Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: sEEx1JSzodQKWokXhX4QGRcAszQ3oGaUlci0iHAEcSs=
Subject key identifier: 9E:DB:A2:DB:38:69:AC:C7:8B:42:A4:6A:44:F1:53:E8:F5:BA:74:8E
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 0194BD852F3186D5D66CC46FC0C6E65065D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0CBE
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: 2drn2HzHsD3py/Ss9LYp7g0E/EnMn7JSLGrZO7gxUuw=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2f:31:86:d5:d6:6c:c4:6f:c0:c6:e6:50:65:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=9edba2db3869acc78b42a46a44f153e8f5ba748e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:be:96:6c:f0:45:d3:14:37:61:65:31:42:
7f:bc:26:f6:38:e3:78:30:c9:fc:95:7c:3c:40:f3:
ce:22:8f:fe:71:3f:2e:b6:3f:13:79:6f:ce:9e:37:
81:c0:3b:15:ed:39:16:37:3a:b0:73:0e:9b:47:04:
bd:a7:53:f3:4f:48:c2:ba:8f:79:01:ee:6d:7f:43:
73:ad:99:f7:65:03:07:26:3f:c6:76:77:fd:79:12:
6a:46:47:31:59:80:bb:33:83:b2:60:68:7f:fb:cd:
29:d5:10:d3:e3:f5:80:19:aa:2b:33:b1:32:ac:04:
e3:0d:84:3a:e3:8f:fd:97:2b:42:84:36:62:22:2a:
c1:52:bd:c0:39:c0:46:3f:8d:9c:04:ca:e0:e6:ba:
5a:75:18:ed:d0:b1:a9:0d:71:5a:34:f2:0b:7e:5f:
09:92:29:fc:e6:50:79:2e:75:5a:eb:4a:4b:e1:ac:
39:fc:8c:35:7c:ff:63:5d:04:3d:eb:50:f6:44:1b:
64:33:94:3b:63:ae:9e:91:f8:23:22:eb:18:ee:a8:
14:b7:27:0f:48:0d:74:b1:17:43:e6:ea:0d:d9:70:
9d:2a:70:fa:17:19:77:ae:e3:36:aa:a7:6b:18:69:
53:e8:a4:6d:a9:e6:a0:cb:11:79:32:f0:50:f6:ab:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DB:A2:DB:38:69:AC:C7:8B:42:A4:6A:44:F1:53:E8:F5:BA:74:8E
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b0:d6:16:73:0f:d2:7f:c4:64:8e:10:ec:a6:ac:bf:4f:79:
5d:c9:b9:9e:1d:e7:7d:59:ff:0f:8d:36:ea:57:01:c4:a5:b9:
2d:8b:ac:2e:20:98:45:86:43:bd:21:0f:8e:aa:e0:15:a1:37:
ac:ab:aa:37:20:42:84:7b:90:26:78:ed:e3:29:6f:eb:9f:6b:
ff:cf:b3:91:e5:3c:4e:73:dc:13:27:65:98:21:b2:b3:7a:f7:
10:53:df:1b:02:b1:bc:98:84:7f:3c:76:36:93:ec:63:7d:44:
e9:85:64:9e:61:4e:d0:f5:5d:14:46:21:1e:8e:6e:f2:97:2f:
1d:01:72:5e:5d:1f:59:60:82:0f:fe:5d:c1:25:cc:b1:7d:4b:
22:a5:e1:3b:99:d0:03:52:23:54:89:b7:a1:fa:84:64:ad:7d:
66:c8:b6:8e:aa:0a:ed:34:42:54:64:9d:d1:30:2b:f3:02:e0:
70:19:f7:67:3a:31:c8:64:85:b3:df:80:a6:77:e0:fc:0d:26:
73:7f:d6:46:51:eb:ae:06:0b:86:8e:ed:b2:b7:81:98:e2:aa:
c7:09:70:d4:f4:36:c7:6c:60:c8:b5:4c:2b:5b:11:86:81:a7:
47:b4:f2:b5:67:fc:d3:8a:3b:2d:65:56:53:81:77:cb:ae:19:
64:aa:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:58 2025 by rpki-client