Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: c8JB9RLWW/yaEA3o/NvI4wypXSoGwpbaDFQWysdk3po=
Subject key identifier: CE:E9:55:B6:8B:74:CC:83:BF:83:99:46:05:5A:FA:51:C7:5A:7D:61
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 0194BBCED2349A43C3C14FFEFDBB2A7181E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1097
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: sW2GUlfYrqce3Kos/KZTwp9SB+kjPSK051R1Yd9EIuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d2:34:9a:43:c3:c1:4f:fe:fd:bb:2a:71:81:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=cee955b68b74cc83bf839946055afa51c75a7d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:12:2d:e8:0a:1a:d1:29:e4:02:8b:5a:20:
9b:a3:d5:11:29:8f:a9:33:76:f2:c0:fe:09:7d:d7:
99:63:77:4d:0f:de:51:a7:75:d5:76:b9:16:b4:8b:
c0:1f:6c:99:04:65:4b:19:cb:f3:7b:a9:49:10:78:
ff:d2:40:98:3c:44:f8:0c:e1:a6:4b:6f:be:5c:d9:
af:33:cd:3b:a7:23:63:a4:44:9a:a4:70:c7:d2:8d:
59:0a:68:66:8d:77:15:2f:e8:93:74:10:b3:71:ea:
fa:03:d3:32:41:d2:b2:15:9d:ce:f0:7f:e6:bc:6f:
2e:56:4d:cf:0b:ae:d8:32:49:5b:78:76:74:87:3d:
4b:94:cc:72:0c:b2:0a:48:95:9f:1b:de:ca:90:27:
87:a6:c9:12:d2:73:ba:73:b8:a2:30:18:3c:1d:42:
ab:26:b9:28:0e:70:b0:9f:77:6a:b1:be:7d:5e:7f:
23:40:f6:a0:ab:a0:3b:4e:d7:f1:58:26:00:ab:fa:
8d:50:de:8f:d9:a8:c1:0b:89:cf:ab:ae:c8:83:c9:
a8:04:15:76:57:f7:f3:d5:81:2d:8b:fc:1d:a3:3b:
c9:d0:2a:08:e5:a6:55:23:ba:41:99:1e:8d:4f:d9:
ca:82:39:95:44:7b:b3:e1:1b:3b:80:35:3d:46:cd:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E9:55:B6:8B:74:CC:83:BF:83:99:46:05:5A:FA:51:C7:5A:7D:61
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:94:09:e4:95:5c:8b:ad:3c:85:b4:a8:15:f1:c5:81:a8:ec:
c7:59:a0:6a:53:62:28:dc:e8:9f:43:dc:2c:f2:eb:77:c3:90:
17:25:a6:bc:bc:88:a2:19:d5:a4:69:06:54:df:d4:4c:67:b3:
3d:f7:82:0f:1b:42:9d:f7:40:24:62:aa:a0:2f:22:15:75:d8:
95:66:4e:a2:68:2c:75:0b:ca:b9:6d:1e:b9:2b:69:a1:a6:34:
e0:71:57:36:d1:42:f8:1e:c2:6d:8c:ee:b4:bb:f2:43:30:c5:
f9:31:75:d6:73:97:c2:ef:7c:25:30:a2:fa:2d:64:6f:0a:74:
19:dc:ee:37:c6:d9:4f:57:2f:a2:d6:51:cd:c5:46:af:3c:e4:
9a:89:17:48:54:f3:fe:89:9a:70:c0:84:73:e8:42:75:ec:cf:
2c:18:eb:9f:6a:96:a4:bd:15:4f:77:3c:92:6f:82:0e:0e:ea:
cf:7e:94:a1:64:c3:5f:21:e5:3d:1a:3e:1b:36:40:54:ed:de:
e8:c7:57:5a:9a:ba:b3:aa:7d:ae:73:1b:cf:36:67:e5:cc:b7:
2d:96:e0:75:85:53:e3:18:52:53:6c:45:f0:dc:69:10:3b:6b:
ac:f2:e1:85:db:f4:40:06:19:4a:22:85:55:1e:52:0a:98:22:
23:00:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:09 2025 by rpki-client