e2:e3:e4:cc:2f:fc:
0a:d0:2a:1f:89:42:b5:04:3b:11:9b:ca:89:c6:cc:c3:29:fb:
88:d0:c3:ce:b2:0c:ff:da:64:19:9c:79:42:32:fe:75:b6:74:
4e:aa:51:49:b8:10:0e:e2:66:c0:e3:d9:d3:0e:89:bf:56:47:
41:af:24:4d:60:4f:87:2e:4e:a7:41:20:27:30:fc:a3:11:79:
b6:d0:b8:64:ce:4f:d0:98:ad:69:6b:52:ae:ac:4f:f3:ab:3f:
bb:1f:cc:44:4a:d4:8a:b7:93:e2:47:5a:0a:d7:85:9c:1a:44:
ef:83:9b:69:60:1f:a6:3b:20:ff:6f:e5:18:01:71:9a:19:ae:
58:f9:70:d0:21:a0:af:65:4f:35:26:a8:34:9d:f2:3d:09:2d:
6a:2f:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:34:23 2025 by rpki-client