Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: J7o7nHOfH1CyKZMAvH99TLqE1eAkBHOlo+5xix2D8y4=
Subject key identifier: C8:E8:2E:51:3E:95:CE:DE:F8:22:2F:3C:69:06:67:0E:DC:94:1B:5A
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 0194BBCE43C403078105190D6BE2CB1F9EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: vHTmC+OKyyQ/WEonAZFgU1geAxZJND4jJij9CzqMnQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:c4:03:07:81:05:19:0d:6b:e2:cb:1f:9e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=c8e82e513e95cedef8222f3c6906670edc941b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:bd:5c:94:ad:33:2b:dc:b1:9a:25:57:47:
cf:a6:eb:13:5c:22:9a:19:2f:e9:0a:ff:df:39:cd:
65:8c:09:6d:61:c2:6b:9d:0e:25:d9:dc:50:3d:3a:
63:5f:91:a4:6a:cf:49:1f:75:e5:08:4b:0f:c5:fa:
76:22:51:7d:47:31:e8:dc:33:43:e8:24:08:c5:59:
74:51:7d:01:4b:9f:9b:d6:a7:1e:c7:1c:60:c7:1d:
1c:38:80:31:56:ef:b1:7c:f6:87:4d:85:4b:11:d6:
ff:1e:9c:95:37:21:6e:5f:b8:3c:00:6a:b9:39:4d:
fd:01:ce:88:de:b0:0e:18:36:ed:4e:13:3a:34:24:
d5:57:1f:73:30:8f:c2:d8:ee:a7:7a:ce:a5:36:ad:
e6:46:cb:38:77:fd:40:d1:7b:3b:d6:c0:6d:99:5f:
a0:33:91:7b:70:dd:08:cf:d8:59:e3:1b:d3:b0:3a:
4d:3e:82:62:9c:ad:ca:27:e4:89:2c:d9:df:49:9f:
dc:60:02:cd:4e:9d:bc:76:4b:52:29:68:d0:75:28:
57:45:78:25:7d:a5:98:f3:df:d2:a0:98:2b:fd:99:
f4:09:8b:ad:3d:21:9f:66:59:6b:b6:51:ef:3d:a9:
4c:fa:e0:02:07:18:86:64:cb:68:32:9b:d8:9f:f8:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E8:2E:51:3E:95:CE:DE:F8:22:2F:3C:69:06:67:0E:DC:94:1B:5A
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2c:7c:d3:eb:aa:89:fd:4f:59:76:06:62:fe:20:a0:58:18:
ad:5e:32:04:4f:f9:ee:d9:e7:6f:24:18:25:5b:8c:c3:54:39:
25:ea:6a:93:a0:e6:9d:f1:71:d7:13:c1:7e:29:d2:5c:f6:3e:
40:2d:a3:c1:6b:f3:e6:c4:4f:04:45:8d:f6:ef:7f:bc:4d:ec:
4c:16:89:d1:15:da:5a:62:b8:07:53:18:a0:f3:8d:e0:30:38:
6c:09:a7:71:c4:1a:8c:21:15:e8:aa:a3:fc:7b:9f:ed:63:e1:
b5:9c:6a:8c:64:c1:8e:0c:58:8f:26:ad:1e:68:9b:cd:2f:27:
8b:bb:4c:d8:44:4f:5d:8b:86:42:19:25:86:73:ed:5c:73:e2:
e5:3f:13:a8:63:27:46:89:f2:9c:54:97:81:28:9d:76:9f:05:
08:71:cf:74:ee:35:dd:82:36:83:0b:c5:6a:76:69:fb:92:37:
6e:5e:6a:69:57:57:14:ac:34:12:bf:93:1f:bb:81:cc:55:b7:
8e:08:cd:7d:9f:2b:d9:39:c9:14:dc:83:3f:b9:30:81:80:e8:
20:47:cb:1a:76:ea:19:df:a3:5b:dc:1a:a0:db:56:e5:78:d7:
26:62:a6:c2:28:4b:0d:b8:11:67:50:d8:31:48:a9:d6:6c:ea:
f1:62:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:43 2025 by rpki-client