Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: uqehbgN+RAU6TrvirLLZ7r4tReTmDknPGu2vTpXK/aI=
Subject key identifier: 41:61:C7:77:0A:A0:34:A0:85:00:D8:6B:FC:11:B6:33:34:21:55:2E
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 0194BBCE7AE09EA1934E95BB9A9DBBB71148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: +I7/T+7ZZkbcDF7TdO00JgbCYy80/XQoPBGArpcEFMA=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7a:e0:9e:a1:93:4e:95:bb:9a:9d:bb:b7:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=4161c7770aa034a08500d86bfc11b6333421552e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:85:38:b2:f7:60:2c:59:ea:71:29:9a:e0:
8b:30:e8:18:86:f3:5c:e2:b5:24:cb:9e:ae:90:ec:
3d:33:16:a8:d9:a1:20:4e:73:09:87:91:50:2d:03:
ef:7b:12:b0:2f:1a:5a:2f:31:77:dd:32:d7:ea:1c:
5e:1c:9b:6d:5f:cd:da:68:8f:5f:2a:d0:3f:f1:e3:
7d:5f:dc:e2:cb:94:25:a5:5d:88:ce:c8:10:89:88:
9a:3c:2a:39:65:f2:1f:a8:2b:e7:b9:ae:ac:c2:5b:
f8:b2:a5:71:47:92:1a:bb:19:b5:60:2f:9f:23:9a:
86:50:0e:0c:49:5c:2a:c0:87:a7:b1:f6:36:c9:e0:
bf:6c:10:9e:37:81:0f:7b:0e:da:aa:26:15:43:10:
7b:56:21:f5:2e:5c:b1:0a:b3:2f:84:b5:b5:54:ca:
7d:54:13:f1:42:dc:a7:bb:bb:e1:a6:01:c7:67:95:
6f:ee:38:13:41:88:6e:5b:64:9a:8e:6b:d3:26:85:
b5:ee:96:0f:b0:a5:11:0e:fd:fc:cd:a0:6e:9c:8a:
54:1c:70:8c:0d:45:9d:a3:e8:f5:6e:bc:cc:16:dc:
b4:26:97:76:75:17:a5:24:3b:15:62:8e:af:e5:c1:
b3:ce:d4:6c:92:24:46:b9:d3:a0:59:4e:9e:6d:42:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:C7:77:0A:A0:34:A0:85:00:D8:6B:FC:11:B6:33:34:21:55:2E
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:63:a6:42:eb:08:8f:12:3f:28:4e:66:58:bf:51:0b:98:82:
d3:0e:ff:bc:c1:5a:04:4c:26:86:f8:6b:12:9d:42:de:f6:ff:
81:e6:90:a7:b2:55:d6:a3:63:83:d8:bd:f7:02:55:30:2b:d2:
58:80:e1:a2:a9:d0:02:b3:eb:bd:46:3c:fb:6c:44:3e:53:eb:
2a:bc:9a:fc:45:cf:e2:15:54:16:63:9b:5a:50:e7:c8:df:16:
ea:f2:1e:25:6b:d0:e9:b9:37:50:4a:a7:14:a7:e5:43:18:ab:
4b:c8:6a:04:23:63:a9:ae:3d:d3:4f:a7:82:25:6f:de:d3:f0:
0a:3e:98:95:0c:9c:3c:f3:1d:5b:16:98:59:1f:d3:a5:7c:57:
f3:4c:4e:85:76:7e:b2:64:c2:24:aa:09:e1:ad:bc:db:73:be:
19:c0:a3:bd:98:d3:4c:81:3f:aa:52:56:8f:d7:18:b2:89:18:
6f:5b:4f:6b:d6:14:03:68:00:ce:5d:9e:c1:5a:a7:28:d5:ac:
69:f7:b1:fb:65:9e:c2:5c:09:01:a4:6c:23:7b:fa:7e:b9:e3:
1a:45:84:84:62:93:31:5b:53:21:9d:b3:f5:8f:37:f3:22:63:
37:fa:80:86:a8:e4:90:5f:03:24:71:1c:fd:53:69:d9:60:87:
f5:5c:66:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:17 2025 by rpki-client