Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: th6tVLc9x14fcddWBp3uPFjSRjho8dAf8XBwypeJUBE=
Subject key identifier: 7D:3B:22:15:A7:9F:CB:94:FF:B4:7E:F4:18:91:6E:79:3E:7F:78:20
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0194BCE0DFA1302B47FB84A0F29281AAA1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 046B
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: UQvZIujGRK/aFLHpfXG44O/zUAArcbPyvYpw29cb9b0=)
3: TxgWU0nvaqfYf5KLCtN7215KdmY.roa (hash: vHdeUjHRwKKcXd4EFn4jfrTBP0o0226rGGUhHErptwk=)
4: lrZuyVvBSPwCHrxNnv0EW6Orf6c.roa (hash: EeWV90ew6iUPYW2faTqg6qNdibVxUJcxySAwa6+/qbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:a1:30:2b:47:fb:84:a0:f2:92:81:aa:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=7d3b2215a79fcb94ffb47ef418916e793e7f7820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:33:84:26:17:94:15:55:f7:7b:28:1a:57:
a8:92:8f:a3:e7:98:35:a6:1f:cf:1d:3d:69:69:28:
cb:84:94:4a:30:78:ca:fe:4f:fd:48:a6:9d:eb:15:
fc:56:8f:21:eb:06:bd:d0:4e:be:c1:91:d3:7d:13:
f1:e1:08:0e:14:22:a6:dd:ce:c9:c2:82:f0:76:10:
12:5b:13:dd:ae:81:76:05:fa:40:61:3e:49:38:ed:
9d:dd:c0:2a:13:d9:c8:22:8d:3e:b9:07:be:a4:7c:
59:16:f6:b5:97:c6:6d:21:a1:5d:77:ef:21:74:50:
b7:f7:3e:ff:9e:78:6a:02:7d:25:8d:38:6d:85:c3:
6a:17:8f:40:96:2b:d7:d5:e3:96:67:91:bf:fb:80:
2f:c8:85:6c:c0:e7:4c:8d:9b:41:24:83:26:10:2c:
7c:f9:b0:0c:6a:95:2c:d6:70:77:ca:22:58:a7:16:
33:f3:b2:ac:9f:43:5e:88:eb:e3:69:c8:7e:cc:73:
a8:b2:f4:63:84:9b:0c:99:55:16:3f:8c:83:70:9c:
65:8d:32:d1:48:1b:c9:e3:cb:ad:cb:05:55:04:2e:
87:dc:f7:61:31:51:10:39:e5:e7:89:e1:88:bc:be:
e5:9d:b4:b0:93:6a:60:8e:69:21:40:27:df:33:e5:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:22:15:A7:9F:CB:94:FF:B4:7E:F4:18:91:6E:79:3E:7F:78:20
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:46:ec:c2:17:e5:b5:84:67:54:7d:70:77:46:b5:f2:5b:d1:
b8:a8:8d:a2:c9:cc:18:5a:06:17:06:23:87:4b:5b:63:4d:30:
43:03:d9:59:c9:31:52:f3:cb:e7:db:0c:20:01:e5:8b:32:12:
9b:1a:c7:00:7d:73:1f:c4:1f:d2:ac:3b:b9:11:1e:7c:d3:00:
92:63:43:f8:6f:4f:2f:62:0d:58:0f:15:28:80:cc:38:23:97:
94:da:79:79:42:19:c0:46:8b:fd:ef:cf:46:cc:8a:43:c9:a7:
2b:4d:f2:a5:8b:c5:a0:68:02:40:61:e3:33:71:0e:6b:f8:24:
ae:9f:2b:19:34:25:da:3c:85:36:ee:33:a9:b9:9d:b3:53:f5:
d7:d3:4e:5b:4e:fe:a6:3b:1d:f2:b9:95:4a:e6:8a:7e:48:12:
ef:30:3d:6b:fd:38:a0:c5:d4:63:62:ed:c2:bb:37:db:cb:d9:
aa:50:69:04:fe:d4:cd:78:a8:44:f0:61:c7:08:c9:34:f1:75:
28:ad:bd:b9:cc:82:c1:3c:43:22:d2:bc:2f:f7:b2:d9:58:80:
30:ae:3e:68:e6:dd:c6:a7:e8:70:a7:06:4e:0a:92:09:ca:e2:
7f:d7:24:43:d7:31:2d:60:8b:b0:69:75:c0:49:e9:9c:d2:55:
77:c9:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:46 2025 by rpki-client