Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft
File: kaEXOnDkH0WTVHZpraIvDX9o81Q.mft (raw, json)
Hash identifier: rExktvT+VMI/u8RuFJX6Eg55+wrx8j8k0dIttQWiK48=
Subject key identifier: 0E:76:22:1B:DC:36:A1:74:38:B5:9E:30:59:30:15:19:A8:1E:B9:30
Authority key identifier: 91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54
Certificate issuer: /CN=91a1173a70e41f4593547669ada22f0d7f68f354
Certificate serial: 0194BCA9C6D2E1E5F5FD45A44F17C1456D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: kaEXOnDkH0WTVHZpraIvDX9o81Q.crl (hash: xmrNC8riPEVljN+/uXSd+xQJA5Le0hpt2qs+cg7bW4U=)
2: xREpLh3GVdj1ODzVkMBccz2oKXk.roa (hash: xbsUY7nQRM1AibU2b9y10o7TiQNt9Xvh0b0IzmFT71c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c6:d2:e1:e5:f5:fd:45:a4:4f:17:c1:45:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a1173a70e41f4593547669ada22f0d7f68f354
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=0e76221bdc36a17438b59e3059301519a81eb930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:92:2f:60:84:6d:2d:02:2b:6b:db:f2:89:
8d:07:d7:9e:44:d2:05:71:d4:b0:25:a5:3c:c9:9c:
f0:02:53:e2:70:1d:c8:d3:93:41:6e:63:70:11:21:
f2:3b:b3:67:dc:76:f4:46:02:fd:1f:35:34:fa:f1:
99:65:6a:6f:1c:81:39:93:81:25:05:0b:97:46:03:
a7:64:61:a7:ad:15:36:1b:59:c2:14:76:ea:86:1f:
64:4e:66:f8:b5:76:75:13:92:96:a3:38:19:a1:58:
14:78:26:7f:aa:95:fb:2a:74:eb:fa:42:ac:ef:34:
8f:5f:04:98:c6:98:8e:7e:f3:71:12:8d:b4:41:31:
6f:3b:07:4e:4d:c0:ff:4c:77:45:95:53:8b:e4:44:
e4:a7:0f:ea:e2:45:80:b6:e1:db:d6:c1:4e:48:ae:
df:ab:74:56:cd:e3:38:22:f4:4c:11:d1:16:2e:76:
89:70:5e:9a:0d:a8:24:cf:6c:98:81:e6:8e:25:a1:
84:d3:7b:eb:57:3e:0b:84:98:77:d1:83:86:52:1e:
1f:b7:4c:ef:8c:6c:ab:92:1c:39:58:67:fb:7f:6d:
9f:1c:9c:1d:4a:55:25:f8:96:8f:20:fb:55:43:d3:
34:49:9c:93:58:d2:d7:77:f4:7f:4f:bb:04:1b:e8:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:22:1B:DC:36:A1:74:38:B5:9E:30:59:30:15:19:A8:1E:B9:30
X509v3 Authority Key Identifier:
keyid:91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:73:25:42:c9:93:44:28:d9:06:33:e6:84:e5:1b:94:49:db:
8f:75:d3:43:75:61:6c:c8:bd:85:60:51:9a:9c:01:1f:3d:75:
05:72:90:3f:a9:5c:54:b2:ba:01:78:31:08:bd:24:e7:60:58:
8d:1c:6b:56:f7:45:59:dd:02:71:e4:12:a8:e6:83:d9:0c:8c:
80:ff:61:96:fe:c8:b1:0c:f3:22:9b:89:b2:5a:9c:17:0e:2d:
b6:7b:93:04:87:4c:e7:97:d3:0a:5c:60:41:ee:0c:3f:78:80:
ee:e4:1f:9a:59:9f:59:be:3a:d9:42:0a:d6:d5:86:3e:cb:84:
bf:7e:73:fc:05:45:56:02:a9:ad:a9:21:9d:ad:0c:99:d7:d9:
b4:54:9d:f6:00:ba:87:b0:81:96:a5:39:29:df:26:6a:1d:ee:
17:1d:05:78:41:db:3f:96:b6:66:bd:28:b3:8d:02:60:3d:db:
4e:76:c7:b6:1f:32:41:71:9b:df:28:a4:4d:3b:ed:d9:dc:2f:
ad:6c:dc:81:da:92:50:72:91:23:87:8c:b2:e3:53:8f:05:ea:
49:fa:50:2c:9a:63:e7:48:ea:1a:77:f3:66:28:9b:ed:33:91:
ac:ec:b5:23:a1:bc:21:3b:53:41:14:d2:e2:6d:f1:cb:e9:09:
71:08:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:39 2025 by rpki-client