Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: ZJzdQRNQrRgQtabBmlmT7JFfxZ+TZv7PCQljalr1JPs=
Subject key identifier: 05:7A:59:95:F3:EA:C0:9B:EF:2E:A2:0B:BB:96:59:3A:10:31:AD:47
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 0194BD4E3A4160C792E3455FD707DE710B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 0FD1
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: xyPPgEjB5YQWU1GOANG6aY7k8Anx5CYKH5Jljb5zvRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3a:41:60:c7:92:e3:45:5f:d7:07:de:71:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=057a5995f3eac09bef2ea20bbb96593a1031ad47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:76:89:33:de:f2:1e:00:2d:09:6d:f5:21:
13:e3:59:d1:8c:aa:cc:75:95:df:a9:d5:0e:a0:40:
02:8f:6a:c7:72:da:ce:f1:83:39:65:43:9e:8c:ae:
b1:b9:fc:f5:62:48:aa:93:d9:82:9d:4b:80:7d:1e:
ac:36:f4:cc:93:a7:b1:d3:5f:10:2a:2d:d1:12:43:
0a:e4:f8:17:59:2a:66:cd:80:d3:d7:e5:20:6b:88:
e5:4c:7f:ae:17:a6:f4:94:24:4d:49:c6:38:52:03:
13:ee:0c:56:b5:e1:44:5e:c0:7b:30:c5:bd:ee:50:
07:85:16:fb:dc:f4:18:b2:5e:9e:f8:e4:f9:00:09:
03:4d:97:34:88:dd:88:56:31:05:f4:44:4c:5a:17:
dc:5c:14:60:6d:83:7e:c4:03:a0:88:47:b3:69:a6:
db:c7:5a:37:30:f6:13:35:7e:9e:e2:c9:9f:df:2a:
7f:91:d7:43:ca:7f:a1:54:14:7c:0b:7f:1f:de:0f:
2d:2c:87:1a:2c:b7:fb:67:8b:b5:72:7c:52:74:b8:
e8:a9:b2:41:60:18:d5:11:63:06:75:c9:ef:75:30:
10:de:fb:89:78:30:49:b2:b7:ca:22:af:e4:0d:c2:
ce:ca:bb:30:cc:cf:6e:f5:38:3b:7d:24:3d:9c:5c:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:59:95:F3:EA:C0:9B:EF:2E:A2:0B:BB:96:59:3A:10:31:AD:47
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:42:45:a0:f3:b8:3d:84:c3:62:2f:89:7e:6e:50:1c:9e:
5b:e5:1c:1c:5c:c4:02:9b:30:8a:e2:e3:fe:7c:9a:eb:12:97:
c7:5e:66:0d:6a:5c:71:2e:c8:7d:fd:10:05:91:f8:f1:60:86:
d2:8c:17:8d:e9:56:2f:9f:9b:80:8a:9c:50:58:24:3d:e8:c7:
89:88:02:9c:28:9e:80:45:1e:4f:fe:ee:88:92:e7:4f:41:46:
59:ab:1d:dd:90:77:5a:9d:7d:19:3a:b0:b7:a8:01:25:2d:d3:
dc:58:97:de:d6:c0:f8:3b:2b:55:48:40:c5:72:fb:46:26:d9:
5c:63:d0:7e:53:06:73:7a:97:60:6c:f4:7b:7d:19:31:64:47:
4a:ad:e4:39:b7:69:c0:98:76:b0:40:21:59:1e:5c:62:a1:ff:
5f:c1:48:21:6d:bf:70:33:53:8c:74:46:1d:bd:9f:f7:cb:78:
6e:a1:4a:cc:27:48:fb:22:e5:e7:6c:6b:3d:d6:b7:a2:01:85:
b8:2c:bf:af:7a:56:c1:a8:88:b5:4c:3b:af:53:e7:64:0d:83:
c9:c3:40:46:64:b8:4b:1b:42:64:28:d7:6d:4e:a7:04:58:b4:
28:df:95:49:5f:1f:01:90:17:e7:0f:72:5e:12:a6:5e:0f:57:
5c:12:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:28:46 2025 by rpki-client