Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: lOgG3wzKoDqxMEcyGJHVMdcOP9cnVa3ym4Pnv69b4tQ=
Subject key identifier: 50:7C:51:16:38:BC:AC:CB:5F:4C:C7:7E:45:57:6A:79:94:FF:37:AC
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 0194BD8572DFD5E5CD1B11F20C90458C3B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 08CA
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: vieDbnJx+oYqunEHuiENl1bdiZ9XtTRxn2/fIp5tbpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:df:d5:e5:cd:1b:11:f2:0c:90:45:8c:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=507c511638bcaccb5f4cc77e45576a7994ff37ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:de:35:81:89:e4:c8:70:47:e5:94:d0:f0:
40:6d:da:32:4e:41:ed:b3:8a:2b:82:b1:f6:c8:70:
ac:33:34:bf:e0:c7:71:48:82:d2:8d:db:d1:6a:5e:
32:b3:82:65:57:72:27:20:19:c8:e9:eb:6a:2e:58:
20:f4:27:53:48:09:41:1d:90:58:a7:a9:23:2b:f0:
af:6a:90:f1:e3:ed:02:d3:45:75:bd:80:01:4d:4d:
0b:37:2f:98:7b:19:52:87:a5:7b:1f:73:37:94:b6:
e7:a0:cc:a8:d2:3e:a8:f3:26:7c:f2:a7:22:e6:eb:
87:0b:99:53:30:83:ff:12:37:ac:41:7f:22:ca:01:
cd:d6:bf:31:5e:8b:75:ad:1f:9e:d2:fd:7d:66:f5:
6c:69:5f:a0:54:87:ef:ca:db:55:f9:c7:ce:6a:f7:
b2:7d:0e:a2:a1:c0:b5:f5:4a:a1:e7:34:d7:96:b3:
87:a0:2e:4e:d7:53:50:db:a4:f9:96:37:ec:c2:48:
91:dc:d4:f1:85:30:68:c2:d7:4f:3d:39:bd:97:50:
83:ee:10:18:3e:11:02:56:de:ca:f1:56:7a:cf:45:
0f:ef:a4:3c:18:d4:b5:25:b2:87:76:e1:f7:57:4e:
5a:4e:f6:36:90:4d:66:5a:1f:f1:3c:3f:ac:91:e5:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7C:51:16:38:BC:AC:CB:5F:4C:C7:7E:45:57:6A:79:94:FF:37:AC
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:62:5c:42:c4:08:6f:6e:37:3c:1c:43:17:78:55:69:9a:ed:
fc:7d:46:61:88:4e:c6:cb:41:3e:e3:6f:a9:74:9c:52:0b:b7:
a1:84:a2:cb:6b:3e:b1:31:63:6a:2d:08:45:50:c6:00:c7:c6:
41:9d:f0:a7:b2:99:b7:95:66:23:70:2e:49:a3:a4:fa:f0:4b:
f4:37:2f:d6:50:16:69:e1:11:69:b0:b9:0b:19:49:a0:a0:e5:
35:57:64:06:4b:d8:f2:c7:a9:5d:0a:db:58:75:24:19:ce:76:
86:7b:c7:9b:09:e1:5c:45:bd:52:86:7e:b9:ba:16:4e:d0:99:
93:58:5d:4f:59:8b:e9:28:ed:86:db:70:d1:3f:36:64:62:cf:
2b:bf:a9:4e:3e:74:44:77:38:8f:75:d7:59:9f:74:85:17:fa:
ac:31:40:11:df:f2:7c:fc:b5:37:e4:5b:28:65:ac:0b:15:7c:
cd:bd:38:e1:dc:48:6c:29:9c:3e:93:6c:3b:d9:da:e6:e6:6c:
8d:21:a2:07:a9:ae:fe:ef:11:33:71:47:f3:7b:73:6f:a6:32:
bf:34:c0:c2:40:58:48:a0:fe:02:06:61:e4:29:22:22:ed:5d:
15:53:54:6e:30:19:c9:9e:a6:d6:f7:17:15:71:fa:5e:bf:a2:
cc:01:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:50 2025 by rpki-client