Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
File: kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft (raw, json)
Hash identifier: kaNcu6naiyGnO8CPtgtYC6NbITHKRhS4dQxUqxTiyP0=
Subject key identifier: 50:29:49:28:02:F6:B3:30:7F:A7:66:FE:A8:12:35:22:5D:E6:6D:51
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Certificate issuer: /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial: 0194BBCDDF38EC3B7F1A5840BE0D62A2C1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: 81r7MDlREVnve0gPHpK-YMqPGos.roa (hash: LBj0CTTN9bH+FtAXQEk67Yy3EpjLyRKJ5E4kGwybQXs=)
2: kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl (hash: L/RE9Hg4S08RPUHYS12JYXyZcgRrWqBxNMThgEBKOSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:38:ec:3b:7f:1a:58:40:be:0d:62:a2:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=5029492802f6b3307fa766fea81235225de66d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:a6:9c:0d:69:6d:c7:08:8a:d1:37:19:25:
b0:87:df:fd:19:5c:ec:42:36:0d:ed:ea:27:00:18:
f3:ee:93:0f:0e:63:17:a6:67:e7:05:a0:88:71:6d:
4b:cb:9c:fb:27:04:8d:bf:d7:1a:bc:ce:49:86:96:
d9:96:40:8f:6c:12:14:95:c7:84:af:7b:10:85:b8:
eb:a9:98:52:02:af:fb:42:4d:95:23:e2:f1:5b:06:
f0:c1:2c:4f:f6:80:e9:9c:61:de:76:be:93:fb:3a:
06:91:0b:7c:a7:2c:6b:e6:7f:74:aa:91:a5:3f:86:
ed:cc:f5:01:40:cd:59:ca:bd:41:be:9e:b0:b1:37:
61:f5:39:80:39:84:31:85:e7:fc:5c:73:ac:49:bd:
11:a3:2b:d4:3a:77:7c:be:e7:fc:1d:40:8f:26:47:
43:e5:57:10:97:af:a6:ca:9e:e0:80:1b:5e:f5:03:
fb:09:f0:9d:c5:e1:bd:b7:7e:9c:9c:be:97:65:a8:
e0:d4:dd:2e:9b:a4:85:b5:62:6f:a5:79:6d:49:98:
68:7f:49:56:47:49:29:b8:2b:c4:08:f6:1d:43:59:
c7:9b:55:9a:1f:03:64:f0:c3:3f:a8:c0:02:22:6e:
3c:f5:12:eb:b1:6d:d0:67:74:0c:76:f7:9a:d1:b2:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:49:28:02:F6:B3:30:7F:A7:66:FE:A8:12:35:22:5D:E6:6D:51
X509v3 Authority Key Identifier:
keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:05:6a:18:10:93:4c:f3:b4:90:47:ce:48:d0:3a:4f:df:2e:
58:3a:e4:07:1d:1c:76:1b:b0:08:a0:e4:a8:1d:1d:b2:b3:ee:
20:12:32:fb:3b:db:26:dc:19:db:e3:4f:f8:de:14:d8:a1:80:
18:ca:01:fe:ab:7d:15:3f:92:db:e7:c6:67:28:33:53:05:4c:
ec:7f:b5:62:2b:06:eb:df:41:1b:56:d9:45:6d:59:ec:f8:3c:
81:b6:bb:73:61:7d:46:6f:ff:93:c5:85:6d:80:eb:91:41:e7:
a2:f0:6c:a5:b3:f8:63:46:37:69:38:33:84:13:aa:3f:c4:b9:
79:8e:0e:3f:dd:2c:29:6e:74:a3:6f:28:7d:e8:c8:41:b7:4d:
34:00:92:eb:48:ce:ec:30:6a:5f:3c:5a:71:23:9a:1f:b9:2b:
e2:3a:e1:f4:5e:53:c3:74:ea:3a:4b:df:18:a8:33:b5:42:c5:
77:44:cd:ea:01:ae:ff:e9:46:46:af:86:9e:99:1b:ff:b3:b9:
13:9a:7f:eb:18:ab:b1:b0:a7:72:5f:c6:f2:b7:7f:6b:a8:fd:
5f:9d:7d:69:9d:ad:b9:78:bb:ee:f7:b2:77:96:b5:ff:eb:5e:
1b:09:be:58:ea:42:2e:2c:00:04:c0:b5:17:17:64:cd:e5:d0:
56:34:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:07 2025 by rpki-client