Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: rEE8Pn8Ghwa1IkalAccF7Fc0OrU1qC1TP8xtFlTuxSE=
Subject key identifier: D4:45:F7:F7:C8:46:87:D4:07:16:B0:38:94:78:D9:52:BE:5F:E7:9F
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 0194BC3BCA70378EF290F5268C4E6FDFFE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 13AD
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: iXNhy+KpuF/JiSF5cjU9ay7Gh+BwGEgI9scfJrbEwvA=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ca:70:37:8e:f2:90:f5:26:8c:4e:6f:df:fe:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=d445f7f7c84687d40716b0389478d952be5fe79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:fc:a7:0f:0d:0d:da:2e:2c:1c:65:42:65:
b8:45:8e:eb:99:ba:ca:70:87:4e:19:5d:7a:89:49:
c4:f9:91:7a:07:d6:ef:cf:a4:a1:d9:6b:57:4a:c1:
19:d1:81:60:d9:a2:33:9d:56:d2:13:ef:a1:1b:02:
f6:d9:71:d2:b6:83:8d:c5:53:ae:8b:79:5b:3d:02:
ac:6f:8b:1f:e7:50:cd:7a:dd:e4:13:eb:0f:c1:02:
43:24:b4:77:d2:4c:61:2a:bd:61:44:4d:7a:10:59:
48:24:ab:1f:8f:24:53:42:86:81:38:d6:8c:b8:54:
b8:d6:d7:5b:56:39:b6:f0:55:1e:f4:53:af:3c:39:
53:66:4f:94:21:66:40:15:2d:84:eb:ce:83:bb:e3:
f9:53:90:82:bb:87:3b:45:99:00:50:e8:4a:d8:a6:
44:58:d9:3b:44:86:af:ed:a4:11:e1:69:1d:ec:8d:
96:f5:6f:dc:d2:b7:2b:b4:5a:7a:3f:e8:0f:c8:9c:
2a:e3:e4:cf:12:8f:bf:df:c6:cc:a1:b2:85:3d:07:
99:4f:92:9e:ca:5d:c6:f2:13:97:83:f9:67:55:f2:
11:da:8d:d3:8b:42:59:3b:a5:8a:39:4c:cf:fe:0b:
9e:a4:fe:50:cc:f9:f1:e6:cb:a0:71:bd:4a:07:47:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:45:F7:F7:C8:46:87:D4:07:16:B0:38:94:78:D9:52:BE:5F:E7:9F
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:8e:7c:cd:11:f5:62:69:5c:24:96:40:f3:75:35:38:d6:
df:6b:b1:6b:82:fc:59:29:b2:81:0e:bf:82:01:3a:18:58:d5:
cb:0b:6c:54:be:1a:e3:6b:26:53:27:e0:dc:d8:08:25:27:05:
33:9e:e6:09:2a:81:26:d0:7a:0f:64:34:d4:e2:5d:30:3d:71:
dc:40:da:d1:df:a3:7d:e2:c0:c2:33:99:c0:b3:79:43:ff:47:
d6:07:b6:e6:eb:27:28:d3:30:1c:ef:88:e1:93:f5:f2:06:84:
f9:0c:37:0a:c3:69:2c:7b:4f:cd:a5:1b:59:fe:81:86:14:da:
79:6f:6d:ff:86:98:86:2e:b2:71:59:57:4a:4f:b8:7e:a8:37:
18:5e:5f:aa:4e:24:0c:1b:3d:51:8e:d0:f5:ac:37:23:c9:9e:
e2:b3:e1:49:e1:8a:1a:25:9a:ac:94:59:0d:18:31:fb:57:09:
51:27:8d:9a:34:86:47:4f:df:bb:39:1c:25:79:e8:88:a7:83:
af:b6:ba:d3:21:d2:d5:a8:67:75:8d:66:61:63:ec:1d:8b:d1:
ca:48:5e:86:2d:fc:db:da:5c:89:47:5a:f1:b2:bb:d4:21:18:
0c:7a:7f:9f:14:22:be:87:83:4d:7a:24:df:a0:47:1f:b9:42:
9c:7b:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:04 2025 by rpki-client