Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
File: KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft (raw, json)
Hash identifier: 8EtJ5mSH0ywa8FeT+Y0Adkf6F7ArDgEsE+gJDf9vRg4=
Subject key identifier: 49:94:61:6C:59:48:7A:56:8F:4D:7B:0D:15:4E:95:0D:7D:E2:79:DB
Authority key identifier: 2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
Certificate issuer: /CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Certificate serial: 0194BCE0CDD090D0EFDD9C929506BBB45517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
Manifest number: 0AAB
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl (hash: HEQECTgAhs4FVrNgKbNShzvJYoMoYNMK3W5wKLaobD8=)
2: ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa (hash: jpk5x0LJxA24GS/spf+1miQnvaNt5hobGzGQml9l9aM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cd:d0:90:d0:ef:dd:9c:92:95:06:bb:b4:55:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=4994616c59487a568f4d7b0d154e950d7de279db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:a0:c8:4f:f6:90:7c:02:76:e4:4e:1c:ea:
67:42:4b:20:23:a8:97:ba:7d:ce:02:90:cd:db:d1:
39:76:a7:f6:1b:72:8e:cd:db:38:75:2f:69:a7:af:
e5:a6:a7:4f:c3:e7:98:52:fe:bc:dd:46:f3:f7:15:
69:d1:96:0a:d3:4b:9b:ae:95:af:db:11:97:d4:30:
2b:40:c1:6e:2e:e3:4e:58:c6:8f:13:d6:ba:d5:84:
40:8c:5a:61:a1:8b:a0:b8:10:f5:a5:e1:94:9a:29:
14:8c:4d:80:18:e7:4c:f2:63:f9:55:ef:9a:19:ba:
28:12:21:a9:5a:0f:7b:18:ca:54:0f:22:72:c6:31:
d5:44:19:a5:ac:fb:de:a9:b4:21:0e:50:9c:83:fc:
47:be:d9:b8:aa:ae:43:9e:e1:fd:e1:fe:fe:d1:ee:
28:e1:b5:68:c0:56:8a:a7:37:e9:cc:40:40:56:47:
e7:2b:6c:cc:34:d5:0a:2c:21:c5:6f:82:01:18:10:
f8:75:14:13:7e:b4:10:48:78:ec:1a:69:81:12:cb:
d8:10:e8:63:a4:89:01:9d:bf:87:6f:37:50:6c:e6:
50:13:77:09:64:63:c9:7f:de:cf:f6:3d:8a:44:6c:
1d:78:37:e8:d6:45:ec:e2:70:d6:77:44:fc:d7:50:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:61:6C:59:48:7A:56:8F:4D:7B:0D:15:4E:95:0D:7D:E2:79:DB
X509v3 Authority Key Identifier:
keyid:2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0a:e4:24:a9:7d:6c:37:ad:de:df:84:9a:55:0d:ba:41:a9:
eb:96:10:63:53:ff:7d:94:5a:4d:35:89:cb:bc:15:50:0e:67:
18:b9:53:49:c2:4c:38:16:40:29:eb:00:9a:d9:cf:e6:29:0c:
6b:19:4f:58:8d:f6:6e:cf:63:ef:e5:69:18:33:64:c9:8e:b5:
35:a5:a8:b2:fd:e1:5f:26:bf:01:a5:b3:0e:8a:99:99:d9:4d:
5e:aa:a0:11:8c:71:b9:30:41:f1:52:41:00:2d:9e:88:de:d7:
4b:eb:f7:8d:89:9a:43:32:fc:a5:54:87:53:74:88:a5:87:40:
7a:11:62:15:74:dd:4c:28:43:48:a7:51:44:da:90:95:19:96:
93:65:0b:7c:5e:fa:58:67:db:5c:66:4b:f5:dc:e3:1f:7a:03:
14:14:4d:43:fe:67:19:89:c6:eb:3a:2e:8a:4e:8e:b8:c8:9e:
c8:53:87:d9:43:dd:bb:39:35:7a:47:0e:89:23:76:07:f2:38:
73:70:9d:46:c2:e7:15:8b:00:d3:cd:db:85:05:41:3d:7f:41:
30:a2:5a:31:90:4d:19:17:8b:f0:e0:d7:f6:a0:2d:46:41:2f:
e2:07:e5:bc:1d:23:24:b8:5a:5e:32:5b:6a:64:c9:6d:de:c3:
01:34:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:35 2025 by rpki-client