Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json)
Hash identifier: 3Fi3Nq8tKONqlNLbBr5l+mG7ikIgk8ZOaLsPouiLhNU=
Subject key identifier: 3E:9C:14:F3:01:82:D1:FF:15:86:B9:26:F4:68:9C:C0:41:6A:D5:DE
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 0194BC730D709656D9044B90C0F0B75CF528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=)
2: F9Dj4BH3DTiBJqZUn9Gq6zuqgzw.roa (hash: PvC6qEA55o/ujVGgT7SwQI1kg6RiKLhNPwSFFwPuR5o=)
3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=)
4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: 8npnLt5ZlCmIN8amZp1l5rNgA/Bazy1Gnq86MnSbZdc=)
5: LzFoDYPr7_0gEjtlfJ6xXw6t_lo.roa (hash: rXfhzDDWrE3BbdIp2NtDgdm3XDSADxRFIs8wy+p88S0=)
6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=)
7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=)
8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=)
9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=)
10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:70:96:56:d9:04:4b:90:c0:f0:b7:5c:f5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=3e9c14f30182d1ff1586b926f4689cc0416ad5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:4a:c4:98:b7:63:68:a6:bc:fe:5e:92:a2:
6b:85:ff:9a:2f:a8:92:7b:ba:a6:8c:f0:d6:22:f7:
03:21:b9:b9:23:d8:ec:72:59:dc:93:5e:31:3b:46:
69:0b:e3:72:ce:37:3b:5c:da:ea:57:81:96:2a:0f:
54:dc:b5:f8:68:9f:80:da:b0:cb:24:a4:ad:1e:70:
ea:2d:de:67:b7:33:20:08:7f:15:d0:8a:3e:44:ae:
d9:11:72:95:88:e1:ab:3a:38:e1:23:97:23:22:1b:
70:dd:22:12:7f:3e:45:51:15:bd:71:e1:0a:29:da:
af:fc:13:40:44:7f:a7:5e:20:d4:6e:87:7c:57:bd:
9c:72:f8:82:35:8b:df:df:08:42:10:28:2a:26:c0:
c5:4e:42:41:a5:23:1c:41:56:09:c5:2c:62:fe:bd:
40:17:b2:9e:34:67:b2:1c:13:ba:fd:f3:a4:46:0d:
65:30:57:a5:a4:e8:c9:e9:75:62:73:80:27:f0:ce:
45:26:80:e4:5a:25:76:5b:e4:23:ba:56:e2:85:96:
74:e1:37:0d:c0:ed:d8:2d:97:73:13:c5:a0:3d:5b:
e6:43:17:7c:15:c4:ce:c7:7b:ab:93:7b:e5:8e:a9:
66:7d:f0:ad:e2:65:cb:d4:7f:fa:a3:e7:35:fb:38:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9C:14:F3:01:82:D1:FF:15:86:B9:26:F4:68:9C:C0:41:6A:D5:DE
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d4:e1:77:4f:28:53:af:3e:78:7c:6c:a7:e4:6b:2b:96:ab:
f0:d9:a3:17:5f:02:90:ca:5f:f4:08:ce:89:67:e3:a3:b7:c7:
7d:cd:b6:00:92:a5:f2:31:f4:05:39:43:37:ce:99:42:10:c8:
60:e1:72:b9:61:20:3b:7f:b5:d9:88:15:91:60:3a:4a:d1:c3:
a0:54:74:d1:33:bb:19:99:2d:40:06:f4:96:27:23:89:62:cc:
db:62:35:8b:70:db:3e:65:34:49:a9:fd:39:21:92:1f:d9:dc:
54:b4:2b:b0:63:36:49:cf:d9:b9:c8:93:f5:0e:0a:45:f6:76:
c5:9a:3a:af:72:a4:c7:e8:30:c8:41:2a:4e:b3:66:e2:72:91:
0e:c0:1d:54:a6:d4:79:f1:59:8a:15:b8:dc:3d:68:bf:2b:ed:
71:23:44:b6:b1:f5:d6:e6:5e:6d:e0:6b:2b:5a:3f:34:1d:38:
f4:a0:c7:dc:b6:ce:d9:4f:9f:e7:dc:23:6b:ff:ee:b1:50:ab:
f1:ff:16:c8:36:c2:01:88:55:a8:e6:8b:67:f6:52:4b:76:a8:
37:27:00:39:ae:5e:69:d5:40:5b:39:40:b6:de:2d:43:7d:6e:
31:f1:62:72:93:af:e5:66:f2:5e:f6:c6:de:d4:93:70:65:bf:
dc:90:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:07 2025 by rpki-client