Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: RbyepLa+tfS2jx5naxLqP+zXjoiW7dya3xuUW9XM6eM=
Subject key identifier: DE:28:D8:26:DA:8B:22:5A:46:4E:70:2B:A2:A3:E7:72:9E:3B:91:7C
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 0194BC3BC96419FBEF3389318B555FFBF523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: lcVlHkeMptUXSW/B7D98gLsU8hkSR3XahSNG90u6yu4=)
2: tkt4SudQfK9uwQrgGKvvYflAjl8.roa (hash: dFUnqKo0rasEdebFDefgA9DnqivcqZmMoexL2NOUY5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:64:19:fb:ef:33:89:31:8b:55:5f:fb:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=de28d826da8b225a464e702ba2a3e7729e3b917c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:73:ea:72:2e:9a:7f:f4:5f:a1:0a:e2:01:
22:79:f3:1f:da:9e:6a:9e:85:53:ea:0f:d1:ab:fa:
45:4a:b8:cf:db:f6:65:03:bd:96:d7:b8:7c:7e:35:
1c:f4:29:a0:de:e9:26:2a:1c:d9:36:78:33:53:cc:
f2:71:b5:e1:2e:12:bb:18:bd:da:36:21:5c:69:3c:
f0:a7:a5:f4:e0:a1:c7:46:3c:0b:28:f3:b1:8b:c0:
1c:26:74:57:0a:7c:06:ce:14:0e:31:4b:81:8b:0b:
ab:5c:9f:d9:8d:7c:47:d7:22:11:0b:08:63:a5:ce:
c9:21:93:3a:37:18:56:67:ff:7a:a4:ae:e3:0a:ba:
db:82:ba:a8:f3:e8:c3:4e:29:33:fc:55:82:11:52:
88:d6:d2:eb:df:ee:6b:68:3b:1a:1c:5d:97:80:5d:
98:20:e3:2c:00:b2:21:fc:57:4a:c3:87:86:0f:89:
85:c0:a8:f4:ef:d1:dd:43:6d:f7:2f:ee:b0:ca:38:
e2:05:15:54:d3:7f:57:45:6f:6b:9b:de:37:f8:bc:
64:b9:ed:eb:f1:fe:73:16:6d:78:7c:5d:30:dc:87:
b8:e2:c1:ba:83:e6:85:47:09:31:f0:ba:f9:49:45:
c0:4a:4b:11:18:ad:6a:a3:e0:5b:3d:87:a9:fe:67:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:D8:26:DA:8B:22:5A:46:4E:70:2B:A2:A3:E7:72:9E:3B:91:7C
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c7:74:6d:da:59:9a:48:84:62:8b:70:69:47:24:98:5e:de:
02:73:9c:0a:b8:b8:df:ba:4e:08:38:3f:f8:95:26:33:8f:71:
b8:16:06:f7:60:b7:58:be:41:ed:e1:1e:9f:15:77:0c:54:c9:
c2:a2:35:64:e6:09:a9:7b:23:e6:b0:19:95:df:e2:65:3b:06:
2e:f4:35:c7:ed:0f:97:05:09:56:14:6c:21:17:7c:b0:6f:71:
cd:02:8d:a1:b9:4c:4d:ac:04:8f:99:52:f2:76:1d:1e:5f:e9:
88:4c:bf:81:88:6d:2e:05:98:cf:b0:60:4a:f4:8e:5b:9d:b6:
94:d0:95:75:51:02:84:86:e8:de:70:18:e2:f5:c4:74:8e:67:
91:e7:72:e4:3d:3c:86:93:9f:af:db:7d:a0:19:52:a8:e8:6e:
b9:bb:cb:50:e9:65:1d:10:24:bb:a2:68:49:8b:ae:cd:6c:9a:
c6:90:73:32:af:4b:b7:85:c5:26:96:b4:35:68:33:08:21:94:
b2:78:a0:e1:ed:77:8f:a2:af:d0:bf:60:8a:32:3b:e9:9e:46:
04:ac:8e:fe:81:18:c4:07:1f:11:d4:ca:34:61:0d:76:0e:2a:
19:0e:cc:22:82:f4:f3:fc:4b:ed:64:b9:6b:80:b3:90:ec:28:
f0:b2:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:12 2025 by rpki-client