Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: ifVrfV19ECHOPXpq0Vm2ngpj36nXYjt6kgtpAraDP14=
Subject key identifier: E1:9D:18:A7:FE:DE:EE:1A:21:62:C1:10:73:B4:08:A3:8A:BD:47:BF
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01962F3DBCF58EC2AADCC24C2355C7B131AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 13:01:37 +0000
Manifest this update: Sun 13 Apr 2025 13:01:37 +0000
Manifest next update: Mon 14 Apr 2025 13:01:37 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: xNSxr5TWBy6PRWqlkx9mwRIVF9XtE/cfC2vJz5n5LJE=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:bc:f5:8e:c2:aa:dc:c2:4c:23:55:c7:b1:31:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Apr 13 13:01:37 2025 GMT
Not After : Apr 14 13:01:37 2025 GMT
Subject: CN=e19d18a7fedeee1a2162c11073b408a38abd47bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:04:24:61:f9:26:27:ff:18:5d:ce:e2:db:
91:4c:2a:2f:b1:8c:67:4f:bf:28:8d:d5:4c:4d:ba:
84:97:19:dc:01:e4:8c:52:f2:f3:34:7b:16:a0:90:
5d:61:13:b8:87:96:49:e5:76:77:c8:3a:e2:b8:ed:
2d:ea:46:67:48:d8:4c:0e:67:d5:3a:2f:37:c0:94:
08:8f:1e:4f:61:74:ff:bf:0f:7e:2c:8f:1a:c6:81:
ff:26:48:e7:e6:ff:03:3a:fa:12:28:86:9f:40:6b:
58:ce:3a:a3:b2:10:00:e5:bc:b7:30:7e:44:23:c2:
f4:3a:99:bd:e2:f9:5f:c0:20:e3:e9:49:88:b9:37:
46:65:c7:d1:a3:76:1e:1e:30:91:df:a9:0e:53:3a:
e8:c3:81:46:61:f6:7e:17:6b:cf:34:ef:a9:2e:9a:
2e:ba:3d:b5:da:20:46:e6:54:98:7a:50:30:73:7f:
c7:30:46:e6:0a:4b:08:ce:cc:94:15:95:c2:9b:d6:
52:1f:79:81:2e:d6:31:7a:d6:0a:8b:a7:27:1d:6e:
ad:98:1f:9d:90:ac:9c:2c:65:6e:d3:b9:1b:55:46:
7f:b1:75:ea:68:cd:52:7a:8f:20:f8:8b:9b:2d:57:
78:e6:70:13:69:b6:bb:a7:22:c8:ab:c6:24:b3:4b:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:18:A7:FE:DE:EE:1A:21:62:C1:10:73:B4:08:A3:8A:BD:47:BF
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:71:cc:56:26:94:e3:b0:46:3a:a4:cf:28:3e:bc:35:e8:d2:
1a:77:b5:63:0c:33:1a:0c:eb:6b:0f:7c:d2:44:de:d7:af:82:
68:52:f0:20:b8:03:ac:ad:65:da:67:81:c0:14:a6:f7:32:1d:
cc:bc:a5:8c:a6:5e:98:19:6b:61:d0:c3:55:d2:41:03:cf:59:
05:34:76:6d:5b:de:ec:03:5b:09:8f:16:25:a8:c7:90:d7:8a:
e4:49:a0:e6:fd:fa:8b:3f:f4:85:70:10:2f:50:67:33:1a:2f:
fa:86:56:24:80:a6:bb:d9:72:d8:9d:83:d6:d0:dc:29:ec:53:
98:a1:6f:d8:49:22:fe:6f:9a:0c:e0:57:bf:67:1e:f0:3d:f5:
f0:1e:45:47:5f:3a:a6:7a:f3:ec:53:e5:31:87:2c:91:3f:ba:
90:9b:4a:4c:da:48:56:b5:7b:fb:7e:63:89:a9:c6:05:f0:2c:
8d:1f:bb:86:be:bc:ce:10:11:b1:0f:75:8c:3b:38:70:4d:bb:
08:bb:3c:9c:f6:c2:86:0c:41:96:da:e2:b8:d9:e1:f8:70:10:
1e:d6:1c:62:03:ff:55:30:a3:26:3c:00:cc:9e:71:63:6a:7a:
e7:09:9d:86:8e:fc:94:7a:e6:15:ea:d6:50:6a:e6:d5:29:45:
a5:25:7f:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbz1jsKq3MJMI1XHsTGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi
MDZmMjEwHhcNMjUwNDEzMTMwMTM3WhcNMjUwNDE0MTMwMTM3WjAzMTEwLwYDVQQD
EyhlMTlkMThhN2ZlZGVlZTFhMjE2MmMxMTA3M2I0MDhhMzhhYmQ0N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEEJGH5Jif/GF3O4tuRTCovsYxn
T78ojdVMTbqElxncAeSMUvLzNHsWoJBdYRO4h5ZJ5XZ3yDriuO0t6kZnSNhMDmfV
Oi83wJQIjx5PYXT/vw9+LI8axoH/Jkjn5v8DOvoSKIafQGtYzjqjshAA5by3MH5E
I8L0Opm94vlfwCDj6UmIuTdGZcfRo3YeHjCR36kOUzrow4FGYfZ+F2vPNO+pLpou
uj212iBG5lSYelAwc3/HMEbmCksIzsyUFZXCm9ZSH3mBLtYxetYKi6cnHW6tmB+d
kKycLGVu07kbVUZ/sXXqaM1Seo8g+IubLVd45nATaba7pyLIq8Yks0uPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGdGKf+3u4aIWLBEHO0CKOKvUe/MB8GA1UdIwQY
MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt
ZjJjMGRhNjFhYzEzLzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz
LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHHMViaU
47BGOqTPKD68NejSGne1YwwzGgzraw980kTe16+CaFLwILgDrK1l2meBwBSm9zId
zLyljKZemBlrYdDDVdJBA89ZBTR2bVve7ANbCY8WJajHkNeK5Emg5v36iz/0hXAQ
L1BnMxov+oZWJICmu9ly2J2D1tDcKexTmKFv2Eki/m+aDOBXv2ce8D318B5FR186
pnrz7FPlMYcskT+6kJtKTNpIVrV7+35jianGBfAsjR+7hr68zhARsQ91jDs4cE27
CLs8nPbChgxBltriuNnh+HAQHtYcYgP/VTCjJjwAzJ5xY2p65wmdho78lHrmFerW
UGrm1SlFpSV/+A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:24 2025 by rpki-client on console.sobornost.net