Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: fp44ox/fno+MA4zM5ijBL2YEVmMZRWbcg7Y1YgPz7YQ=
Subject key identifier: BA:CA:60:22:27:37:90:57:9B:11:30:7A:71:E3:D2:94:8F:F5:E3:E3
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 0194BCA9E2A71D30E96BB4925549606CD0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: JJUNKh3e0IU/ev2LcND6jlM4hayAwwzUBm5FX7uVLhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:a7:1d:30:e9:6b:b4:92:55:49:60:6c:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=baca6022273790579b11307a71e3d2948ff5e3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:7a:50:6b:e1:64:ac:00:ed:67:83:a1:02:
43:ec:6f:f0:d2:36:5e:80:b1:75:d1:f9:f6:89:91:
4d:93:25:fd:85:ab:49:1c:fa:2c:cb:35:c4:dd:6b:
d7:94:87:ed:95:47:d6:b3:05:cc:a7:0a:b8:49:03:
57:ed:90:2e:0f:b4:b0:90:3d:34:a9:77:b6:a9:9f:
63:b2:5a:f6:28:a7:4a:92:8e:7c:09:c1:31:b5:3d:
85:58:bb:9d:10:78:1b:ab:cf:34:5e:b2:7a:5b:ca:
cd:2a:d4:47:8e:16:a4:9c:6a:ee:7e:5c:49:11:0b:
ae:4e:b8:90:28:35:9d:2c:95:e0:58:bb:ff:5e:04:
b8:c7:db:9d:06:50:69:45:05:c3:0c:78:b6:0b:ee:
dd:73:6f:f7:85:61:47:56:3b:a4:e0:9b:52:c8:03:
71:df:1d:fa:30:b3:72:a8:56:2c:57:b6:e5:0a:be:
5a:d8:19:99:d2:92:9b:ce:a9:c3:a3:f0:f3:69:0e:
71:3d:f8:5f:c0:1c:8e:f4:86:02:c9:ad:bc:b1:27:
ef:75:92:6c:0d:2e:c6:d0:47:fd:1d:cf:67:47:45:
4d:ac:e3:9d:25:c9:66:71:58:d7:e8:c9:85:2e:4b:
58:0a:db:e0:c5:6d:eb:2a:1f:6d:49:16:fa:e4:44:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:60:22:27:37:90:57:9B:11:30:7A:71:E3:D2:94:8F:F5:E3:E3
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5f:8e:a3:67:32:d9:09:99:8c:a5:8c:62:f9:62:1b:19:c4:
0d:7b:09:05:4c:13:e9:51:02:0b:92:97:d0:22:dd:ba:50:94:
61:b7:6c:13:af:76:17:e4:0d:fe:26:20:67:eb:5d:66:52:0d:
18:6a:cb:6b:00:87:57:e4:83:07:ac:c5:af:b9:2d:35:31:24:
4e:e7:f1:5c:c8:3c:a0:14:3c:78:68:b2:5a:69:78:2f:c9:06:
2c:f9:20:3e:ac:e4:9d:2a:47:62:89:c7:0c:9f:69:ef:c3:c4:
cc:bf:e4:bf:54:fc:d2:61:20:53:4a:0d:24:54:5a:08:b8:10:
f4:4a:4e:ad:2c:ee:60:be:e2:41:36:68:9c:ce:b2:60:ef:b6:
c5:c1:41:78:fe:3e:67:ec:12:aa:64:ec:5a:ff:0d:ca:da:10:
86:12:4d:7d:2d:60:5e:72:a0:c9:aa:22:c5:1c:f4:0b:05:b8:
0c:b0:f6:e9:cf:c4:19:dd:b7:d5:6c:7e:43:21:48:72:26:28:
fe:dd:dd:28:77:6d:63:dc:63:e2:08:a5:2b:bc:5b:7d:84:73:
62:80:b3:7a:62:4c:3a:02:7d:80:9a:b2:e6:e3:31:13:19:26:
48:a6:f9:ab:3b:ed:fa:40:7e:c2:73:cc:46:b0:85:b2:1f:37:
06:3d:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:25 2025 by rpki-client