Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: rz0bZy6+diLNaD46KsYW98IppJmBxg2xd3LEkSji0NI=
Subject key identifier: 4B:87:11:23:BC:40:C6:8D:66:D2:93:03:F4:60:2D:68:49:6F:DA:8B
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 0194BD4E5E6943550C654661F42DB8ABB0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: wLFtVuTq6DYNVGc2Md/QYuJoyTW2T8snyewDb+l9gmI=)
2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:69:43:55:0c:65:46:61:f4:2d:b8:ab:b0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=4b871123bc40c68d66d29303f4602d68496fda8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:4b:f1:85:a2:04:5f:7b:f0:25:25:3e:bc:
c2:36:7e:3d:c4:1b:cd:70:9a:4a:2d:64:cd:0a:92:
9a:cc:2a:86:91:5f:67:d0:53:f0:9f:27:a9:43:a1:
ac:05:38:b7:59:57:df:74:be:5a:55:e7:17:bc:46:
b9:9c:75:61:1b:48:83:4d:c4:2e:6e:45:41:a1:11:
cc:aa:ea:fc:d5:a2:9d:1a:57:6d:c6:a6:50:bf:67:
cd:28:6c:ff:4e:d8:b7:f8:0d:4a:df:40:11:8f:65:
ef:5b:1e:8b:33:71:05:96:39:b5:b8:74:f5:a4:0b:
e8:da:c6:8a:83:df:d9:ac:68:bd:b7:2b:30:b8:78:
33:7d:c8:ec:07:81:35:38:de:e7:e0:c5:f3:c1:3e:
68:71:07:82:80:ec:cb:8e:46:01:f0:fe:2c:7c:15:
f4:c2:01:c2:26:49:a9:0e:47:08:be:e0:76:e0:69:
8c:12:07:60:a7:ef:35:3f:83:37:08:2f:ad:a7:46:
be:ee:3f:54:24:88:02:77:8c:cf:62:0f:c4:aa:70:
a8:fa:0a:42:48:4e:cd:31:17:6e:61:e6:39:c3:e0:
a7:2b:5e:6d:a7:f9:e7:60:67:52:ed:09:cd:14:a5:
09:8a:7a:c3:eb:7b:e1:c0:f4:62:38:79:c5:54:df:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:87:11:23:BC:40:C6:8D:66:D2:93:03:F4:60:2D:68:49:6F:DA:8B
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d8:39:a9:1d:d4:22:76:4c:1c:14:d4:1b:00:15:71:16:80:
fe:e7:44:b6:92:18:93:30:f0:6a:10:c8:2f:e4:ad:00:e9:fc:
3f:ec:0f:e2:04:f1:92:d1:1a:e1:b4:80:4c:8f:1d:7c:82:d6:
89:5a:7a:ff:e0:dc:37:50:8d:af:dc:21:a1:88:68:73:b4:49:
43:9a:55:bf:c8:dc:a8:64:8e:74:9a:13:57:4a:0c:22:38:70:
29:fc:5f:8b:a5:cb:6d:82:96:e4:f2:d2:98:41:a3:37:4d:a7:
8f:28:09:b1:f5:e2:de:58:04:06:30:ea:5a:00:3b:e9:de:21:
8b:a9:39:6b:4d:ed:73:ca:b4:88:fd:32:5c:ea:bb:7d:38:c6:
fc:a2:4a:80:d0:dc:ff:99:5c:17:f7:9d:9e:92:a6:9b:6c:8b:
82:ef:2e:43:9b:b0:ca:1c:52:6d:4b:9c:87:9d:7c:91:7e:e6:
5d:20:d1:54:15:1c:09:45:ca:3a:b0:a1:be:1f:8b:cc:98:99:
eb:ba:fc:77:d3:8c:e3:54:e6:bf:d5:2c:bb:e6:ad:8d:d2:8d:
5c:9d:7e:e9:ff:3a:2f:64:bb:d7:66:f3:7e:04:38:50:2b:2c:
f7:6e:23:ec:7d:d6:6e:87:ac:9d:ec:f4:2e:c5:86:e0:45:89:
e0:84:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:31 2025 by rpki-client