Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: 8nImYHjI80gOHa2LLJ1FNOJFQ7oyRf+G5MIPBnDcmkw=
Subject key identifier: DC:FD:B6:8E:68:A8:AA:E9:23:08:66:25:DF:C0:CC:50:1F:53:B0:9E
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 0194BD17AD449C9A42F88705670039EB76CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: 8mO0nv/dRdsp+wK8HI0bJu8eh5PKDfGxJ+qfq+TK7kc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:44:9c:9a:42:f8:87:05:67:00:39:eb:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=dcfdb68e68a8aae923086625dfc0cc501f53b09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:f1:e5:0c:c4:97:fd:ba:bc:ea:20:9d:ac:
28:99:9c:09:e5:7f:12:c0:df:b9:51:8e:4c:18:f9:
8c:ab:d1:89:4e:a1:eb:0a:1b:56:e0:8b:1a:d2:0a:
79:03:fe:38:a5:6a:7f:81:59:e3:fe:21:1f:c7:5d:
1e:38:cc:d4:8a:af:9a:87:2f:ce:4f:42:ea:7e:a8:
2d:ce:df:44:ab:ce:3d:c0:4e:c3:51:02:d9:0b:66:
44:0e:d0:ed:ae:a9:0d:e0:b1:fd:86:ea:bf:0b:57:
2d:74:21:54:67:34:40:b9:87:1d:88:5e:2f:c1:56:
f3:04:fc:db:56:49:b1:80:30:33:33:f4:43:7d:c9:
68:21:4a:93:fb:45:55:f1:b1:86:d4:d8:41:7d:cc:
f2:ba:eb:9c:8d:f2:1e:67:e6:f9:6e:77:5d:c6:58:
f3:90:53:52:7c:8d:04:49:53:e5:f0:49:71:a1:d6:
1b:37:36:83:2f:13:a8:82:cc:5c:d7:0b:1b:3e:1c:
01:cb:c6:16:dd:e1:2e:bb:fc:aa:10:64:e5:dc:ea:
eb:9e:86:c4:6e:d6:d0:b2:a5:d4:d8:7b:bf:59:de:
83:41:33:71:e2:91:f3:93:ae:c1:df:a2:c4:74:d5:
ac:64:f0:11:b2:58:1c:74:f0:6c:03:d6:1f:90:60:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:B6:8E:68:A8:AA:E9:23:08:66:25:DF:C0:CC:50:1F:53:B0:9E
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0f:f3:2a:5a:a6:fc:77:55:fa:7a:03:92:55:eb:68:e3:bd:
83:90:b9:d0:32:82:73:b9:fc:1c:e6:66:4b:04:d8:cc:87:79:
76:61:ce:e3:f0:e8:55:c5:6a:e1:3b:24:e3:b4:15:c2:46:e9:
3f:e5:61:41:b5:5c:e5:0c:c9:8a:31:e3:e9:9f:75:11:d6:80:
0b:58:df:d7:b3:04:91:2d:bc:2c:91:3b:62:61:d3:ba:08:9c:
5b:5d:83:90:3a:29:40:9d:50:b5:7f:46:a0:1c:0a:c7:49:cc:
c8:42:73:a6:46:b5:17:17:8d:02:8d:82:af:a8:46:93:33:88:
26:a1:6b:c1:bf:9d:e9:29:cd:83:8e:a2:bf:4f:e7:09:bd:02:
ea:03:24:a3:fd:18:91:c8:b6:9f:da:c8:c5:1c:08:cc:15:89:
ea:c8:34:d4:a9:4c:24:c0:39:ae:7c:cd:f3:79:6b:81:1b:9f:
d4:90:39:53:5c:07:16:3a:96:c8:09:d6:bf:97:5c:b2:39:98:
e4:53:8f:43:5f:75:4e:20:77:89:3e:21:48:1c:f7:75:a7:5c:
24:18:7b:ab:0a:dc:97:ba:e6:16:8a:0d:bb:50:95:ad:fc:5f:
1d:b5:f2:50:19:c9:7d:5d:4f:ea:53:27:b1:9e:8b:a0:5b:25:
79:13:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:24 2025 by rpki-client