Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: 3iqT7/alwg09zuv3ptgHwAPKEX0j9PRyO4LQJBhUZNg=
Subject key identifier: 50:63:E9:38:97:C2:D9:17:FA:A4:F8:42:78:C7:C0:F6:3C:C2:DD:DD
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 0194BCAA382488A93C8BA3C4F0E50D964D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: FE
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: URLwgL+JEHph+3NGU7CZlM1o5kRiPTROyxnG+9VRz/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:24:88:a9:3c:8b:a3:c4:f0:e5:0d:96:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=5063e93897c2d917faa4f84278c7c0f63cc2dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:06:c7:17:7e:d9:d4:52:49:82:50:82:aa:
5c:bb:d1:43:a8:51:c6:8d:c6:a4:94:13:1a:b9:9f:
92:6b:e4:75:f9:84:52:00:19:b8:de:a6:f6:ee:46:
1f:d2:7a:c0:10:4d:7a:3a:f4:9f:45:4b:12:d7:be:
3f:ac:bb:39:3e:cf:79:c9:b0:e3:d4:96:8b:c7:08:
4f:ed:17:3a:4b:ea:2c:81:76:b9:02:0d:40:aa:93:
0a:d1:e1:d6:35:30:67:2b:f4:6b:c2:40:a1:2b:6c:
3b:5a:2c:b9:c2:b2:5b:5a:80:30:a7:8b:1e:6c:16:
97:bc:96:e5:92:27:00:33:51:a0:a9:36:67:ef:2f:
d5:5f:40:f3:7e:37:3d:5a:14:21:5b:79:15:1b:0a:
93:fb:23:cb:9b:05:ee:e7:77:68:ce:70:6e:11:10:
fc:34:f7:13:96:10:26:cd:8c:aa:ef:97:a3:0e:3c:
59:12:c4:83:ba:af:3a:7d:e3:bc:33:b3:9b:1b:64:
0f:aa:d4:42:0d:10:fb:9f:47:17:30:71:9d:e8:53:
e4:5b:98:7d:96:55:c9:7f:82:af:74:20:77:df:ed:
34:b6:e4:5f:b7:63:a2:24:25:93:ce:eb:8b:54:e0:
24:7a:58:64:6c:b5:e8:73:fb:dd:51:41:e4:0b:74:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:E9:38:97:C2:D9:17:FA:A4:F8:42:78:C7:C0:F6:3C:C2:DD:DD
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:61:19:8e:62:86:5a:fb:94:d8:75:15:1b:02:2b:78:1c:ca:
4b:26:ca:ea:9d:fd:ed:fd:6e:33:3c:a7:96:a3:bf:fc:3b:85:
ea:ef:82:4c:3a:75:66:1d:e7:a3:b0:ec:cb:4a:25:b6:4e:03:
cd:1d:65:28:1a:1f:87:9f:a6:99:9d:f1:44:1e:0e:6d:a1:cc:
69:2a:39:51:cb:1c:a0:2d:7b:b6:f0:47:7d:79:6a:7b:3b:fa:
87:83:cb:20:8a:bc:7a:4a:c5:ff:9b:78:27:18:4c:6c:12:2a:
70:2e:21:9c:06:bd:bf:ee:56:ec:d2:f2:d6:33:1e:4b:48:d3:
07:23:59:af:46:4b:54:21:15:6a:8e:bd:c9:5a:62:dd:6c:17:
a6:73:0a:1e:86:c5:6b:45:c0:e4:30:96:50:da:e7:5f:9b:d5:
6f:e0:ae:7d:42:d0:8c:07:29:0c:03:f6:ca:13:0d:8a:33:7a:
76:27:12:9c:a4:70:bb:a4:95:89:98:21:99:d9:7d:04:c0:49:
cd:4d:69:f3:bc:66:ae:09:f3:b5:84:ea:ec:d3:35:29:02:bd:
d0:d7:1a:20:c8:9e:ce:75:6d:ab:22:c3:79:ef:b9:09:21:71:
23:53:5b:ee:d2:d4:f1:3f:58:d3:17:f7:dd:a7:51:8e:92:72:
85:a8:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:44 2025 by rpki-client