Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: nQByR0LuTuZkXgcKZ1M5V0WK+AG1bcmmUFXl7ZDCEKE=
Subject key identifier: DC:38:53:DF:A3:10:2B:F9:81:62:14:E1:2B:A5:FC:08:6C:C7:53:9C
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 0194BCA9EAC738C613329846DED54BB07A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: TxwhfWoAiQQ3sAqjaCgPcGksoLbiFVY3dgXIQ3/Pj0c=)
2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:c7:38:c6:13:32:98:46:de:d5:4b:b0:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=dc3853dfa3102bf9816214e12ba5fc086cc7539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:a3:c4:97:fd:89:78:90:81:79:22:4b:8a:
c3:ca:6e:2e:f9:92:83:50:8c:43:5a:4c:35:85:45:
07:da:db:80:41:36:bf:09:51:65:04:a8:4b:12:a9:
5d:b5:3d:a4:8e:d9:47:98:a8:c2:c2:1c:db:71:2e:
cb:91:19:27:b8:e6:65:22:67:31:00:40:db:95:e4:
75:8d:de:01:e4:3b:51:ca:07:59:e7:b4:3c:d5:66:
c2:93:f9:00:56:3b:d8:20:ba:fd:73:65:10:62:43:
34:8f:56:c1:34:79:ad:d0:e6:a0:ba:22:cb:91:7b:
9b:fe:ee:8e:db:7a:93:76:a0:60:6f:98:e2:99:10:
a6:1f:32:82:bc:27:64:8b:34:1a:58:89:ff:0d:f7:
a2:5e:ab:ef:d1:ad:81:a0:54:6e:5e:b7:95:58:6e:
c1:86:cb:9b:18:74:c3:66:7f:be:02:3b:87:9f:e4:
38:21:21:15:f4:da:df:50:22:0c:42:1b:ce:bc:5e:
18:b4:a5:2b:12:1d:87:b4:9a:ae:5f:56:03:43:db:
36:d9:c0:c4:8c:27:50:6d:e2:60:5a:5c:c8:dd:b8:
54:43:be:08:a6:87:ca:f7:62:ea:91:74:5d:61:e5:
48:da:18:65:af:6d:ff:83:3a:d0:3e:6c:b9:1e:fe:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:53:DF:A3:10:2B:F9:81:62:14:E1:2B:A5:FC:08:6C:C7:53:9C
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:66:a7:0e:90:36:91:f7:8c:69:24:03:a6:f7:93:f7:16:c2:
29:3b:c5:be:b6:60:d7:8e:d8:00:22:68:19:0a:a7:aa:e6:0e:
e4:5b:af:e9:28:fd:b8:4a:17:79:4a:c7:60:d5:01:bb:a9:90:
b6:3e:8a:60:8b:2d:52:58:55:cf:83:68:d9:86:9d:c1:49:ae:
7b:78:8d:d3:a1:d3:31:89:94:01:db:7c:43:d9:df:a0:80:de:
ac:32:c4:e1:0e:cd:dd:ca:94:b2:d9:dc:0f:dd:0b:d1:aa:0c:
10:2c:8a:c0:80:5f:57:e9:ac:47:4f:0e:ab:50:62:4a:22:a0:
19:ba:08:de:80:22:aa:74:cb:91:de:f5:1b:26:03:f7:60:7c:
9e:e5:fb:2d:bf:c3:71:ef:a9:72:7d:86:97:28:63:17:23:44:
05:16:29:b6:73:e7:e4:e0:cc:1f:64:bc:bf:93:db:c6:a9:41:
a9:46:a6:68:6b:c0:3a:ec:7e:1b:ee:67:68:33:8a:44:18:df:
1e:5e:11:44:c8:e1:2d:9b:62:e3:fe:5d:c7:df:df:44:b9:88:
ec:2d:ce:aa:23:29:88:12:00:ab:91:92:63:69:56:3d:a0:13:
26:88:b4:20:f4:69:81:50:95:1f:f4:df:6b:f9:6c:b5:1f:ab:
6f:17:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:52 2025 by rpki-client