Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
File: KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft (raw, json)
Hash identifier: qtmPhfC5ATyX2WHwAR/xGY/oFJHD3gCP7D5+IXnxUXI=
Subject key identifier: CE:D5:32:FE:AF:05:17:4F:00:57:7A:6F:19:2D:B1:D3:75:72:08:A8
Authority key identifier: 28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
Certificate issuer: /CN=28843db96e4f459b87df8c279057eed69bb9b862
Certificate serial: 0194BD1751C05F852962726FCBDBBC1AC0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: C5Gcuv2gc5uFwke_GvIiYxRqvf4.roa (hash: aAHqvnwWD8oItQ342R5b0KuB97GMKDOjFhJ8IpWVibI=)
2: KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl (hash: QW+u0sJLXhJsgEP3jHR14ZfIrwdEa80MLI+kGfPLZdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:51:c0:5f:85:29:62:72:6f:cb:db:bc:1a:c0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28843db96e4f459b87df8c279057eed69bb9b862
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=ced532feaf05174f00577a6f192db1d3757208a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:65:68:cd:1f:67:4a:a2:b0:1a:15:d0:9f:
0e:b3:56:80:7c:cf:e0:16:80:a0:2f:3c:f9:6f:8b:
87:6c:c6:e5:25:eb:8b:5e:e8:32:a6:df:d6:4a:c6:
bd:d9:d5:45:4e:a7:1c:c1:ce:45:c1:ab:cd:0c:09:
f0:c1:99:b7:9f:b0:b6:9c:c9:f6:25:7a:3d:94:88:
14:7c:b1:20:7c:00:3a:0b:df:fa:cf:53:ed:a0:28:
45:c4:09:b4:f2:b0:cc:93:e9:41:99:b7:9a:75:61:
0d:5c:e8:6b:88:97:25:4a:a8:24:06:f8:d0:7e:2b:
52:55:58:21:c9:56:fc:4a:cd:07:bb:0b:45:1f:de:
71:b3:fb:96:f2:96:bb:c9:30:78:2e:49:90:6a:0d:
88:10:eb:61:9d:38:e3:fd:84:d8:b2:97:0e:8a:5d:
4f:d4:10:15:f4:1d:7f:6d:c6:a4:7b:00:c3:6f:81:
e1:cb:b2:02:27:14:ac:3a:cc:92:7a:7d:d4:60:c4:
82:b4:3e:4b:1b:2a:d7:d8:0b:50:85:f5:e5:e2:a1:
e8:b9:ae:78:1d:98:63:22:e7:da:d4:09:5d:ff:3f:
0c:ce:83:86:c5:4e:88:8b:8c:bc:3d:01:9a:b6:3c:
e3:71:08:83:7f:c4:7f:2e:8f:c1:21:c7:69:ed:66:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:32:FE:AF:05:17:4F:00:57:7A:6F:19:2D:B1:D3:75:72:08:A8
X509v3 Authority Key Identifier:
keyid:28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cb:4f:b0:34:2f:78:88:0c:4a:ea:80:22:ae:e2:c8:48:41:
68:8b:ae:c3:4b:1d:be:bd:fb:1b:b1:3c:fb:27:8d:71:4c:8c:
06:74:9b:4b:37:2b:ae:9f:9d:79:5c:86:b5:11:67:fc:fb:75:
ad:8b:9a:f2:62:6d:ca:1e:fe:c9:0f:f5:53:eb:db:2a:6c:7b:
46:98:3b:ff:a1:a6:0e:c7:96:b4:3c:dc:66:6d:3a:09:f6:17:
18:ab:23:57:bc:1d:2d:49:e5:f5:c7:d9:47:1d:af:a8:f8:b1:
6a:8f:dc:ab:95:41:57:0f:37:f1:54:f9:d6:8a:27:6b:fb:c8:
e5:d0:87:0f:d3:f0:13:0b:b7:fa:aa:af:63:1a:c4:90:a1:88:
25:1c:04:2b:92:3d:4b:6a:3c:8e:ca:e6:a2:80:70:ea:69:fb:
19:18:f6:1b:07:91:a5:5e:28:f2:64:c8:21:4d:9f:11:f0:75:
de:2b:06:e2:3f:b9:42:c5:2b:02:d7:66:b2:e8:63:3a:68:d1:
fc:22:4c:2a:47:cb:cf:9f:d8:6e:36:0a:1a:fc:a8:63:45:a4:
3f:e2:1d:9e:38:6f:b2:d7:e5:45:ea:e7:b1:01:2d:06:e1:85:
b0:ea:5b:74:7e:a7:8f:a2:34:79:0c:cb:ef:c6:eb:26:ec:89:
da:9c:22:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:23 2025 by rpki-client