Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: lmDtCfdRscVCG+HhoEmsmJ+SLGd0SdDWwHiih2MdsK0=
Subject key identifier: 9D:B0:93:E4:8F:DD:CF:23:46:AA:50:33:3B:B6:6C:0A:01:8B:17:DD
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 0194BD4E5940CB995E2F8DA77B2A0D5A1D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: qDtKWCkNdDcfLhIwjfVekUWKZdmKn4sqStSAtBWSm+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:40:cb:99:5e:2f:8d:a7:7b:2a:0d:5a:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=9db093e48fddcf2346aa50333bb66c0a018b17dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:a7:5b:19:37:7a:75:51:fa:70:ad:0d:04:
a6:23:43:79:1d:3a:bf:95:a9:8d:8a:31:35:2e:c2:
2b:94:55:15:04:d9:cd:ef:7a:19:65:49:02:8c:0d:
6c:12:51:53:43:76:7a:1e:97:81:52:c0:a6:ba:51:
87:c2:a4:9b:fa:ad:b7:16:e5:f1:1a:12:c5:6b:0e:
d8:c6:4d:be:55:a1:33:77:e5:17:ae:2d:4f:54:59:
72:a9:a0:71:b5:cf:b8:d7:72:14:56:90:38:ff:ae:
f9:e1:de:d9:f1:58:11:f8:62:91:9f:8c:eb:b2:2f:
5e:50:92:9d:7c:3c:2b:89:e7:90:a1:a8:ab:71:99:
ad:ec:4e:ab:d2:9c:ff:3a:69:a7:ff:9c:eb:cf:88:
06:71:4e:de:5a:f6:ed:05:21:4c:e9:ad:d1:cf:2b:
7f:f8:88:7f:20:3e:41:3c:28:86:05:df:c8:c2:73:
34:61:fe:a8:21:37:46:7b:88:87:52:4c:53:9a:52:
a0:fe:ac:ac:e5:b3:64:de:77:6e:36:86:b2:7a:01:
3c:f0:8f:44:cb:b1:eb:8e:72:b5:f8:f1:8f:19:5f:
9c:6d:e0:7c:eb:73:3a:74:6c:b6:2e:95:48:12:79:
b9:a5:81:cc:18:a7:ec:e3:f4:dc:59:5e:63:7d:20:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:93:E4:8F:DD:CF:23:46:AA:50:33:3B:B6:6C:0A:01:8B:17:DD
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:d6:47:fb:de:bd:e7:35:93:eb:f4:3c:6f:47:0d:95:f2:
af:c7:f5:fd:0a:53:b6:f3:ac:9c:4b:64:ff:b0:a3:2c:c8:c9:
35:3d:7d:70:d4:20:6f:ee:9b:4f:a7:18:b5:af:b7:3c:67:76:
fa:f6:88:f0:d1:1c:b2:ee:7d:61:94:6d:8f:9e:65:26:4e:f1:
59:9b:81:00:d6:ef:40:a6:ec:e3:8e:35:4b:2d:f0:ef:f7:a9:
a7:c2:14:20:6b:11:94:8d:21:d6:83:38:91:ae:3f:38:5a:5e:
7a:8a:14:57:3f:af:a6:d0:9c:b0:b3:19:01:32:48:dd:c9:b1:
67:1f:d7:27:ac:0f:14:0d:f4:1b:c9:fa:8a:6a:2a:58:21:49:
87:ce:64:f0:63:90:85:1a:99:15:d8:60:31:50:34:f1:93:34:
42:41:68:fc:ab:a2:7a:0f:99:b1:21:e7:37:52:49:7a:4e:e3:
75:85:89:4a:a1:20:f9:fb:4e:1d:06:bc:7c:1f:e2:cf:b5:03:
06:0a:b0:15:3f:eb:83:d1:a2:46:ff:86:9f:98:74:3e:18:8a:
f1:53:06:17:4b:68:0a:9d:5e:30:e1:6d:0d:0e:60:fe:3d:81:
f2:66:9b:c4:d7:95:b9:a6:8e:a8:d6:a3:e9:f6:fe:88:77:5e:
0d:38:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:24 2025 by rpki-client