
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
File: kjGbzZsJqYSwcOLvWI_8-otzyKI.mft (raw, json)
Hash identifier: wRvSfxAVGS/YBAgNSevocTXbA4RW0XisLCuntYy6bTg=
Subject key identifier: 79:27:9D:F7:4D:5B:04:DA:CC:EF:FC:EB:0B:96:5E:7F:71:5A:CF:37
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 019547ECDD36880CA36D3D6A7F20EC0B81D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
Manifest number: 147A
Signing time: Thu 27 Feb 2025 15:00:59 +0000
Manifest this update: Thu 27 Feb 2025 15:00:59 +0000
Manifest next update: Fri 28 Feb 2025 15:00:59 +0000
Files and hashes: 1: 7bvAiXOGGN5F75C5TPaLkcrMrJ0.roa (hash: zIEK7IKs3VnTSjIwiOz0gcDm6zKT0vC9tWF2HOlgyJ4=)
2: f7LoQlg3wh_mDB9M8tJRPc9pjRg.roa (hash: TGm9AlTdN93bdUpETbwDkFaVCWLQGhWDE7lXzrUzU44=)
3: fJSSSYyH6Ee1wixn2iid6CkKbD4.roa (hash: r5RuGMIc1UBm/9bI2dDIxiQn3TUA1FzP7ZQdx2BDTw8=)
4: kjGbzZsJqYSwcOLvWI_8-otzyKI.crl (hash: Usf/JElpJp3GSaRPx/J+P5j2/zWn53LR+pBf6btH9Fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:ec:dd:36:88:0c:a3:6d:3d:6a:7f:20:ec:0b:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Feb 27 15:00:59 2025 GMT
Not After : Feb 28 15:00:59 2025 GMT
Subject: CN=79279df74d5b04dacceffceb0b965e7f715acf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:45:58:67:cf:ed:65:a3:b6:61:f7:ec:08:
2b:5e:4e:b4:1f:47:fd:37:dc:46:98:c9:d1:14:5f:
10:98:85:0f:cd:7f:0a:70:f7:b5:bd:03:2a:62:dd:
3c:6f:5a:ef:4d:d9:97:d6:f7:c9:45:9b:2d:1c:2a:
5e:ff:c4:40:32:27:15:0d:69:f8:9f:bc:6a:09:c2:
13:16:71:1e:ad:ff:46:a7:f3:7d:9f:44:91:b0:02:
db:dd:0b:57:43:fe:53:4d:54:13:e5:95:f2:40:11:
5c:62:87:b4:c3:a2:fa:e7:18:fd:df:1d:47:5c:50:
77:5b:be:6b:99:c5:00:b6:b9:ed:53:c2:08:af:5f:
48:f4:b3:3e:35:1b:c4:c2:6f:1e:eb:41:4a:d6:a7:
f2:ce:b0:75:f6:75:39:a1:cc:13:eb:8e:e5:08:46:
d2:f9:68:52:d9:fd:c2:08:58:c0:2f:12:4f:b6:41:
6c:f6:13:78:19:74:94:50:36:70:d8:de:86:a8:97:
b5:53:ff:96:3e:ee:ed:e5:81:35:3c:31:5a:f1:22:
8e:e5:cd:b3:89:f7:e3:c1:11:c8:c9:58:c3:95:95:
9c:35:24:96:68:cc:48:a2:52:11:7f:46:32:6a:86:
f1:b0:fa:ee:c4:66:04:23:a7:2e:7c:1a:1a:b5:61:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:9D:F7:4D:5B:04:DA:CC:EF:FC:EB:0B:96:5E:7F:71:5A:CF:37
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:66:b6:8b:cf:cd:b4:b4:ac:52:9c:36:28:7b:82:58:95:
76:aa:3e:a2:8b:f5:18:38:41:71:59:1a:05:04:86:a1:34:eb:
cf:3a:53:88:76:5f:1f:92:25:d0:b8:b0:b3:73:2f:be:d5:0b:
89:61:7f:d2:59:61:c6:0d:64:be:b2:0d:ae:d4:fd:23:c4:66:
b8:19:c5:03:c5:02:1a:15:da:49:2b:9f:2e:03:45:3d:45:04:
71:36:d0:f7:a4:71:15:12:6c:00:77:01:ff:33:cc:73:41:32:
d0:40:35:0f:de:c4:92:59:a4:a5:7e:ee:f3:68:55:06:ad:ce:
29:9a:78:f0:0c:3c:eb:87:a1:2e:82:2c:d7:f7:21:e8:6b:b4:
17:db:5b:28:3b:d7:c1:46:43:7b:0d:72:c0:be:66:c3:c6:f0:
75:73:c7:b1:67:1d:b2:79:21:51:43:90:61:cb:cc:2d:04:20:
61:3a:80:0c:58:a0:fb:a5:de:9d:ab:ac:40:4a:05:cd:b1:9d:
96:61:a0:11:5b:c6:35:aa:34:55:78:58:81:6f:c7:70:81:85:
22:0c:6c:00:31:f5:5e:86:ea:89:db:ec:51:82:73:38:bc:77:
26:31:bd:f7:77:c4:97:c1:61:41:14:0d:09:6b:24:1d:03:13:
2e:7e:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:27 2025 by rpki-client on console.sobornost.net