Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: 7az06akvyiZrtk6o4q7SsOwy13RlJUWaBA94+hhHDNE=
Subject key identifier: 98:EB:6C:D5:94:38:F3:AF:1C:1F:AB:42:15:99:6E:B8:7A:73:B6:90
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 0194BC72B64A379F59621837E49943D81960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: v70NJ8IKvyAd2zI8n735al5IL1qi5ubdXutC71DIIXM=)
2: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (hash: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b6:4a:37:9f:59:62:18:37:e4:99:43:d8:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=98eb6cd59438f3af1c1fab4215996eb87a73b690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:03:1c:6c:db:e8:71:bb:3a:89:1a:2b:98:
64:38:24:b9:0e:93:fb:75:34:9e:b2:17:71:94:e1:
be:e8:ec:bf:a5:8c:e5:61:36:ce:28:0c:e4:a5:20:
2c:0a:c3:31:ac:a9:0d:8a:6f:01:b9:e4:56:ce:4e:
71:6f:4c:40:4d:71:8e:51:5d:5a:c0:16:6c:b6:7a:
6e:e7:2b:e9:02:ae:15:19:54:c8:f6:16:58:3b:99:
8a:39:88:eb:5b:04:a1:38:bc:aa:db:13:e1:b2:27:
0a:9c:15:29:8a:a8:24:65:e0:7d:bd:4a:56:bf:e4:
d7:df:83:e4:55:e9:94:19:c8:da:e0:b7:fc:02:4a:
db:68:5d:7f:ac:37:f5:fa:10:bd:9b:6a:17:24:66:
c2:7d:19:cf:ef:54:b9:74:55:e7:88:09:56:a3:85:
16:2f:a6:27:77:8c:87:d9:01:01:13:75:1a:21:6c:
27:d0:ad:8a:0e:de:a4:a3:b7:77:84:ee:ce:33:5b:
58:8c:00:77:59:6c:7f:01:25:70:a1:63:72:fd:91:
5f:bc:cf:ab:b4:8a:f4:23:57:b5:20:7f:a9:87:bc:
f7:0d:3b:ec:62:f2:5d:6c:ff:2d:1b:9c:11:83:6b:
22:80:41:3a:f7:cd:e1:c4:16:81:26:0a:50:a0:5c:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EB:6C:D5:94:38:F3:AF:1C:1F:AB:42:15:99:6E:B8:7A:73:B6:90
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:23:a0:6b:35:8f:40:f9:41:76:34:bb:42:72:68:cb:4d:bb:
9c:ab:d7:53:88:9e:a8:54:1a:f1:a7:9d:a3:9d:80:e9:7f:b4:
ca:2e:77:1d:55:8c:81:5c:5c:12:f7:d0:34:fd:49:bc:94:a8:
cf:e5:2c:69:cc:3b:0b:7b:17:4f:96:90:b3:6e:49:2a:9e:7e:
b2:dc:47:5f:78:d2:ec:a1:ee:40:7d:6a:99:d3:d3:ae:13:4d:
86:41:ae:de:84:6f:5f:06:5f:26:1f:90:30:a7:2d:37:6b:2f:
f7:e7:00:79:ea:95:39:49:c8:99:4e:38:bc:47:59:18:d6:71:
3c:f2:ac:f9:01:6d:36:f6:ea:1d:61:17:33:35:4f:62:81:5d:
dc:33:4c:26:03:72:55:c3:7d:9f:4e:06:f1:70:07:6a:4b:0f:
31:a3:39:35:3d:2f:a4:ca:3c:d5:41:a4:1e:48:7e:23:5c:bf:
4d:5c:7e:4d:0e:81:fa:f4:1c:fd:d1:9d:8a:78:6d:ab:57:d9:
2c:a4:dc:f8:c7:8b:1d:c5:bd:da:37:94:0b:78:73:67:76:0f:
7e:4c:1d:08:94:e7:bb:ea:de:1a:46:bf:37:6d:37:69:9d:8e:
c7:ec:64:38:9d:87:90:27:d5:9d:cd:3e:e4:02:72:e8:d8:ac:
0a:ce:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:12:05 2025 by rpki-client