Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: zXXkwLhxKjKK9s0woHu7IwOPCcKkB3ow2HiRUOVfPfA=
Subject key identifier: 71:9F:05:6A:5E:E4:C7:6F:EB:B4:70:4C:D5:36:C3:12:AA:0B:54:7F
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 0194BD17AB0533BD147F478C9AA4411DE08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 1392
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: G+KoGf1Fj/xUxAuVuW2bZlB1k0L+thJEVY2MeHY12Uc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:05:33:bd:14:7f:47:8c:9a:a4:41:1d:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=719f056a5ee4c76febb4704cd536c312aa0b547f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:82:6f:d1:dc:58:02:d5:a1:ae:ad:4b:f2:
07:4e:4f:2b:fc:53:dc:ca:7e:48:4a:ea:c9:9f:be:
9d:70:ca:ba:2d:3b:f7:32:b5:ef:3e:43:35:0e:01:
05:23:b9:bb:12:0b:34:82:a6:28:36:5c:b0:b0:66:
17:c6:9f:af:ee:06:96:29:c0:46:91:2f:68:15:1c:
a0:4e:f4:61:9c:04:20:c0:f3:2c:d7:43:bf:22:e8:
02:0f:4d:23:be:d8:4c:f9:91:c1:fa:0e:84:0c:04:
4d:ba:c3:84:7c:24:36:c6:1b:77:f7:04:5b:ba:d1:
67:b8:79:dd:3b:fa:3a:f3:19:21:7c:b3:d8:27:24:
02:fd:88:15:60:5d:9e:ca:72:3e:d4:e3:ef:c5:e0:
df:88:8a:0d:dc:3f:46:f7:d0:f7:0e:38:5d:a3:8f:
ac:25:14:6e:24:c2:c8:1c:c7:b1:cd:e0:fa:14:15:
c8:97:dc:41:e2:96:ef:2a:44:ab:31:70:74:48:28:
b5:76:50:24:e8:31:df:c2:47:16:15:c6:39:3a:bf:
35:f3:9b:9c:4c:c8:61:09:ad:3d:9a:39:cc:92:57:
da:d6:b7:cd:41:5b:3d:41:47:48:22:62:65:de:e6:
52:a2:be:25:8f:bf:eb:54:28:bb:fe:b6:90:24:e4:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:05:6A:5E:E4:C7:6F:EB:B4:70:4C:D5:36:C3:12:AA:0B:54:7F
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0b:a2:d3:89:2f:dc:d9:ae:ea:73:32:8a:f7:3e:02:3c:2b:
9b:af:3a:d6:a4:aa:f7:0b:be:ed:2a:a9:35:7d:84:18:a0:2f:
30:85:21:8f:44:df:f7:61:8f:d1:1a:76:51:48:cd:4f:df:ea:
92:0a:c1:db:35:13:ab:77:48:29:5f:cf:c3:77:b7:63:b1:ca:
b3:e0:08:91:64:bc:ff:67:8a:bb:e2:f5:01:80:a7:c2:64:bd:
55:5c:fa:57:92:f2:c4:28:c4:ed:fb:59:bc:e8:b2:f1:37:39:
6f:2c:0a:bf:85:81:0b:51:5b:ab:d2:84:de:8e:be:b8:ad:dc:
fc:53:5f:62:43:eb:15:4b:6f:ec:d8:e2:6a:9a:cc:a6:e0:da:
01:fd:a3:44:94:f8:cb:1c:78:35:14:95:fa:a0:a6:c7:0d:38:
4b:57:c5:ad:b6:fd:f0:63:5b:53:4c:a1:42:81:04:19:92:93:
ab:15:bc:46:fb:a5:e1:6e:ce:b6:e5:95:1d:54:04:c4:fc:1e:
14:a9:92:8c:c8:a0:16:32:8c:ad:0b:0a:1f:ed:81:4c:9a:b9:
4e:c5:7c:6a:74:df:69:05:af:0e:75:30:8e:b8:6d:6e:09:76:
bc:52:16:1e:8f:90:45:b9:0d:ba:bd:ef:2e:9e:f6:c1:d7:e5:
05:98:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:46 2025 by rpki-client