Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: XoJXu3nzh6v4W67zxSzGXm82q57CNl/3qZ7hiiPxfRg=
Subject key identifier: AD:35:3B:07:2B:7D:3F:66:FA:3D:2A:0E:A3:43:F9:A7:B8:4A:C2:06
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 0194BC3C0789D14A84A28FC7640960C81799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0D6C
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: ptNfcY0/ObN0fysQepuj5fa/IitU8Q0iqbwfrD+BXqA=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:89:d1:4a:84:a2:8f:c7:64:09:60:c8:17:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=ad353b072b7d3f66fa3d2a0ea343f9a7b84ac206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:a0:c5:c9:38:60:1f:eb:a4:d7:4e:8d:59:
e0:90:ed:a0:ad:e6:11:5f:ba:75:d4:3d:47:47:c8:
61:3c:89:83:c4:5f:70:66:fb:68:45:df:20:e2:87:
62:95:03:fd:3f:c8:78:17:44:81:ca:e5:f3:ef:dd:
78:51:1c:4e:56:3e:44:6c:43:34:8f:d5:f0:a6:99:
cd:22:24:73:9e:bb:2c:aa:9e:fb:c5:15:7c:65:9c:
a2:41:69:2f:92:67:ac:e4:c0:59:93:b3:f5:b8:d9:
42:24:2b:db:e9:61:94:a5:fe:74:db:50:69:59:0f:
a8:3a:5a:ec:53:eb:99:83:21:0e:41:b1:4d:d9:38:
9e:e6:90:7c:10:24:59:c2:e2:95:ab:28:91:16:51:
5a:98:3d:cf:45:f2:df:0a:1a:d5:dc:10:39:06:ef:
bf:f4:87:84:24:9c:ba:00:13:b6:1f:c5:81:e4:34:
fb:e4:66:0c:6b:12:12:ba:cc:f4:85:c1:dc:8b:3e:
27:fe:d2:45:b2:83:0c:d9:57:87:b4:75:cb:99:1d:
72:76:91:83:8a:e4:2e:80:09:2a:c0:e7:d4:1b:7a:
58:1d:85:12:20:7d:ea:57:53:77:f3:4f:34:1a:c1:
ad:1e:4f:71:52:48:b7:d3:cc:02:5f:52:84:1a:8e:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:35:3B:07:2B:7D:3F:66:FA:3D:2A:0E:A3:43:F9:A7:B8:4A:C2:06
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:82:78:a8:c1:7f:f6:82:f7:c9:b6:29:d9:90:4d:2c:25:
a9:cd:98:ba:3c:43:08:27:64:5d:af:bb:fb:bb:c1:70:bb:1e:
64:a9:4c:17:08:63:31:18:64:76:47:f7:68:f4:bc:4d:5b:ac:
7a:ac:c6:e5:6d:bb:52:0b:2c:70:a9:01:a2:99:88:ea:29:e9:
00:b2:41:43:3c:7b:96:69:d7:4c:76:01:c7:94:5e:d9:fa:b3:
b1:fb:36:eb:0f:b1:c9:e6:92:dc:8e:97:29:34:4e:3c:a2:a4:
b0:d3:9d:73:a6:e6:b2:79:aa:bf:77:7d:fb:d0:03:67:9c:f4:
aa:90:c3:3f:09:d7:b3:8f:a3:c9:64:db:1c:b0:5b:54:f4:f5:
16:86:e4:81:2b:e4:0a:19:a4:54:23:d5:8c:24:4f:83:7f:8b:
c2:66:46:08:78:44:73:8c:38:59:81:dc:14:a6:3a:83:63:47:
aa:48:e6:86:1b:1a:87:e9:5d:49:82:47:57:6d:98:41:1e:b6:
7a:a4:fa:db:01:33:fd:2f:6d:73:92:b8:52:86:02:19:45:86:
a3:0b:66:13:e9:ca:61:cf:d4:c4:4d:76:45:95:dc:9c:04:d0:
7b:94:a7:19:47:e2:7b:c2:0b:fc:d0:30:b6:b8:8f:43:de:62:
41:cb:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:19 2025 by rpki-client