Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File: KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier: O+KpdyfI8PJQgezRj6VZ6PeuWyxenGwMVamPzdua0oI=
Subject key identifier: A7:E8:50:92:DC:D5:B1:01:2B:12:0C:12:22:81:95:52:A9:CD:EB:5C
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0194BCE0699E1ADAE0EC1D70604AEC43B20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number: 01D3
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 1-K_h-bUSjpuq8AZEkNRzu6I7SIQ.roa (hash: NmB1wSq7b0ndUhgjm1rnnnwLFhH3O28HPyZCF7fvGcY=)
2: 4Onxw3ZyCceGdWFdrDz9GypV1To.roa (hash: rLXGfCwokEmOeP6DWTGHar2KAFcpyGY37FcoMJ/rm24=)
3: 6w2llJPr5u5R0U0gFJBhkfjASt8.roa (hash: Et1DM1KW1gT7dKyxGFfIxs38O3+sH74ZansUhbBdzew=)
4: AedwyOZIh1v-2im4ZMAx97DTRpo.roa (hash: DbUxINBRfEQf4Wxbn/KisI+8e2YWuUas3nHL1UMHIYw=)
5: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: Hiv6H9u6OXs+HWILk7zlTb+8Gl44c3ylTyTre2vDNPY=)
6: fNae6M71mV294ZXPAPike0PbceE.roa (hash: yK1vBYE3EmPb37wOJedAwxWWRQFUDScm3ZCALz4wEUs=)
7: ypFL40Xoi4y05qu3ogA3n6gvBmc.roa (hash: Osn8j8oSksWpQIeEIhv5U30zU1XAWvsewtWKW4S5v1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:69:9e:1a:da:e0:ec:1d:70:60:4a:ec:43:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=a7e85092dcd5b1012b120c1222819552a9cdeb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:11:25:57:f7:e7:df:b0:c8:79:05:0f:ca:
7b:40:7d:2b:98:3d:7a:70:76:c2:5f:ae:77:c0:a6:
5e:b1:1c:cc:83:44:64:3b:ce:e0:4e:a4:7b:2f:58:
4b:66:29:4a:cf:f7:f6:a0:3c:d8:c0:43:f4:95:c8:
6f:d4:d3:d0:72:08:ba:0b:18:02:7f:98:df:cc:86:
d0:6d:ba:b8:8e:bd:24:28:c5:0c:ae:07:9d:13:ee:
10:45:a1:bb:66:f1:de:e9:c3:5a:a2:97:65:49:4d:
3a:7c:b7:54:38:b1:76:d7:96:cf:1e:18:06:1f:d2:
73:22:56:cb:c9:c7:8c:7c:a6:6f:2b:8b:a6:e9:e3:
28:03:49:8f:cc:40:ee:0a:9a:7c:97:85:1f:50:d0:
78:f1:b7:56:1e:b3:d8:87:0e:79:ac:1b:13:92:0a:
2c:96:d8:bb:3e:20:27:ce:93:66:75:65:b9:d0:71:
82:ca:bc:b3:e7:5f:14:41:fc:39:b6:e7:2c:c2:c1:
03:3b:ee:23:13:3f:6d:2d:70:d1:ff:75:94:43:e4:
30:e9:e1:6d:fd:41:f0:e8:74:9c:a8:11:68:cb:ea:
c3:a4:09:76:2c:f8:b0:27:54:29:99:67:e8:da:b9:
37:7f:7c:a9:ed:e4:62:93:b4:f0:0d:8b:04:13:9c:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:50:92:DC:D5:B1:01:2B:12:0C:12:22:81:95:52:A9:CD:EB:5C
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fc:76:33:29:60:82:ab:d7:c8:85:14:55:86:1b:73:20:9a:
7c:54:c9:5d:cd:4c:01:be:54:41:79:34:d9:03:3c:53:d9:ac:
5f:60:bf:4a:8d:38:78:55:ef:27:fa:d6:82:a4:bb:76:76:92:
de:a2:3f:1b:12:d3:3b:9d:7a:eb:ad:5e:c6:aa:8c:60:05:5d:
6a:02:eb:14:ce:6a:6e:dc:4a:c2:68:6e:2b:5f:7e:db:db:ae:
6b:d1:ae:0a:2e:be:4d:8c:69:0a:ad:91:d8:17:8c:cc:10:89:
48:d5:0b:5d:f8:d4:34:a1:6a:e8:b3:2d:f6:f7:c6:1f:c6:e9:
de:47:04:2c:e8:f4:6f:d7:8c:73:7d:71:58:cf:fb:38:a5:57:
1a:00:0c:c9:0b:ef:38:00:f4:b3:c0:27:04:f9:45:13:44:54:
ca:0b:d2:d0:e1:b3:a5:af:6b:ca:5b:57:3b:04:47:a2:d3:85:
00:6d:81:f0:f9:aa:5f:fc:a9:a7:ba:12:2d:28:90:f9:58:b5:
ba:3f:0a:d4:48:43:4c:1e:5e:ae:a4:40:5e:27:7b:3b:3b:03:
65:1d:8d:3e:ec:03:99:f1:d8:30:a5:55:64:92:7a:21:24:18:
72:37:b7:5c:95:2a:a2:a7:ad:28:f9:77:d0:87:35:79:d1:ad:
88:93:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:18 2025 by rpki-client