Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: 6dTmbdKxTgcUJGmmqkTNidTtw7XB/JeKduWH84/s9ug=
Subject key identifier: 46:EF:8A:AD:DD:83:21:DE:0A:4F:15:41:21:D5:B4:93:2D:B3:46:3C
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 0194BCAA35A411BE34662B1110605E931D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 0C24
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: 3tVWAqpuhZmIvirALPURMbWbRUo.roa (hash: 8vZgncUoPoI0S65ff9n3cIU9sKbrNMXpH1mUnl/CdOM=)
2: GerACxDWw1b6KGz6kGs5iVp2ois.roa (hash: 4GcODZKqecND9v8xjlb0j4xGLtBy9xZhAi6ymZShRcQ=)
3: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: qgfLD8Gx5ODz0zzkUhtF6GFjdtCfFqr5Eyy0Ms0HV6I=)
4: LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa (hash: WmOLEifdPoH/joG2SNYp6mcbI8myXya9UUZozRyBF44=)
5: Qy3Q7lh00t0205L0nhmAvt2uoOs.roa (hash: a4ie5/FL3GVO5YHgzPjyXYH6PIkYqfX1mb+x+F8lR9c=)
6: X35BdP6fZcPzqxMLjnciq7uISgs.roa (hash: X6IFONVs0ZqJ9lk+Np5sgqP+DTo255gzewtTiaP3PC0=)
7: eGuHIFNh-O-K6vz68gcxBeLPa18.roa (hash: G6cEnCf7JWL4wnvSWWO7ELeSvpGDDJYGerFFAWSt9CA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:35:a4:11:be:34:66:2b:11:10:60:5e:93:1d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=46ef8aaddd8321de0a4f154121d5b4932db3463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:d5:f9:fd:63:69:3b:2e:3d:bd:26:ab:91:
c3:4b:83:c7:cf:86:61:54:c5:ae:34:62:5c:ae:53:
50:c7:e7:da:ee:ee:f0:ad:26:2c:d9:45:2e:56:67:
98:28:3a:00:43:a3:c8:d3:80:86:41:58:22:48:2b:
c9:5b:f4:88:36:c8:90:08:30:85:90:c2:bc:d1:03:
63:5a:8d:cc:e5:80:38:3d:31:75:29:3a:f6:05:ba:
00:bb:88:b7:1a:4b:d2:0f:a1:8b:ad:c2:30:c4:02:
d4:cf:3b:69:13:b4:73:00:b1:6c:10:58:e5:08:f9:
e3:ff:6a:0b:fe:4a:a8:28:e8:b7:3d:31:e8:05:e5:
f3:54:7a:57:e2:3e:32:5e:1f:76:ac:5b:db:63:cd:
db:23:4b:ce:a1:f0:4f:52:39:81:e6:ec:d8:0d:23:
78:1b:16:86:74:d8:7e:bd:92:e3:3d:e3:e7:4e:03:
28:00:e0:3c:08:3a:8f:d0:37:5d:6e:62:0b:3d:3c:
50:1f:c4:fe:07:3f:a4:9e:3d:8e:60:91:33:90:43:
80:06:f7:66:d0:5a:f4:78:dd:9f:ce:d2:fc:62:97:
97:e2:79:ba:c9:9a:5a:5b:7f:a4:a4:25:49:ca:7c:
6c:4c:b1:f7:28:4c:e8:43:c3:d1:f2:b5:f7:6f:38:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:8A:AD:DD:83:21:DE:0A:4F:15:41:21:D5:B4:93:2D:B3:46:3C
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:53:a9:70:bf:b5:43:cf:9c:23:4e:f0:cc:56:e4:02:b2:f0:
3c:ac:da:2b:87:f3:d7:7c:24:60:fa:cf:9f:d7:30:e1:6f:9c:
ba:5b:12:28:4a:9d:7a:a5:28:e7:e9:1a:85:c9:2b:ed:48:9e:
5a:9e:da:55:f9:8f:43:11:f6:db:4b:12:55:14:b1:69:ad:17:
91:0a:15:be:8d:39:fe:00:df:81:ca:37:ed:7f:d6:51:44:c5:
14:17:11:ee:b7:e6:2e:0a:e3:de:90:0e:a1:bc:b4:e1:c1:2f:
d3:dc:0c:9a:5f:4a:ac:c9:c3:10:32:dc:13:0c:0f:70:ae:2e:
51:a7:99:6c:10:56:5b:d1:c3:8c:aa:72:84:cf:7b:60:ae:23:
35:05:71:b5:ca:a5:2b:73:dd:27:37:71:77:8d:86:59:66:39:
9b:f8:a9:c6:44:54:6a:66:e4:6e:40:19:20:3d:4c:0f:b8:14:
05:0c:3b:a5:a2:7a:ea:be:ab:b6:40:e1:b6:ed:d2:e8:ec:66:
00:7e:19:29:d3:ff:1a:8d:1b:53:1e:27:c3:d3:f6:46:8e:a5:
80:ee:89:0a:17:95:ed:42:47:12:cb:69:01:64:b4:b0:98:6f:
47:fd:62:4e:e4:b6:3b:62:e2:d8:9d:13:c2:a2:cf:56:de:b7:
e6:ce:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:53 2025 by rpki-client