Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: kv6cpPhq3zSyhGz0rKk9VnJs0JHbd/cRosCvizlEFBw=
Subject key identifier: 3B:30:2D:1A:04:92:8B:F9:1F:4B:96:FB:CF:71:81:62:E4:4D:E4:FC
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 0194BC3BE2D6D9210D7799428E62C94D9534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 0E29
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: 49OShczn1w5I4KfIISDcyHxFzPdz/ngfl1HQfQk+V1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:d6:d9:21:0d:77:99:42:8e:62:c9:4d:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=3b302d1a04928bf91f4b96fbcf718162e44de4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:7b:d2:27:97:6f:0f:48:d6:af:d7:45:09:
34:9c:15:8d:95:c9:2e:f6:d0:ba:9b:34:8b:8a:88:
44:3f:9f:d0:b0:b0:7b:db:12:9b:9f:7d:05:da:6a:
c7:ab:be:11:48:fd:f2:43:ea:ec:52:6d:ef:ca:92:
34:c0:35:71:51:0c:87:9c:c0:ed:4e:49:33:a8:2b:
eb:ca:5a:76:a5:cc:d4:d8:e5:62:2b:36:91:46:0d:
65:a3:0c:26:33:b5:5c:02:03:7a:42:87:a5:f8:9f:
71:e1:a9:a8:3e:58:c8:cd:48:78:ff:cd:20:9b:82:
85:30:b1:c7:ef:13:f2:e2:ba:de:41:b3:28:fb:73:
26:c0:6d:a4:e9:7a:f4:0e:ac:a5:ac:96:30:66:90:
8b:80:a8:d5:40:96:99:7a:52:3b:4e:a5:f3:d3:ee:
0f:99:7d:ef:31:1c:db:6e:bd:b7:8e:8b:89:a8:be:
0e:55:24:0b:9a:0e:e8:90:ae:d4:5b:ee:13:9e:41:
a7:80:05:bf:67:c3:93:d6:1b:1e:ca:97:c8:51:3d:
d2:4d:62:66:05:a6:b9:5b:b4:4e:fa:68:a2:25:8a:
19:5b:1a:c8:2c:79:a4:2d:d4:a3:6f:b3:ce:ed:90:
93:b9:96:6f:31:ac:86:9d:09:c9:2e:83:71:d1:78:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:2D:1A:04:92:8B:F9:1F:4B:96:FB:CF:71:81:62:E4:4D:E4:FC
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:74:e0:0a:5e:79:bf:9f:ac:55:34:da:aa:6f:b1:f4:0d:c5:
91:8a:d5:5b:a0:8c:40:5f:3b:c4:44:62:b0:da:00:b8:a4:25:
22:ed:15:38:8c:dd:0d:e7:96:f7:f2:1a:de:69:51:e9:87:43:
1c:a0:29:10:2f:3f:b8:ed:82:06:f5:ce:9c:04:bc:3e:9e:53:
a1:ae:fc:95:a5:a5:83:50:a8:d7:f4:e6:5f:26:45:05:b8:d2:
2e:17:49:71:43:d3:53:7e:73:05:36:1d:5d:99:b3:8f:52:0c:
cb:a3:fd:6f:7a:9e:00:9c:01:bd:c4:0a:4e:9e:0b:f6:e6:3d:
4a:c5:d4:e2:4f:50:40:1c:31:29:47:b2:f7:6c:33:5c:ed:09:
c1:ed:5c:6d:6f:46:ac:18:62:04:f5:e7:11:02:82:1a:61:a8:
76:46:80:f2:c4:1a:49:b5:70:f1:c1:6a:51:c7:b6:66:30:f4:
19:26:89:59:bf:2b:4c:fb:99:b6:b8:aa:d1:67:fe:d0:53:52:
85:35:ad:2f:fb:7b:7a:0e:4a:69:5e:c0:ea:32:b0:15:bb:39:
66:7a:61:8f:1b:f6:99:6b:72:41:81:7d:98:b4:2f:45:99:9d:
86:32:82:a2:0c:c8:d8:4a:04:e6:17:a1:3b:3e:21:29:8d:35:
8d:dc:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:19 2025 by rpki-client