Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: tKKMkk6mCICCInZhzn/7e/Q1LrKIGIHFbQAScA4kjWE=
Subject key identifier: F5:18:02:C7:33:A8:CB:A0:5F:93:5C:77:E2:F9:C1:66:1A:E2:C9:2B
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 0194BBCECA1D7D03F1B287791C2F9CEF3CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: Uer3TX64oSO2sQVcqQGJ+uuSESTyPS8YQPZA7pbw9nI=)
2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:1d:7d:03:f1:b2:87:79:1c:2f:9c:ef:3c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=f51802c733a8cba05f935c77e2f9c1661ae2c92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:25:55:1b:df:b5:de:23:88:54:97:c6:7a:
ff:05:19:cf:5a:c5:47:06:47:3c:a1:f2:82:7c:fe:
30:3f:b0:27:e7:e9:52:c9:2e:84:42:ab:34:8e:36:
8a:aa:59:f9:da:a8:3d:7a:96:e3:ed:88:00:4f:08:
24:28:af:28:d3:39:0f:bf:33:6d:6f:d2:7d:db:c8:
91:16:06:83:a2:43:38:05:08:e5:d8:fd:9e:ce:7d:
80:26:de:de:11:14:ae:a7:9a:69:7c:4b:e1:24:e5:
d7:c7:9d:13:53:f5:a3:a4:e3:66:82:b5:82:b2:1f:
b3:a8:71:4d:f3:b4:0a:24:20:f3:21:2f:66:3c:1d:
97:e7:fa:ff:9a:8b:c8:94:d9:15:76:ae:05:86:4e:
3f:33:e9:1b:a7:bc:e3:56:a7:f0:bd:13:94:9c:2e:
30:40:da:ef:b6:da:a0:80:71:a7:8f:1d:9e:a3:b8:
db:25:85:01:a7:d0:9c:0d:4f:f3:1b:7d:b9:ae:6b:
45:53:84:2e:f0:12:d4:07:76:c9:6a:08:20:bb:37:
b0:36:16:99:b2:a4:0e:85:69:03:52:35:b4:ec:03:
dd:80:e6:08:3f:96:d1:15:ca:4b:65:d0:e6:85:85:
66:7a:4f:85:de:e6:84:d3:f8:12:ad:8c:8e:90:3a:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:02:C7:33:A8:CB:A0:5F:93:5C:77:E2:F9:C1:66:1A:E2:C9:2B
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2a:8e:cb:23:53:c2:e3:35:b9:9c:38:7e:7c:a6:ea:aa:23:
b4:77:63:97:85:8b:bd:9a:f3:04:6b:11:24:a7:3c:96:f5:12:
d0:3e:a7:a5:a2:a2:7e:25:b6:88:fc:32:38:65:75:19:24:d8:
f0:4e:64:ce:79:e1:66:4f:c3:84:1f:68:62:2b:93:88:8f:8b:
02:00:62:e2:c9:aa:45:fe:bd:f1:9e:a7:7d:6f:f1:eb:5e:64:
f1:a9:e7:1d:f8:c4:37:d4:93:1e:77:eb:a6:a3:7c:44:cc:60:
2c:88:f0:0e:bf:9a:9b:be:93:cc:ab:b6:b1:4e:89:12:e9:f1:
53:97:1c:d8:eb:3e:1c:55:56:9f:f6:18:b0:62:e6:a8:24:ef:
6e:ab:85:96:d0:9a:15:00:34:75:7b:1a:03:12:f6:d4:99:5f:
da:87:12:99:bb:30:c3:17:ff:04:4d:fa:ef:6d:fd:dc:6a:55:
94:ea:01:c9:86:b9:92:4e:02:7b:2a:aa:a1:80:f9:72:e9:27:
da:56:90:cd:f0:42:46:c6:0e:7d:b8:c0:6a:32:21:d5:2e:62:
6e:e5:a3:06:ba:fa:8d:81:06:38:82:4e:15:ee:d1:1c:aa:64:
59:16:77:05:fb:31:eb:41:d4:41:5a:5a:32:28:4d:2d:63:32:
aa:d3:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:10 2025 by rpki-client