Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: E8Scro2G9dvkrMXO5BeouM2/nkdADOboPxWNr2Hkci0=
Subject key identifier: 65:F7:E0:4F:85:95:1B:20:C5:F3:22:81:F2:19:A4:E2:DC:DA:6E:E8
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 0194BD4E4C365A8174DE075C9C196B3F97FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: nnDVBf609Fn6Vnyslml8ZpevO6awxZHmCF8fhuDdPng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4c:36:5a:81:74:de:07:5c:9c:19:6b:3f:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=65f7e04f85951b20c5f32281f219a4e2dcda6ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:fb:ed:c9:a6:10:ca:fe:42:ef:3b:00:67:
a7:44:73:ab:59:bb:7d:b2:65:1b:88:22:17:b3:79:
12:c4:c7:2d:45:4c:b6:ff:59:be:cd:0b:f0:e2:21:
29:f0:dc:60:51:47:54:13:13:5f:d3:0a:49:c0:93:
56:61:9e:df:85:3d:78:24:6c:da:32:a9:85:9d:5c:
9b:19:80:94:43:50:06:03:86:d0:ee:71:c5:f7:54:
bb:47:8b:07:a8:99:17:b5:d8:17:4d:26:a3:48:85:
3f:c2:98:4f:bd:27:73:77:cc:e5:f0:6e:81:0f:47:
52:33:43:c9:11:42:60:bc:dd:82:dc:77:31:5f:16:
c9:7b:a2:5b:4b:87:09:d8:f9:3f:57:c9:e6:15:96:
85:db:2f:24:8d:d1:6d:c2:ac:f7:92:84:c4:0a:d7:
89:8a:38:16:62:6d:ce:d1:c4:b5:69:39:fa:06:0a:
fd:c2:d5:23:85:e6:bc:d1:ec:ea:e3:35:db:4c:70:
92:c1:42:01:94:4a:54:a6:e1:12:8c:5e:14:53:76:
4b:a8:ba:86:52:b8:23:d6:fa:25:58:1e:75:41:f7:
22:99:c7:e8:e6:b2:98:79:ed:2c:08:26:7d:46:30:
d8:38:60:95:94:95:f0:15:e3:21:92:ec:a5:d6:bd:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F7:E0:4F:85:95:1B:20:C5:F3:22:81:F2:19:A4:E2:DC:DA:6E:E8
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:66:00:64:f3:08:1d:b4:c0:8d:85:00:c0:ec:07:ed:48:96:
71:d6:5b:0d:20:5c:58:20:96:85:ef:e4:d2:80:07:5c:bb:f9:
41:bb:ee:e0:bd:3d:24:82:f3:07:99:ae:e8:5b:47:6a:14:21:
fe:69:60:c1:e6:db:74:b8:a3:3b:f9:30:6c:6e:ac:04:27:b4:
40:aa:c3:85:b1:59:7d:84:a0:69:e7:ec:67:00:a9:01:a4:a7:
00:04:5e:54:c5:c9:1d:49:af:be:7e:8d:cb:69:d9:86:a5:eb:
07:0e:58:13:80:e3:b2:ba:ef:10:dc:7b:4f:62:59:4d:af:5e:
1c:eb:cc:08:42:19:f2:d4:21:c7:f8:da:0e:b9:71:6f:8d:44:
59:a6:fe:34:5b:c8:f1:2f:b3:02:1d:6e:3e:f2:1f:4f:ba:28:
66:5b:cb:de:34:c9:9a:b5:b6:94:88:dd:b5:3f:a3:8e:ea:ca:
9b:24:37:b2:07:25:a6:79:f5:f8:d2:eb:b7:50:fd:22:69:b0:
32:4d:1a:33:b2:d0:9b:eb:60:1d:4e:87:cf:55:b1:fd:5d:53:
59:d7:16:61:aa:12:01:6e:4f:bf:26:1b:89:40:70:e7:ef:2b:
2a:74:d3:e7:e9:cb:5e:78:ed:32:fa:9b:63:df:fb:59:73:13:
fc:ef:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:10 2025 by rpki-client