Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier: GTg/32AJ1WX2A77czloXBA4g+NGay1e33qBKOAC3wno=
Subject key identifier: 87:67:A2:4B:46:C2:A7:9C:30:B0:D4:3C:46:C1:D8:9A:FB:43:C9:A8
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 0194BCAA27EE5450FA8A662B10F2B094C131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=)
2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: ch01mH3oBGa4c0refdwBMfgzEIUHxib7ZwRfJjo2aIg=)
3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=)
4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:27:ee:54:50:fa:8a:66:2b:10:f2:b0:94:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=8767a24b46c2a79c30b0d43c46c1d89afb43c9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:1e:70:48:e6:a3:dc:bc:a9:b8:4c:9f:50:
0e:46:21:3d:c0:ae:77:a3:0b:ea:36:c6:3a:ec:59:
8c:28:96:71:48:0a:6e:26:94:69:c6:0f:71:59:90:
c4:52:a8:3d:4d:e3:68:00:40:f0:b0:65:6b:27:3c:
79:63:05:97:47:0e:0a:ca:c7:6d:7a:20:9c:1f:78:
7c:3b:28:a3:00:69:88:93:cb:a9:15:41:95:43:3a:
f3:1c:f1:c2:b5:b9:31:64:2a:37:8b:ea:54:63:19:
bc:b2:76:c4:b2:d9:26:69:fd:9d:46:30:b5:d6:1c:
ef:ef:6f:d2:7c:29:a6:17:1f:66:0e:23:52:84:09:
36:3e:cd:67:02:d1:c5:41:48:ed:58:ad:ce:27:78:
62:d5:bb:db:aa:e5:21:9e:c3:07:05:35:39:64:a8:
34:0b:44:86:d8:ad:c2:e7:ae:74:e5:f1:18:8b:4c:
db:29:cd:24:45:64:24:91:fd:84:0b:49:0b:ef:0c:
c5:48:10:b2:bf:57:d5:bd:32:69:4b:07:1a:db:99:
96:e0:59:57:c1:80:77:c6:1c:73:a2:8d:be:ff:01:
b2:b3:84:8d:45:b9:f4:2f:51:ae:3e:f7:bd:33:0d:
21:6c:ad:0c:b3:2a:05:f8:36:63:78:77:5e:2c:42:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:A2:4B:46:C2:A7:9C:30:B0:D4:3C:46:C1:D8:9A:FB:43:C9:A8
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:80:fc:31:57:bb:0b:55:a4:b8:3b:12:c5:eb:a5:0f:59:30:
d9:c0:a2:98:ee:5a:93:d7:ca:86:54:17:9e:83:bc:e3:f5:48:
d2:43:11:e0:cd:81:03:6a:12:67:11:f3:b8:8e:1e:37:fd:a1:
2d:02:c5:90:72:1d:bd:9e:c8:41:2c:8d:85:24:24:3d:8d:dd:
5a:37:2d:bb:5a:5e:7b:e6:0a:25:2c:20:28:55:b1:57:31:a9:
75:3b:47:91:c6:b3:a4:8e:fc:b9:c6:13:9d:39:4d:02:74:27:
08:e2:13:62:73:92:67:ac:9f:f1:85:92:db:bb:5e:07:6a:d9:
9a:95:be:f0:9f:40:43:1b:b6:b2:6f:d6:e5:ee:cb:f0:13:a2:
1e:c3:0a:87:30:41:12:ae:96:9f:9c:77:00:8f:a1:9b:6f:99:
a1:d7:35:e0:4e:2b:31:df:69:fe:3d:0a:2a:6a:cd:fd:e4:3b:
d0:bf:67:27:19:c7:36:82:6f:3e:90:53:4a:ce:28:71:3d:c5:
80:13:4e:5c:8c:a1:f7:4d:86:21:cb:33:88:16:59:d8:84:16:
98:d1:c6:bf:a2:74:64:97:14:73:0a:8c:20:3a:57:7b:40:4b:
b4:07:99:21:38:58:cb:a2:e3:a9:12:5c:1a:f7:4c:64:96:77:
43:11:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:43 2025 by rpki-client