Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: mWJUzVeI/SG5XMwnlG5whBVGsWFs0wo0b/7400qGAMM=
Subject key identifier: BD:DD:88:BB:8C:D3:7F:A2:CD:21:35:6C:1D:03:18:E1:56:08:AC:F4
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0194BD4EC57BD545307580D048C1B09517AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 085C
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: fc5zLzOWzWKjqoJSj+CD0nJSb573bNy9s117rSqSAhM=)
2: M5i8YkISarB5GPXJg8viuQxOBB8.roa (hash: wc++hdMQzReCGtCbcs+1hUl+1/yDSd8FAz1A52maIM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c5:7b:d5:45:30:75:80:d0:48:c1:b0:95:17:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=bddd88bb8cd37fa2cd21356c1d0318e15608acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:68:4e:0a:30:30:ed:7b:f3:25:56:29:69:
42:9d:4c:11:cb:06:cb:dc:c2:f7:be:ad:11:85:58:
d0:94:d9:a0:fe:cc:3b:e0:cc:f0:fd:c0:73:3b:5b:
99:ca:f2:7f:8e:7a:3d:72:1a:35:a1:4b:c5:e5:da:
c7:21:bd:3a:3d:8a:aa:69:52:7d:69:78:6e:f7:0b:
16:3e:cb:fa:45:65:19:8e:52:11:2f:ab:ff:b3:2a:
9e:f1:b7:b6:5f:eb:92:50:6b:e0:45:94:95:4b:cc:
4f:94:7b:c3:8c:d6:37:db:2e:3f:67:20:c4:da:cb:
46:fb:51:df:3a:f0:23:e6:8d:60:c4:48:49:5d:7e:
86:4c:a1:bd:55:ea:58:1e:bd:1c:ca:77:77:0f:ea:
06:9b:3d:fc:83:f2:64:23:a4:65:ee:9d:d6:fa:8e:
77:3f:7a:fd:e0:4f:23:f9:e9:2a:85:30:f2:cb:a0:
d6:33:56:f1:41:3e:40:36:b4:a7:3e:5e:ab:d4:96:
c0:22:51:bb:2a:43:e3:d4:a3:48:cb:64:1d:19:fa:
5d:12:b7:b2:30:7e:e0:20:62:40:c5:5f:2f:3b:3f:
82:43:f0:ff:08:70:a4:a8:aa:62:a2:42:88:37:04:
e4:8b:74:5a:a4:ce:6a:03:0b:97:79:f5:29:dd:06:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:88:BB:8C:D3:7F:A2:CD:21:35:6C:1D:03:18:E1:56:08:AC:F4
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:12:27:68:0a:76:0c:27:86:b9:d4:ed:a2:a8:66:4d:00:56:
82:fe:87:b8:c4:22:ca:10:d8:72:86:c0:69:6d:8b:5b:b5:05:
a3:ee:84:ab:a8:a2:26:5f:03:ca:fb:e4:9e:e5:39:4d:fb:20:
83:b3:f0:a9:85:bb:c3:ba:60:56:04:58:7c:db:49:33:d7:5e:
78:a0:64:1b:5a:95:bc:61:92:a7:73:4a:8e:d8:8f:5b:8d:26:
c0:e4:78:ad:b7:95:14:30:9e:67:06:b0:bd:36:4d:26:e5:f7:
68:f4:51:db:f7:77:01:7f:fd:e9:37:0e:0c:96:43:8a:d9:54:
98:c5:8b:f6:e2:65:2c:3c:71:0a:bc:68:37:7c:13:36:bd:e7:
da:f6:f7:c5:c9:3a:8e:29:2f:a4:eb:15:52:07:c7:ea:45:b7:
78:72:20:6f:e3:47:70:6f:b2:49:d1:60:cc:06:72:72:c1:05:
b0:63:bf:f8:97:62:60:d1:0b:3d:eb:56:bc:2d:6a:7d:40:41:
e1:17:25:38:4b:8d:b9:18:11:91:50:df:d6:2d:25:a2:ed:67:
f7:45:7a:75:93:40:0c:d8:d2:55:a9:44:8c:da:8e:28:3b:b8:
d3:75:f5:7c:76:72:5b:72:80:d8:be:d8:3e:1a:67:17:37:67:
d5:17:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client