Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: oS295Fk20/6yqogtc0SDKCTBVmO42Ldqb9ozJDkHWUw=
Subject key identifier: 40:75:D8:7D:17:A4:30:A8:75:FA:87:18:5E:83:02:DC:08:2B:3C:4F
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 0194BD4E957903992A7EDB0454A7951C7503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 1E
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 7RtSvYvJ-s26z4jJmihBpc9PPTg.roa (hash: +WPL+eLMOyDQbtRDqabesCoaqYzO2nUYgvkky6oLihM=)
2: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: tcUb/ISsb6vxRbaTVU5XwgLILQK6d3AJcPwq4PMJ4N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:95:79:03:99:2a:7e:db:04:54:a7:95:1c:75:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=4075d87d17a430a875fa87185e8302dc082b3c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:f6:73:e1:42:93:3c:02:0d:e1:56:06:9f:
0c:e3:6e:35:ad:ea:6c:e0:c3:e9:7c:48:b1:d8:e2:
c7:ff:84:1e:23:4f:dd:22:61:a7:02:d5:96:9c:3d:
a6:17:95:cd:11:f4:82:e9:c1:ba:84:67:10:6c:57:
63:ee:6b:22:ea:4b:42:00:9f:e4:c5:0e:83:65:75:
38:b4:a5:86:a3:6e:f6:4e:ed:7a:30:19:d9:d6:e7:
ad:8a:34:8a:d6:65:7f:c9:24:96:83:18:17:e6:4b:
64:d1:5f:06:61:5e:51:75:ef:03:e7:ba:7f:89:36:
53:59:79:9b:13:a2:f3:b1:7f:62:7a:21:35:22:fe:
34:94:6b:99:b7:5a:78:89:4f:7f:60:85:7d:f8:31:
7e:81:f2:81:b3:00:2d:53:09:3d:a4:01:f7:9e:8d:
b2:5a:6f:54:33:b7:e7:7f:a6:d0:ea:73:95:c9:da:
a3:89:6d:5a:bb:72:1f:09:4c:6f:49:f0:70:5f:fa:
9e:69:d1:e8:59:73:55:4a:03:41:18:8a:2c:5d:1d:
a7:ba:94:34:25:7e:33:1d:d5:89:85:04:7d:6d:c3:
ad:d5:be:5a:97:98:50:ed:07:b3:0a:cd:22:3c:9f:
86:94:ac:e2:2e:9a:ae:62:7c:21:2f:3c:97:43:6c:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:75:D8:7D:17:A4:30:A8:75:FA:87:18:5E:83:02:DC:08:2B:3C:4F
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:78:7c:5b:e1:33:c4:f9:52:39:8d:3f:fe:dd:31:12:0b:
e3:bb:99:59:9b:93:7e:d3:00:db:17:09:75:1d:c6:e8:81:b3:
35:59:13:58:02:e9:19:a2:36:19:4f:c3:82:19:56:fd:a7:4c:
c4:81:67:68:a4:81:51:68:b7:3f:a1:7b:3f:fb:61:e3:a8:eb:
40:22:1b:24:76:33:ff:1f:3c:9d:d6:15:b8:61:6f:47:15:a1:
99:16:ac:96:2a:ec:f5:2e:52:df:5a:43:46:7c:31:c6:09:c6:
07:ed:6d:c1:e6:30:35:b8:9a:ea:7c:30:66:6a:9a:9b:a5:71:
be:5e:a5:ae:e4:b6:9d:e4:67:08:fb:8b:44:fa:a0:53:b0:48:
fa:21:26:eb:1a:ae:47:64:78:ab:6d:16:5a:ac:84:e8:91:f0:
c3:da:96:bd:ec:1b:ec:f8:e2:b5:f6:0a:3b:be:6a:ab:b0:38:
9f:0b:15:8d:03:5e:4b:c7:1b:d2:29:55:ce:cd:f1:68:1f:a6:
4b:98:2b:27:ab:10:6d:6b:6d:7d:03:ac:ef:bd:d4:56:80:88:
00:e2:ca:7e:9c:62:7d:f6:64:54:9f:88:5e:37:4e:88:30:46:
92:d9:6c:68:aa:fc:91:b5:28:bb:2a:71:52:d6:fc:88:35:c4:
d8:7d:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:03 2025 by rpki-client