Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: 83X0xGhBhwAcPuq+yac/gGMpUyBHjms/awADOFBO2l0=
Subject key identifier: E3:E6:0C:DE:03:58:03:86:DD:48:39:22:B0:44:03:FC:4E:D4:5A:60
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 0194BCAA37471E3E2F235EBFBC93604E6721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 1309
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: 6Z1JXWOm1mMqariF6ZOHqpJWu61vt473V+MgHWtuh7Y=)
2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:47:1e:3e:2f:23:5e:bf:bc:93:60:4e:67:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=e3e60cde03580386dd483922b04403fc4ed45a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:1b:30:0f:e3:e8:bb:bb:ee:c9:9d:03:3c:
71:d7:9a:3f:91:11:05:78:e8:07:0d:97:80:88:48:
73:8a:b4:21:98:74:e3:58:0f:72:4a:b3:13:bd:56:
45:c3:d2:a5:5c:e3:3d:72:90:2d:2c:08:37:05:1d:
cc:03:9f:1b:f8:b0:79:eb:1b:2a:f8:59:af:f4:e3:
77:a5:bd:9a:01:e2:16:a8:dd:55:15:ae:fe:39:f0:
22:87:bf:35:f2:2d:b6:16:43:83:29:96:1b:03:9e:
07:43:69:8f:ab:93:ee:ac:f1:00:f2:47:c9:7b:8b:
39:d6:79:2f:33:40:aa:29:33:2a:c8:c5:e3:44:9d:
9e:27:57:6e:9f:c3:54:2d:99:9f:5e:b1:f2:c9:63:
4f:a8:ed:f2:2f:4d:d0:58:a2:00:f3:65:ef:c9:f3:
94:b7:6e:03:cb:6a:30:6e:c3:6d:0e:2f:1d:10:3d:
b6:fa:cf:40:fe:cc:65:d0:4d:2c:28:13:dc:eb:ea:
d3:ff:f8:05:e3:a6:ff:cb:66:e8:66:4a:c4:c3:76:
2d:1d:63:18:c1:5c:93:f6:f2:a4:64:89:7d:59:8c:
de:0b:4a:4d:a8:c9:67:8d:10:bc:d8:71:d5:81:15:
f3:fe:fc:c8:dd:a5:af:5c:53:74:6a:4f:35:f1:6c:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:0C:DE:03:58:03:86:DD:48:39:22:B0:44:03:FC:4E:D4:5A:60
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:79:d0:ed:3a:59:15:72:cc:da:3c:42:a6:bd:b0:ea:c3:03:
d3:a1:99:41:c6:34:3d:0c:62:37:2f:76:c7:70:45:bb:08:a4:
fa:d3:7c:c7:74:5f:e1:0c:76:45:88:db:d6:80:50:f4:78:42:
7b:d2:46:30:0d:6d:32:9a:c6:a5:fe:df:f2:1c:72:40:96:6b:
c9:6a:c2:f0:4e:1e:81:11:44:5c:dc:de:63:30:3e:80:2c:8d:
a3:b7:c4:22:7b:21:d6:55:24:c0:72:1f:7f:da:79:87:8a:ae:
cb:6c:c9:86:8e:87:b7:18:95:24:ea:f8:84:88:74:47:8d:79:
6b:5b:16:01:bb:0c:54:45:30:eb:16:a4:a6:23:3f:0c:95:ab:
ee:0b:51:de:d7:b4:20:de:29:3a:5f:fb:44:ca:e0:f5:0f:cd:
25:7b:6b:3f:8e:64:17:49:e1:c5:b5:d3:18:06:4b:9f:3a:d1:
3f:97:b3:07:75:fb:19:f5:13:8e:07:97:61:7a:ef:8e:36:af:
67:e9:9c:50:a1:7d:fc:e8:0f:6e:94:06:ed:df:9b:4c:45:ad:
6c:23:1a:ee:24:c3:6b:99:ee:71:df:5a:a5:2d:66:a3:e5:dc:
20:8e:dd:0a:7d:1f:49:7a:84:64:a8:db:cc:87:94:dd:66:72:
40:30:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:09 2025 by rpki-client