Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: G6Vw+9QeyYs8v3VlSQdxYhj5JiQr38yVKiIAN7R6GDI=
Subject key identifier: 8E:E5:A4:F8:7F:B9:C8:F1:08:3E:31:61:94:43:D6:29:51:20:03:B6
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 0194BD4E6569410F5470552B1CC92246111B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: mqDg2LsVQbtBp6oiRtJ+hv/zboDjrdJpvTIXXJh6RZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:69:41:0f:54:70:55:2b:1c:c9:22:46:11:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=8ee5a4f87fb9c8f1083e31619443d629512003b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:1e:74:9d:e0:d9:55:ba:38:39:a9:6a:af:
96:9f:a0:ab:59:c8:b1:c4:4a:39:9a:75:7c:02:29:
ba:a8:10:16:fd:13:12:20:6c:6b:3e:b9:0b:9d:e2:
0c:cb:a1:e6:67:68:15:9e:bd:2c:e3:f9:3d:cc:38:
93:2e:d6:ad:c9:95:66:60:98:d3:b8:6b:b0:3a:e9:
03:72:06:39:b0:4e:c5:17:a4:4f:9a:3a:60:40:73:
2b:b0:31:a8:e4:b8:5a:bb:2d:4e:60:46:97:07:f8:
7d:67:19:42:f1:f7:70:d5:09:2f:33:dc:87:66:47:
6f:5e:24:d4:15:c1:ca:b2:59:24:75:45:40:54:05:
30:34:2b:13:1c:08:ef:48:88:03:bf:73:75:d7:85:
55:f0:fb:17:cf:7b:56:b3:71:58:22:c6:64:e6:b9:
43:5a:fc:0c:80:9d:db:d2:d8:59:b1:86:3e:21:6a:
66:66:53:b8:90:e3:8c:12:27:73:fd:63:c6:64:af:
f0:fc:fb:bd:cf:5a:fa:44:3a:73:f1:d7:0e:41:a0:
85:16:c7:ca:0c:1e:cd:57:cd:3c:90:3f:bb:53:4f:
55:92:a5:a3:0a:46:f7:38:16:ee:21:74:63:b4:cc:
78:93:1c:61:bc:8b:26:5d:47:34:ce:8b:d6:f4:7d:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:A4:F8:7F:B9:C8:F1:08:3E:31:61:94:43:D6:29:51:20:03:B6
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:62:60:4b:fc:df:12:31:9b:0b:f3:7e:5b:b6:69:f0:2c:f1:
e9:5d:63:70:89:af:2f:0d:5a:c9:b7:12:0b:d1:28:e5:70:b3:
64:a9:bf:2d:c6:6b:3d:20:cf:53:98:2e:8b:4e:91:d6:59:c1:
31:46:d9:44:e1:df:80:f5:86:c7:d1:13:61:a3:79:0b:be:20:
67:52:68:02:59:4b:5b:4e:7e:bf:f2:40:9e:58:d2:58:77:4b:
07:c4:48:83:e9:0b:35:eb:1b:13:0e:2b:7f:29:7b:cc:48:38:
71:05:8f:f5:9f:ae:c3:29:94:48:09:d0:8d:ff:2d:63:32:72:
d3:d8:2d:49:0f:c7:fe:b9:5e:40:53:a5:05:d4:7a:a3:b7:fa:
5f:da:b0:b5:48:a7:73:d9:c6:f8:eb:d0:d7:fc:51:1d:ef:e1:
79:5a:72:45:97:c7:d2:e3:8f:0b:96:09:e0:2c:ea:18:cd:85:
f6:3b:7e:82:0a:07:37:52:fd:4c:7e:1e:51:24:0d:07:60:d4:
12:2f:76:d9:5f:06:ff:2c:c3:89:a9:13:d9:f7:76:41:4a:49:
dd:bd:f5:a8:05:9b:4e:80:23:7a:5c:55:e8:bb:f8:76:21:55:
6a:9e:56:81:5c:ff:d6:e6:38:ed:e7:9d:a1:23:e9:a7:b5:f3:
87:ee:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client