Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier: ZLjMnnbQs6WTFBN9qVa+hjr+6lXCRkxlO8tkkPAj2yk=
Subject key identifier: 0B:DA:AA:EC:87:05:0A:53:BB:C3:EB:A8:D1:F0:15:A3:15:90:84:14
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial: 0194BC72AD4CDB57A3120D9022DE0F15A4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: XWM8mwZvkMkZBuDGJvzlJj+MzQsifWhxTxr0JgzbbQU=)
2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:4c:db:57:a3:12:0d:90:22:de:0f:15:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92479cae284765d628044119009880d28a7560b1
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=0bdaaaec87050a53bbc3eba8d1f015a315908414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:fb:a6:8e:ff:4b:11:97:eb:cf:77:43:c3:
bf:a9:4e:eb:d6:28:47:c8:08:6e:56:fb:00:a6:87:
01:71:61:1e:79:4b:fd:ad:78:c0:6f:0d:c9:58:ec:
de:13:f9:a9:e0:82:9b:9f:b8:5c:72:21:37:d2:b7:
af:ef:9d:9e:ce:8b:5a:87:f4:42:32:d8:5f:b6:aa:
36:62:ea:1e:71:5c:fe:07:0a:a5:11:8a:f9:c9:04:
d3:ca:20:05:52:b0:03:af:77:c0:39:5d:cb:5a:ea:
a3:0d:e6:ca:54:75:06:da:e4:26:48:40:0e:cb:98:
cb:c2:95:2d:02:06:8a:e5:f7:a0:2b:70:97:cb:70:
ee:d5:29:e4:08:6b:3f:36:46:68:ca:66:4d:f2:4b:
51:af:06:c3:f5:0a:0d:da:2e:e1:5e:a8:c5:9e:c9:
ed:49:62:14:b5:79:1c:fb:38:b2:6f:e0:59:96:39:
bc:6a:e2:b5:61:b4:8b:8b:58:1d:21:bb:5d:8d:55:
e4:40:de:5e:b7:ef:c0:c8:e8:83:a9:c6:8c:23:23:
83:c5:4e:31:07:50:ef:11:22:7e:11:db:a9:db:c7:
80:ab:cd:87:2a:e4:72:2a:58:b8:9f:54:5a:17:ad:
41:d4:68:4c:6f:c4:45:45:8b:19:9c:61:38:d9:88:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:AA:EC:87:05:0A:53:BB:C3:EB:A8:D1:F0:15:A3:15:90:84:14
X509v3 Authority Key Identifier:
keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:31:5a:22:90:f7:53:46:13:d3:60:f6:4c:b3:6d:c2:ca:
a9:81:a2:f8:16:ad:2d:9c:81:5d:e0:30:a5:88:d9:79:65:13:
76:30:ce:c1:db:04:77:3d:67:bd:94:36:9b:c4:b1:56:0c:fb:
92:16:51:3e:82:e1:f4:20:59:43:ef:13:1d:c4:29:e7:44:35:
08:e0:33:76:8f:d9:2f:1c:ae:bc:31:69:28:6d:e6:0a:7e:25:
ff:5b:e9:be:42:9a:82:0c:e3:87:62:70:55:ca:3b:4e:fd:a1:
0f:22:ea:f5:56:f7:d2:d1:5c:d9:ed:81:a5:86:5d:74:44:c2:
9e:35:86:71:0a:93:5a:4a:1c:dc:ab:5f:2c:29:5c:e9:e5:79:
66:b0:fb:6b:3c:35:17:d4:d3:fe:07:cc:ed:a3:e5:81:3b:bf:
95:9f:87:5b:a6:1c:7c:22:08:6c:0e:e0:f6:dc:c2:c4:19:dc:
a2:ce:00:88:2b:ff:ba:2f:72:44:29:fe:e7:8c:85:8c:0a:eb:
df:75:a8:4e:2c:c6:1d:75:53:58:ce:91:ed:4c:d1:8c:31:30:
fa:69:d7:87:9d:d3:5e:02:38:81:47:b4:bc:e4:3e:5d:3a:74:
ec:20:e7:c9:04:9a:1d:1a:f5:1e:ef:c5:f4:2b:f5:92:06:80:
50:2f:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:34 2025 by rpki-client