Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier: X3EDOeVU7lV6AVyIiGOpr0JoCsOF29nkFmJMaplLHt8=
Subject key identifier: 9C:DA:34:9F:95:AA:69:A4:A1:E0:40:C4:08:0D:F3:EA:6F:C5:49:D2
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194BD4E72867EFFCBCD8AAE80AA8277350B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number: 11C1
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 2SY-qe-5SBhHKk51B06H3d7WW8A.roa (hash: 6/DIJ50Cnk+nITM4AUHonNPdQnw8AUu3PQWc0gDk/RE=)
2: 3eGJROckTKFxKv7PLWZ0casIF2o.roa (hash: l+08bVpVWDjJknsLWzKsSPa5xJVN747n146HU38EGzo=)
3: 3qP8CYLQLArKhUt9WLXpexidX9s.roa (hash: fJwq5Z3pf4stIhUvf/rKCUyniRyWeBrZT0wpMhdvrnY=)
4: F0WoFeFUhet7PzeJdUZ_-e5kl8g.roa (hash: 0IxHHvZ+5DjhteAx99x4ED/uef2xLasftfHN8FmKIFg=)
5: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: DR0poUXH4MXLkaf0sWIlhdzXygCZnncKxTJ4JqExGl8=)
6: NZqpS7ihNb3Dq5XLh1hQyMnsmco.roa (hash: dxLnkibf8r6CzNLwl84p6n1m2AroGWLuyQA0+Tx7YAs=)
7: UK5NsII-LTF761VzxF9DY42Yywg.roa (hash: QuTtsuw1h6GuFHsNhToNXvzfUPgZu4JE7jLTZ5xOxnA=)
8: VmDiDZU5j_jVvS28SRt208tKd1k.roa (hash: FRI4bFE5EfnWhCnVwcnLML2H5HJ4T4tcvHv/9lasnq4=)
9: Wl5OMNC6MCxgbmomNHBubWa_YQU.roa (hash: l+u7ZnhhBCsAfHDI+07MRIoLVM81+Kmmayjl/zuQNno=)
10: a2LPGgxPjRCbhaJ0YGzULw_WeNY.roa (hash: QeF0qyF95005Hf/S76ieO1ADkMFOqu6YyBBMEn+NArk=)
11: dTrad9zBkuf1kg0cgfBRSmbnm6o.roa (hash: vCwiQt8R61nFWf5QjsNL/1/KnwfPRWZbM1zqpXVr4As=)
12: dt1bzx9p7m0uE8ubvPkktplimjQ.roa (hash: BGthPDtnn++lKGkNnfGUngrHw27ojlB4xD6KodlOOZ8=)
13: e5ZbZdDjK2u63noro-x_b9ucuS8.roa (hash: PYNv6+uTZrVFvQthWKMUtJ45MA7WCbG3A/7UkXVWjOE=)
14: sCOb4vQds_pkbWhQIVEttoainJ8.roa (hash: whA1irugOnOaLSWdyAk/n4R/O9pEidjXiPOAAQiXTeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:86:7e:ff:cb:cd:8a:ae:80:aa:82:77:35:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=9cda349f95aa69a4a1e040c4080df3ea6fc549d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:ed:ea:ee:db:1f:98:13:db:fa:fd:b8:96:
7b:ee:23:b2:20:2b:ff:d4:96:b6:a9:04:9f:37:46:
46:39:e2:83:f7:d7:d3:db:35:09:5f:4c:ad:a4:3a:
5e:26:a5:60:23:02:06:f1:c5:60:b9:7b:8e:07:e2:
93:93:88:c7:53:92:fa:43:10:39:04:53:e9:57:36:
45:10:33:ba:90:dd:05:f4:56:08:e9:e1:03:95:f0:
6e:a6:04:fc:cb:f4:de:e5:30:dc:12:05:2d:21:2b:
75:a6:af:20:e8:f3:30:4c:41:6b:42:9d:69:f5:3d:
8d:cd:a4:c2:90:7c:50:a0:16:39:af:3b:1e:5f:49:
5a:38:ec:62:e4:c0:4f:91:b2:34:04:9e:11:ec:d4:
24:8b:d5:e0:41:44:9a:9b:4d:a4:19:42:28:1e:99:
55:53:a0:b0:f5:c2:2f:09:ef:20:09:39:0c:d2:5b:
0a:47:3e:f9:47:38:23:0b:7c:62:e0:e2:c9:40:e4:
a9:7f:12:b9:aa:96:21:7d:7d:19:aa:97:ea:6e:bc:
8e:50:c5:54:42:fe:7f:5e:fa:3b:e2:b2:3e:c1:b7:
90:05:8a:2f:e2:12:49:46:e8:52:44:fe:ac:40:11:
f2:1d:75:28:3f:2c:4e:85:5c:41:9f:bd:c4:5e:4e:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:34:9F:95:AA:69:A4:A1:E0:40:C4:08:0D:F3:EA:6F:C5:49:D2
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:37:96:ea:d7:77:ad:ed:af:52:66:23:31:a4:fc:a6:bc:5b:
1a:72:c3:81:8c:1a:56:cf:c6:e8:00:6d:85:95:33:78:53:44:
0b:63:f6:7b:38:50:0c:51:99:50:92:79:d8:44:a7:c3:f1:38:
7c:57:37:20:8d:40:dc:bc:16:e7:a6:a8:d0:08:97:a9:4f:f9:
59:4f:f1:4e:2a:74:b3:9b:81:db:3c:79:93:31:a3:68:93:d8:
5e:3e:27:58:dd:e7:1d:32:14:c3:78:61:04:0b:13:cc:dc:5f:
89:e3:a2:54:53:e6:df:d7:76:63:78:c8:49:bc:bb:c0:18:87:
e2:05:ca:d6:f7:9f:50:a9:dc:7c:d9:7d:ae:ea:03:7a:16:35:
bf:1a:be:c1:5c:34:a8:0a:0f:57:02:b2:44:c4:74:c1:21:b0:
52:f2:dd:ee:44:eb:af:c0:0c:96:a2:b2:bc:f4:6b:26:b0:37:
7a:ee:58:97:96:47:7a:ea:63:72:92:13:06:1b:07:03:0c:ef:
f3:3c:5f:65:96:a7:b2:a8:58:73:51:3c:b2:66:4f:1a:14:12:
19:4b:c0:bf:92:50:f9:b0:3f:e0:c9:31:83:be:ab:e0:bc:00:
3b:11:15:0b:99:0b:e9:d5:bd:fb:b7:52:b4:e9:6f:32:fa:82:
76:71:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:23 2025 by rpki-client