Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: /WjMARQndCO32dgW2kgEanlKE86p4+njnuyY3xyX3Kc=
Subject key identifier: D0:BF:66:39:EC:2B:D1:1B:51:A4:AF:54:ED:5A:66:00:AA:74:98:50
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 0194BD175BA39183C49505128A0E13372ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: PLVshsAt3S5i7ATkdJiEdEKcsARgIOK4rl5kLRDEtwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5b:a3:91:83:c4:95:05:12:8a:0e:13:37:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=d0bf6639ec2bd11b51a4af54ed5a6600aa749850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:2b:52:13:0d:e4:0c:a3:3c:e1:89:32:80:
b8:24:23:45:a2:ef:5e:e7:6a:33:c4:a2:ab:d1:f5:
46:3d:6c:d5:a8:4b:a5:c2:e3:81:73:70:64:3a:43:
76:ee:6d:ca:28:01:e7:a5:bc:3f:4c:ca:ca:37:b9:
bb:99:c3:e2:6b:d9:38:33:10:30:50:28:ae:5e:d1:
e8:f7:e2:85:e7:84:1f:98:fd:33:e3:b8:64:de:30:
ba:cf:45:b0:d5:49:5b:b3:3b:dd:55:25:9d:ec:20:
32:22:86:b6:78:19:cf:56:c9:fa:5e:b4:d7:75:74:
14:d8:98:39:71:2d:67:ed:fb:9c:b4:b9:ab:e2:8e:
6c:18:02:3c:53:28:60:1d:f2:7b:43:b7:42:05:58:
30:25:db:87:14:07:db:c4:79:06:43:6b:90:4e:2d:
e0:f8:3e:a6:61:51:ca:ad:a5:84:a3:66:de:43:6c:
ca:b3:1c:61:37:64:f5:2c:2f:a4:02:1b:6e:97:ed:
f8:44:e6:c5:c9:10:33:c1:a9:4d:70:fb:a8:75:14:
16:2e:b1:e3:3e:a0:81:5f:32:94:17:9e:bb:2e:2b:
2b:ec:d0:be:23:33:80:07:5d:af:2b:e2:a5:22:42:
1f:b3:9f:a6:75:ec:6a:d5:77:6c:c8:d4:ca:b3:3c:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:66:39:EC:2B:D1:1B:51:A4:AF:54:ED:5A:66:00:AA:74:98:50
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:c1:c4:44:0e:6f:d5:d1:54:b3:fd:05:47:8b:70:44:07:
e3:c1:1a:6e:99:7a:c3:ed:ad:42:61:fc:58:31:b7:55:d4:d3:
c2:77:b5:2a:c5:aa:71:ea:b8:45:d8:f7:e8:79:b2:96:ee:f2:
75:be:c3:9d:b0:78:5f:e4:2b:9b:38:29:96:3a:e7:d1:28:b9:
d0:a2:24:fb:14:66:3b:b1:91:e5:e5:b6:0b:ff:1c:9a:f9:a9:
4d:a5:41:ef:a7:90:8c:ae:02:6f:78:61:8a:00:b5:29:fc:56:
4e:30:21:2f:1b:91:8c:01:d0:50:23:b4:2a:ad:ed:07:44:be:
99:d5:00:64:eb:4a:ff:10:f0:e4:d3:dc:d1:b7:af:6b:b9:22:
7c:bc:05:24:76:29:a0:df:5e:d4:05:d9:ea:b5:4c:e2:26:7f:
d4:8e:6b:9e:39:83:2e:db:91:6c:47:c9:19:39:8f:20:e7:bf:
05:e4:87:a6:6e:c3:0e:b0:97:b0:3c:7d:93:f8:bb:6f:b9:e9:
ca:6b:78:31:8d:6d:e3:cc:7a:6a:3c:d4:24:a1:da:53:f6:33:
62:87:98:39:91:9e:63:2e:4e:15:c5:ae:c8:c0:e4:a8:2a:ed:
dd:73:3c:11:0f:12:f0:74:95:dc:e6:67:1c:41:cd:41:a7:e8:
d3:14:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:16 2025 by rpki-client