Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/KfFNQRwg7PxJYhX82w9D2EchkJY.mft
File: KfFNQRwg7PxJYhX82w9D2EchkJY.mft (raw, json)
Hash identifier: IR8TsLtzbF2rBITZ4GWf7NjJrzEtUd6LHdtNnszWKFQ=
Subject key identifier: AB:65:26:54:17:D7:9D:F1:91:C5:DD:DA:09:A9:F5:65:4E:35:A5:FD
Authority key identifier: 29:F1:4D:41:1C:20:EC:FC:49:62:15:FC:DB:0F:43:D8:47:21:90:96
Certificate issuer: /CN=29f14d411c20ecfc496215fcdb0f43d847219096
Certificate serial: 0194BBCDC4A1A4C2F27E713F47BFF3971D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfFNQRwg7PxJYhX82w9D2EchkJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/KfFNQRwg7PxJYhX82w9D2EchkJY.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: K3k_GCXnaMv59dLKq-rHfPOR6HE.roa (hash: 5Q6jyJMRb9gad/mJLct+/fYWsLJ0GiEE1wJJESuoLsM=)
2: KfFNQRwg7PxJYhX82w9D2EchkJY.crl (hash: ZLPsGX8QM4tj79mvDm3CFf0XkUFOqyIK8+QrYjBiZw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:a1:a4:c2:f2:7e:71:3f:47:bf:f3:97:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f14d411c20ecfc496215fcdb0f43d847219096
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=ab65265417d79df191c5ddda09a9f5654e35a5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:f5:20:4a:51:ce:13:a6:c2:54:2d:87:3e:
a8:c6:d6:51:2f:6b:d9:36:3d:f6:b7:d5:d1:41:0d:
17:f5:46:e7:a4:90:d8:cc:5b:f3:dd:b2:6f:51:ce:
8c:29:90:67:a8:bc:36:34:fd:ed:19:3c:ee:24:78:
a5:f7:1b:27:71:1e:c0:b8:00:1a:31:b9:d4:7a:1a:
68:23:87:04:f9:a3:50:d6:61:f2:f6:0b:62:b9:10:
0b:c9:bb:4b:a8:6e:fb:64:1a:9e:76:15:84:82:ba:
5d:05:7c:72:d7:0c:ae:16:e9:41:c6:e9:62:5a:ff:
78:bb:10:be:27:ec:c1:03:35:16:41:09:f5:f2:e2:
c8:1d:ce:45:c8:16:bb:99:d1:2f:26:57:74:75:96:
c1:71:fd:a7:2c:0e:21:bf:1e:50:14:6f:5e:aa:fe:
d2:b4:b0:cc:93:21:74:fd:0e:29:6e:09:46:5e:af:
5d:eb:fc:50:f6:7f:43:64:0d:43:13:e6:ff:cc:13:
e6:8a:c8:a6:51:c4:d1:51:7a:b6:80:17:7f:29:13:
d1:78:03:8b:d5:51:d7:44:5a:d3:5b:56:c9:ed:1d:
f5:4f:a4:01:6e:cb:0f:2f:43:3a:a6:ea:ce:4b:c7:
ba:c3:c6:a2:e8:36:ea:a8:6a:79:cb:77:f9:c7:d9:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:65:26:54:17:D7:9D:F1:91:C5:DD:DA:09:A9:F5:65:4E:35:A5:FD
X509v3 Authority Key Identifier:
keyid:29:F1:4D:41:1C:20:EC:FC:49:62:15:FC:DB:0F:43:D8:47:21:90:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfFNQRwg7PxJYhX82w9D2EchkJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/KfFNQRwg7PxJYhX82w9D2EchkJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bcf272-d751-45be-9856-018a3770da77/1/KfFNQRwg7PxJYhX82w9D2EchkJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:1a:46:c8:76:36:36:82:69:2c:9c:f7:ff:89:06:ea:65:
0c:74:a9:7b:ee:bb:4a:e1:83:83:85:da:5f:14:6a:af:76:63:
75:33:7e:86:e6:c6:34:ec:2f:12:a1:dd:38:fc:a8:54:73:6d:
9a:7f:35:41:09:ea:43:87:ea:d5:ad:d8:79:cc:b2:fd:5d:39:
d5:a4:83:f6:58:51:d1:8a:45:98:71:a4:45:53:a8:92:d1:26:
51:26:02:93:7b:86:aa:1b:24:70:1d:f7:13:f7:be:39:c6:c4:
f8:04:dc:8c:38:38:c0:32:b9:c8:81:57:f2:97:c0:cf:54:e9:
e8:bd:7a:57:0b:24:00:53:30:2f:91:71:e8:85:d6:0e:8f:18:
90:d6:15:5e:d5:db:99:ee:59:c3:a4:ff:1c:5b:39:1d:d6:2f:
41:71:ba:6f:b7:75:71:23:6f:7a:84:be:47:22:cc:5b:79:e2:
d9:ba:62:4b:e9:be:15:5f:60:3d:9f:2e:3c:eb:fb:38:bc:7c:
f8:f0:e6:52:35:f0:5b:4c:e9:31:58:ab:1d:49:1b:db:93:11:
27:a0:b6:70:13:c0:35:a9:3e:dc:45:d1:62:33:0e:b2:af:e0:
23:27:85:00:5d:e4:2f:a9:ef:a2:20:6a:39:9a:76:10:2f:b3:
66:00:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:38 2025 by rpki-client