Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: ffXX/bgU7HD4FvpviAJIRM5Q+J3xSNu++KxVr2xWPsg=
Subject key identifier: EB:5F:31:43:43:55:B4:30:58:76:CE:5A:F3:7E:BA:2D:4E:8D:F5:2C
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 0194BD4E785266924602839E66CB9BCBE750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 0693
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: BJ4VFOskRK3bBiJBpHiT_tAzA5A.roa (hash: UXn6LX6IgvE9frtcP3dcRwG57JPhrEUAXhgX1T/Y+PE=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: IOjJvbhjgO+eYygW43fgEepSL79w8cA2mPzt6lkjB/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:78:52:66:92:46:02:83:9e:66:cb:9b:cb:e7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=eb5f31434355b4305876ce5af37eba2d4e8df52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:ce:76:cb:b2:a3:c1:17:63:94:18:2b:6c:
70:a1:5b:5b:34:29:4c:80:ae:35:f9:68:bf:8a:55:
a2:3d:ce:07:0c:8e:50:33:de:cb:6a:76:02:8e:e7:
36:9e:a8:db:8d:a4:d2:f6:fa:6f:55:d2:4d:b9:3b:
82:b0:46:df:42:db:94:c2:f2:03:b6:02:57:3c:5d:
e7:05:60:c2:ac:a9:61:60:41:09:17:13:6f:20:bf:
23:5b:24:08:9e:bd:52:11:64:87:5d:17:b8:08:13:
40:e8:27:61:4c:4d:bc:a3:e5:ac:65:db:39:2c:29:
46:a1:25:61:1f:2f:de:92:65:41:b7:44:25:8c:46:
99:f5:f5:d7:55:28:c1:5b:c7:69:f7:8d:69:59:d0:
4e:fa:f0:d7:12:e4:98:49:af:e0:2c:00:97:a8:73:
7d:08:f1:12:56:95:03:e6:36:51:d9:d9:de:43:df:
79:c7:ce:10:bf:b2:24:f7:57:08:5e:15:b9:cd:b0:
88:c3:ac:05:69:07:da:24:d4:30:02:4e:70:87:5f:
ec:71:0a:6e:5e:e0:92:47:c2:6b:e2:b0:70:d9:48:
99:c8:56:72:d3:aa:27:21:d6:17:69:c4:38:be:f9:
ae:83:fd:05:eb:0a:e4:57:4e:06:ba:c7:32:d8:ef:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:31:43:43:55:B4:30:58:76:CE:5A:F3:7E:BA:2D:4E:8D:F5:2C
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:22:ca:ff:7b:60:d7:7e:c0:1b:f2:2b:05:02:0a:22:61:
5b:a6:a7:ac:6c:8e:60:c0:e9:40:81:bb:09:1e:54:9f:41:6e:
e8:d6:b8:8c:4b:cd:0d:9c:c0:01:8a:96:88:68:66:28:42:2a:
95:a0:10:29:ca:36:01:05:a7:a7:0c:b9:a2:e6:0a:fd:61:b4:
4d:ea:54:f1:0a:84:8e:bf:01:38:7d:3d:54:ef:56:56:80:b8:
16:41:e6:ff:9e:52:33:48:34:f8:18:17:2e:e7:0d:d2:f7:1e:
5a:b0:03:ab:c2:08:51:42:a8:2b:63:42:f1:09:b0:0f:1f:7c:
63:9d:07:2b:7a:fd:e2:16:35:da:ec:d5:65:4f:f6:be:62:5d:
d7:1d:f0:66:c0:76:f8:a6:96:87:6f:21:fe:bb:18:2d:49:44:
e8:83:50:b2:da:c2:8f:3f:d2:08:22:4b:5e:5d:68:f1:b0:1a:
ed:0e:11:44:fa:92:54:c4:6b:f7:aa:71:8f:33:ac:5c:f5:6b:
10:42:a4:cf:41:e5:67:66:96:86:dc:88:9b:bd:5e:6a:c9:43:
a8:df:f5:86:14:6f:32:55:40:2d:ea:8a:ef:ab:a1:81:64:4a:
1d:fc:12:88:54:8e:b5:26:7e:e5:7a:ea:f7:22:1f:1a:55:f6:
d8:9d:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:36 2025 by rpki-client