Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.mft
File: kjYDyYGGiRawsXAdzzcgyqJIT9w.mft (raw, json)
Hash identifier: Dv/iUiVT46tZNfduP4sVNK+O3PdgEWYudVmWmGWICPw=
Subject key identifier: 11:58:D4:15:DA:55:3E:E5:E1:82:38:B2:5A:19:2E:EE:6A:2D:55:0E
Authority key identifier: 92:36:03:C9:81:86:89:16:B0:B1:70:1D:CF:37:20:CA:A2:48:4F:DC
Certificate issuer: /CN=923603c981868916b0b1701dcf3720caa2484fdc
Certificate serial: 01948F2C2DF0132693C85E08E488AB0D7022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjYDyYGGiRawsXAdzzcgyqJIT9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.mft
Manifest number: 0F32
Signing time: Wed 22 Jan 2025 18:00:24 +0000
Manifest this update: Wed 22 Jan 2025 18:00:24 +0000
Manifest next update: Thu 23 Jan 2025 18:00:24 +0000
Files and hashes: 1: 6oQVLR_TbSIT2IcKGWMYExl-eWw.roa (hash: 8lLdtv1wEEFd8BpjTk0jEfx9zS8irHAnpJqyHaJ1f3Y=)
2: kjYDyYGGiRawsXAdzzcgyqJIT9w.crl (hash: q2qo+UcBVcajD68l29GALagqh9ZPQM0XrT9MTEadbvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:2c:2d:f0:13:26:93:c8:5e:08:e4:88:ab:0d:70:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923603c981868916b0b1701dcf3720caa2484fdc
Validity
Not Before: Jan 22 18:00:24 2025 GMT
Not After : Jan 23 18:00:24 2025 GMT
Subject: CN=1158d415da553ee5e18238b25a192eee6a2d550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:26:42:a5:61:23:48:28:80:99:83:ea:8b:
9e:8b:50:71:e6:b4:8b:96:62:60:60:1b:e3:da:0b:
96:6b:74:a8:2d:1f:d9:da:d9:c6:c2:01:36:97:5d:
b1:07:61:9d:70:c3:04:05:ab:3e:27:ca:6d:e5:56:
88:d1:42:4b:4b:63:a2:bb:db:f8:55:85:d7:bf:17:
b3:33:6c:9f:3c:c8:40:e9:06:39:4c:65:3f:dd:4e:
c2:46:ce:38:82:93:1f:95:05:01:c9:c2:72:54:f4:
07:2b:82:ce:12:05:6a:f3:bb:9b:76:6e:ae:c3:13:
30:48:a4:f4:2d:44:ba:26:a2:13:49:97:cb:d7:59:
42:fc:da:8a:4f:4d:90:47:17:56:7a:10:40:e8:6b:
9f:1a:ef:52:62:5a:9a:e8:ea:82:4e:35:78:42:af:
84:78:c9:fc:3d:c2:fd:d5:ee:ae:4a:af:35:6e:d9:
e0:16:25:e3:47:f6:75:8b:4a:e8:b3:ff:43:3d:79:
84:74:56:c2:f6:6c:7e:d2:a0:18:cd:2c:d4:a2:17:
18:1a:b2:f0:95:04:e0:f9:7c:fa:5a:8e:01:7f:62:
93:71:dc:a0:98:e3:78:a8:d8:9f:59:b5:86:81:9a:
ba:18:10:a4:f9:b0:7c:51:ad:64:c4:07:2a:21:5c:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:D4:15:DA:55:3E:E5:E1:82:38:B2:5A:19:2E:EE:6A:2D:55:0E
X509v3 Authority Key Identifier:
keyid:92:36:03:C9:81:86:89:16:B0:B1:70:1D:CF:37:20:CA:A2:48:4F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjYDyYGGiRawsXAdzzcgyqJIT9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/af2671-0518-419f-99e0-a3199ea8d13e/1/kjYDyYGGiRawsXAdzzcgyqJIT9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8f:06:7d:55:75:02:a8:4e:8b:23:77:b4:1e:ba:36:d0:9c:
0b:a8:02:f6:97:bc:ef:9a:08:b2:ed:01:35:d3:71:57:23:fe:
79:9f:da:77:60:32:20:63:c6:34:cf:66:93:a9:aa:e6:94:c5:
75:ad:01:3b:bd:ed:2a:72:97:80:93:c1:76:04:57:7c:2c:e6:
62:db:7b:95:cb:b6:92:e3:01:6a:8c:36:dc:4b:bd:f0:9f:26:
25:72:77:3a:db:9d:ae:f4:0c:ac:58:4c:42:56:e3:31:8c:fd:
67:c3:ca:ae:3a:21:ce:c9:22:f5:b0:44:8e:f3:ac:04:4c:34:
65:b0:11:b9:18:8c:72:9e:7d:5b:0d:ba:2d:cf:57:b7:b5:89:
99:6d:c8:14:c4:95:c9:00:34:11:d0:b7:67:15:83:fa:4b:90:
71:cb:7d:bd:2e:d9:c7:2e:af:f8:4a:b9:e1:20:6a:6f:f8:98:
cd:25:36:6a:69:b9:b6:af:c3:9e:6b:4c:5e:2d:ca:55:26:29:
1b:34:58:47:43:4b:bd:04:5a:fb:be:dc:37:ca:4b:95:03:db:
b0:e5:14:9a:2c:42:08:98:b0:8a:e1:91:c0:fc:49:c4:30:e7:
c5:4b:e2:d4:6f:5c:ac:40:1b:8b:a0:e1:b2:21:26:07:13:6a:
d6:aa:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:18 2025 by rpki-client on console.sobornost.net