Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: SWW6X0nh3DePjP4/qJKLPw9KNS4uS9GIi60sYRk514c=
Subject key identifier: B4:98:7D:41:FC:BD:15:F2:CD:01:21:5C:BC:B6:87:01:31:66:1F:DC
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 0194BBCE94CD8F5AA67446D733CA1B7A8AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0B3C
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: 6/rD6iOBj2IngSa0QW8cBPwDnN9A68vDVJ0ohcu6tuI=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:cd:8f:5a:a6:74:46:d7:33:ca:1b:7a:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=b4987d41fcbd15f2cd01215cbcb6870131661fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:af:99:9f:7d:5b:31:2d:cc:d3:14:26:0e:
23:0b:9c:01:aa:f0:ec:7c:90:f4:ef:c8:46:70:f9:
91:1b:09:a5:77:8d:43:2f:c8:85:12:b1:e7:ca:de:
a8:52:cb:20:7e:b3:0f:7c:bf:18:d2:39:1c:48:4c:
6b:a6:b8:48:d0:5b:61:af:1f:5d:4c:33:d9:4e:cb:
46:08:65:32:bd:74:a8:b5:29:46:9b:50:f6:30:d3:
8b:e7:8b:ae:c9:0d:af:96:7d:e1:fb:f9:36:72:50:
f1:4b:f4:5d:24:a9:2a:32:9d:e3:96:79:c4:d3:30:
41:f5:10:a1:d5:8a:50:45:fe:ae:5d:5b:02:f7:57:
4c:07:5a:42:ca:49:dc:b8:31:d2:e2:f9:83:61:12:
f7:e6:3c:c2:87:34:5d:3c:21:2d:a7:c3:d6:e2:84:
8e:bb:14:41:15:57:56:74:c9:c4:58:d0:e3:dd:fb:
78:e8:e7:95:b6:2c:2d:5a:70:00:ce:19:b2:42:16:
11:f9:9b:00:94:81:37:c4:c9:4f:94:03:cb:68:60:
04:18:c1:78:e1:2d:2f:62:0b:06:75:36:a4:35:87:
43:b5:1d:57:b4:d8:67:52:56:08:d6:3e:0e:d1:7e:
80:fe:cf:5c:49:12:c9:0f:84:de:88:2b:ef:ee:aa:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:7D:41:FC:BD:15:F2:CD:01:21:5C:BC:B6:87:01:31:66:1F:DC
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d6:93:84:2c:a3:f6:90:8d:30:f7:b1:e1:d2:e6:15:f5:d6:
d0:4e:ab:0f:9a:58:c2:f4:48:18:c5:f1:9b:23:a1:3e:ce:2a:
c9:74:e5:fd:65:ba:d6:5d:f3:2a:8e:be:ac:cc:ce:f3:20:ec:
e0:bc:fb:84:2b:c9:71:1f:cf:b7:1a:b9:ad:25:ab:20:65:3a:
0c:8f:84:e0:1e:33:7e:e0:51:73:31:4d:96:f2:7f:f6:31:18:
f3:e9:74:c4:01:7d:5b:d0:5d:28:b1:e8:bf:ab:3e:ed:c8:f6:
76:4c:e7:23:cc:fc:ec:81:51:71:e2:75:3e:9c:77:70:d3:a3:
0e:83:6a:9f:e8:f6:7e:c6:35:7e:d3:1b:bf:1c:6f:d4:a9:86:
41:ba:57:46:01:14:61:01:45:96:19:7a:39:66:c1:78:ef:07:
1c:bc:89:4c:c1:28:00:75:b5:a9:38:7d:d8:0a:91:ce:c9:ee:
6d:46:74:7d:ac:be:3a:02:62:0d:f5:8d:97:56:17:ea:30:2b:
53:d7:d7:a1:bc:b1:89:d1:20:e8:05:ae:cf:d2:a7:dd:e8:b8:
e2:51:82:7f:0d:4f:df:9d:8e:75:b1:13:6b:c3:df:1e:d5:58:
c1:c0:2d:00:12:ed:0f:1b:cb:49:6a:f5:bd:57:2b:66:dd:c3:
b2:df:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:00 2025 by rpki-client