Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: +r4ajypau6355s0DrOzKwX4MPb5Au5I5Di6s2Ig2Gk8=
Subject key identifier: 89:1F:CA:39:5D:B4:F4:E4:0A:DA:18:87:40:69:60:22:CD:AF:EC:36
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 0194BC730B13D03A242881558AB36A082232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 1386
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=)
2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: M0B8eANUWqxEcRBzO4RQA/Iy1n9yTUQGKIme7uKCMMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:13:d0:3a:24:28:81:55:8a:b3:6a:08:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=891fca395db4f4e40ada188740696022cdafec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:18:52:e8:be:3f:99:f5:19:f7:07:34:01:
12:7a:3f:bd:e4:8e:94:1b:02:66:9b:58:a3:8f:bb:
3d:0e:72:d2:0d:16:eb:66:ec:3c:0e:f4:36:b3:48:
73:ee:f9:2c:69:bd:2e:52:b5:e8:a3:14:97:f2:83:
09:9d:db:04:6d:49:f2:12:9c:b7:8c:ea:a6:60:75:
f3:26:f7:72:13:a8:d9:88:d0:fa:e3:b5:25:54:19:
5d:94:7d:47:61:2a:44:ac:75:fe:02:fa:f8:b1:a1:
cb:aa:ad:00:84:31:71:00:c1:0d:e3:6a:4c:7a:e8:
4e:d3:de:dc:91:69:ec:61:70:bd:5d:a4:f7:ca:c0:
ca:3c:98:93:b7:05:60:4d:13:54:b0:6b:4b:23:f7:
c3:f5:0b:a3:8a:72:b8:c3:64:c6:19:80:86:ed:04:
10:1f:33:3a:ee:f4:6e:31:e2:1f:f6:99:90:87:b7:
a0:6d:e9:5a:bf:44:25:a1:9d:11:30:65:ba:d2:3f:
bb:8d:4e:20:c9:27:36:f2:11:b1:32:a2:1e:41:67:
10:2c:c4:de:04:3b:56:e3:43:e4:4d:1a:06:bf:2b:
5c:18:c0:f6:43:b0:40:2a:b1:38:93:81:c8:70:71:
b5:24:e5:27:1e:55:af:47:0a:9e:55:c2:58:aa:4f:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1F:CA:39:5D:B4:F4:E4:0A:DA:18:87:40:69:60:22:CD:AF:EC:36
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:da:80:f3:c3:8a:5e:95:f3:09:cc:af:40:34:43:69:3f:75:
43:93:9f:3d:46:1c:1d:55:b7:83:36:58:64:54:6d:97:81:ae:
99:d1:ba:e1:97:d1:06:88:17:7e:20:60:a1:f7:75:1b:73:46:
00:48:8b:5a:9d:84:ce:f3:90:1a:b4:e6:39:d7:bd:2c:83:c0:
fd:68:b7:cb:8c:b8:f4:d5:8c:08:f0:1b:71:c7:f1:a1:8e:af:
0d:9b:f0:9f:ba:db:fc:be:de:e3:80:b1:ee:c8:3d:42:10:43:
4c:1d:6b:0a:ef:09:56:01:e0:fa:78:fd:44:e7:32:91:82:4b:
5f:fe:61:ab:79:ce:39:e6:fb:9f:3e:f5:e8:92:cf:91:a3:67:
03:de:30:72:9d:e9:5d:52:a9:b4:9c:72:8a:b1:a0:d7:52:65:
db:27:45:3e:8f:ec:72:5e:22:0d:b7:a6:12:06:b6:a8:bb:ac:
b6:a8:0c:86:83:f7:79:e5:4f:1d:24:e9:dd:36:ff:cb:3b:21:
42:38:d6:fe:bd:e8:30:b1:26:52:d3:0b:ad:ba:af:4c:eb:e8:
b5:3f:a7:7a:d9:51:68:9e:a2:c0:43:47:cc:1d:a1:17:fc:ec:
27:22:35:4f:f7:17:5c:07:29:8c:81:40:d4:dd:df:9c:ad:cb:
dd:ea:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:43 2025 by rpki-client