Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: VWOP6/MHi90P6n9EXY42TDf3t4G0D2dyBx7PyRX7Y6Y=
Subject key identifier: 9E:EF:A4:EC:75:E5:A0:2B:A9:98:EE:01:9B:AD:0A:3F:9F:C5:62:03
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 0194BCAA405F02A956FAC0D9CA8C71D3E142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0778
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: rNoW6Iod7dx3HuKKaT1s5mghtk3lBjjMHCuw9NNORXc=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:40:5f:02:a9:56:fa:c0:d9:ca:8c:71:d3:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=9eefa4ec75e5a02ba998ee019bad0a3f9fc56203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:3c:37:6e:4a:30:82:37:2d:8a:b3:55:6f:
04:7f:24:37:5a:a5:d7:90:8f:de:bc:14:90:3b:5c:
9f:5c:13:64:6d:b9:d6:69:14:77:37:fc:a3:6b:ba:
13:14:58:7f:26:4d:4e:33:51:fb:23:7f:8c:85:b9:
43:ca:95:33:cf:57:b5:88:50:41:af:32:2b:02:4c:
cc:a7:7f:e9:09:bb:87:c8:ed:26:7f:0a:be:79:78:
00:d7:00:e5:cc:68:cd:64:6b:d0:e8:61:66:bb:7e:
b2:7b:a9:3f:d6:b1:60:d8:19:00:40:c3:b2:7e:13:
06:2a:07:d3:00:65:19:fc:43:d3:3d:32:d1:ba:2d:
db:99:69:1e:78:95:30:ca:e8:c0:fc:1e:16:ce:73:
2d:29:01:45:da:dc:e3:f4:4b:da:0d:52:59:69:2f:
2e:84:2b:46:37:26:a9:a5:a8:52:de:bd:be:b4:54:
61:58:8e:2c:e1:a6:4b:ff:ed:f1:04:aa:28:9b:19:
96:33:d7:4e:48:2c:7b:d1:4c:ce:4c:87:0a:6a:ee:
5e:10:5c:ca:e8:d3:1a:40:80:fe:94:4a:a9:53:6b:
8a:dd:68:0d:4c:26:f6:6d:b3:da:15:a5:1e:e7:5a:
10:ad:be:6a:51:11:02:17:c0:82:34:0c:8c:af:50:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:A4:EC:75:E5:A0:2B:A9:98:EE:01:9B:AD:0A:3F:9F:C5:62:03
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4e:9f:55:34:13:21:db:09:9b:a5:4f:89:07:7e:a0:17:3e:
56:ad:f0:c5:a0:99:95:e3:c7:8a:1f:02:9c:dc:99:78:42:c8:
21:87:ac:da:0d:1c:0e:1c:ef:f8:2b:e4:b6:0a:39:e3:3e:6c:
ca:07:92:2a:7d:29:40:f3:31:75:35:11:1a:d2:92:5d:ea:66:
13:df:20:27:d1:65:0e:c4:f6:e2:4f:eb:87:fd:e5:f4:dc:fa:
cf:9c:57:87:3d:f7:03:80:ca:0f:c0:01:fc:f3:cb:ed:28:c4:
4c:44:12:43:19:f2:8b:60:04:a6:ef:45:c1:12:e6:1c:2d:71:
47:11:51:5f:14:df:65:24:f0:9a:cf:0c:18:98:cc:f3:a3:e4:
49:d3:63:da:f7:dc:2d:cc:e0:a5:a8:24:83:42:de:6c:f6:5b:
9d:d5:fb:7f:d3:96:a3:2f:0d:73:0b:2e:ca:e8:41:57:89:56:
43:ec:27:e1:fb:fa:62:0e:ab:8e:b9:ae:6b:27:19:11:9f:b8:
37:3d:39:f6:3d:2b:7b:e8:7e:40:6b:4b:b7:7e:27:fe:c4:38:
bf:b6:63:79:5f:4e:45:44:f8:59:8d:23:5c:32:20:75:ab:29:
f4:bb:00:00:18:77:e9:aa:d9:22:c6:9c:60:7d:8c:06:7d:40:
32:90:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:23 2025 by rpki-client