Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier: 9FSiGIIo4Nf/sVfEftvbifAXXqbxiYcZF5a/x0cAQ2c=
Subject key identifier: 82:09:E7:0A:37:79:7A:17:56:24:34:93:30:43:A4:F0:CA:30:2A:5E
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 0194BD4EA94BD667E13EB3EEA6E7E26F514B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number: 0ECC
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: nJv+sNGTn+PmFndPrWHhZvxyuKliRw5kW1c9Vo047Gs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a9:4b:d6:67:e1:3e:b3:ee:a6:e7:e2:6f:51:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=8209e70a37797a17562434933043a4f0ca302a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:56:f1:f4:22:77:e8:65:f1:08:e9:9c:08:
82:90:28:5c:60:b3:1c:c8:cb:cb:45:5d:8d:e0:da:
30:32:e6:d3:d3:48:ed:92:d2:34:1f:fa:51:7c:e2:
85:5c:58:3c:26:04:b2:56:42:38:03:3c:f8:6d:66:
f0:2c:62:43:ab:87:4f:f1:17:72:6b:4e:4d:6a:68:
20:40:cc:02:70:cd:68:6b:f6:3a:ca:b0:6a:1f:1f:
f9:a3:78:12:e2:56:77:c6:2c:40:0f:93:11:e8:52:
e0:6c:93:ef:1b:ea:a4:76:cd:70:a2:35:da:51:9f:
58:ea:9f:dd:bc:88:4e:03:e0:5e:e6:ea:32:34:fe:
64:ad:48:de:c3:ba:c7:87:5c:54:37:99:d9:96:47:
6b:e2:bb:e5:e5:ea:9d:10:56:b9:15:ff:63:62:96:
42:d3:95:9a:4c:23:58:58:5c:9c:3a:03:9d:2b:35:
cb:f2:1c:23:ae:9d:05:6c:97:6d:de:6b:9f:45:ea:
f6:cd:dc:9c:0e:56:92:37:93:0d:4b:d9:1b:f6:e5:
59:ba:00:e1:1c:f8:6b:67:d4:9e:85:f3:a8:52:5a:
bf:52:6a:df:24:70:fe:c5:30:82:a6:41:02:ab:36:
38:a0:f6:9f:ac:53:87:f7:17:e4:19:8f:59:73:cf:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:E7:0A:37:79:7A:17:56:24:34:93:30:43:A4:F0:CA:30:2A:5E
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ed:f9:71:66:1c:9c:8b:00:5d:83:67:61:e1:36:8e:b0:32:
b4:b0:91:41:40:39:eb:0b:f2:9b:41:3a:29:0b:d6:bb:cd:a8:
5e:89:c1:6d:12:e3:ba:d9:c4:c1:44:69:e0:3e:16:2c:47:cc:
df:83:a7:dc:fb:82:45:25:f8:f6:1c:d2:7b:a9:b3:15:27:cd:
f4:de:9b:98:1b:9c:c9:0b:c9:56:58:0a:84:45:5d:03:9d:5f:
09:23:b6:b1:28:b6:79:72:b9:ea:20:b6:17:39:f0:d7:47:4a:
d7:f8:8f:72:85:64:28:06:d6:cf:77:f6:ed:4e:83:99:e2:3e:
b4:21:bb:0d:f0:90:eb:3e:49:91:ef:5e:b1:bf:9a:d0:77:1d:
07:83:4f:6c:82:6a:7e:fb:a8:2b:dc:8b:83:2f:b4:ca:6a:01:
59:0e:c0:94:35:1c:f8:c5:98:66:35:f7:55:9c:6a:e0:df:32:
36:80:e4:88:f7:78:3e:69:7a:81:60:4e:9e:6a:15:97:87:8a:
f2:38:37:e0:03:bc:3d:5b:9d:17:58:e2:95:91:c4:ad:a0:37:
64:07:ef:af:51:70:0a:a3:1e:4d:24:ef:af:85:b4:d0:08:52:
4e:6e:b2:5a:70:35:98:ad:8d:60:b6:9a:82:84:d7:a9:90:77:
5a:f4:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:22:14 2025 by rpki-client