Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json)
Hash identifier: 6PUXAeyXVpwaAbJagnAG+Czr6hEPRaQMY00fMowIf60=
Subject key identifier: 69:D6:37:6C:DA:14:34:10:D9:42:58:EB:80:31:F2:60:C5:DE:19:36
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 0194BC3C079CD9D38F45C77C0F8DE6B28338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
Manifest number: 144D
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: 1-5Fi3WM50atp2DkB7673qszYGEU.roa (hash: kN65NB/E7sHscyK55wK1hzazTC32+9Bs5gcTM4gjKMo=)
2: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (hash: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=)
3: 9qoftOkUQubHrr_5Y0O0OEB0jsk.roa (hash: NpXUbKfrAE82THRrSEt65m3odGmwe5q6Rv8hzF4EGTU=)
4: AFOcU_w_QN-XxQkkQfgesDtPy4Q.roa (hash: vuDPxy3QeT/X/Z21aASlCY+NXDSblPQKGqB5xLpgpdQ=)
5: Cdz1li8VqIIJV-m5kmfKj99Y7vo.roa (hash: Injt2qVEYstD1CFDA2RDhQ4n71XCzIHna09I/6r+g6s=)
6: GbDOIWuDR8WZ-BYENq51ar0aP5k.roa (hash: CJzAJfHWSIZwrXGtd5lfTfuDJWDAheSFeEbvk8VGSio=)
7: ITP65m-ELAYrIziT1mqhAaKmFKI.roa (hash: TA6Lz6SPSkTI7bhEP+cVZ388px4lL7fPEARYK+dRI9A=)
8: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: PkySd2JwYAkr2CHSBIo13O4WiWX9Tfuc/vhjUS+eEWs=)
9: M10xggNFEiYKiCOpaRSr9Q_E5jI.roa (hash: or9G2RnVnC9nrrlnpNuQsb0VwFoCXmXB+b6uwP7Zhns=)
10: OFoxo4tSb8S4WTnb9Arp2ooyRvw.roa (hash: RZrf7jypWJt6TvS7MztBYdDEvw+Yp5dHCbAbuiSrNfs=)
11: PxE0dP6xcqVNoXMtC1a5Dmb6n-s.roa (hash: Ybvp2SkTVaVfqhDzUmHlRC82UcW4sX3toG9HthgZ+Es=)
12: RFQq8CL00Iuq4i_jx3Jd0iwOLHI.roa (hash: +y+KD8Sa0MVn4eIucYiZ7dhXT2uIb+hoC3jKlQ4uUUg=)
13: StB1UFEtCDyFdBk9HlyRT4BiwUk.roa (hash: ct9iISW5+oa4TKmVnU9Tll+2mtNtAhknET/NdBKdXN0=)
14: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (hash: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=)
15: U8lnC6TG0pv6pWZXKVHzbslUv7Y.roa (hash: en2pnR7bb0v314EN8AtTeDNZJOdRSB9qKOFTcoTcCf0=)
16: ULfjtaXZKeO21K8lDdoLHe5Lbts.roa (hash: Ky4d9tu18NCNsNUD91GQmMhDdLCi4CgvFfPWYH5+Qp4=)
17: X8iQP860aal3YLOybxReqwSyPWU.roa (hash: 8p2TloT9N3iJXhSo+Uh11LexFFF6Vzvsu6ANvx+UWDA=)
18: XvUgOjjL99J51pC_sC90Y2oxW38.roa (hash: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=)
19: cT-m8k4SDtvWHlQKpD65GuRYzTQ.roa (hash: r6RkMNZjMfYtE9PPmCf0mAK1eFJX+kttY3BaDf/aAME=)
20: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (hash: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:9c:d9:d3:8f:45:c7:7c:0f:8d:e6:b2:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=69d6376cda143410d94258eb8031f260c5de1936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:f7:62:ef:2e:96:49:44:4c:25:08:76:2a:
bc:a3:e9:50:8d:18:10:cf:69:b9:17:0f:f3:03:3a:
02:1f:34:ea:1b:41:b0:ef:3a:aa:1a:86:36:c4:7f:
ed:3d:59:40:8f:9c:3f:5f:6f:f6:40:14:06:07:2b:
a8:2d:f3:e3:14:94:3f:74:a5:67:78:24:d1:24:e0:
39:b6:e1:89:ba:79:e1:ab:23:c9:f0:20:d3:cf:24:
78:43:22:10:51:9a:13:09:7b:a4:d0:c7:22:9f:18:
e8:3b:dd:73:e6:aa:dd:20:e5:46:8c:1c:7d:d9:89:
53:a6:9a:7b:a2:ce:86:8e:cf:b8:65:18:88:0f:07:
ed:d3:9c:e0:2e:59:4c:96:ee:bd:8e:fd:55:d1:ee:
2d:a1:30:f2:8b:0d:4a:bf:fb:a5:33:b3:2e:1f:5c:
ab:f4:d7:a5:72:ef:19:53:1b:34:e4:30:d2:ae:36:
28:30:42:0e:05:5b:55:63:e5:a2:1e:c2:85:dd:7b:
7a:de:1d:62:66:6a:25:5b:eb:cb:f9:f4:66:bf:87:
be:56:ba:c5:14:f6:52:22:00:f8:54:18:55:d2:5b:
35:a0:10:6f:2f:50:c8:5e:ad:b3:ba:a6:f6:93:66:
a4:f3:2d:e7:46:d8:37:1d:d8:77:e6:16:b3:5f:c7:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:37:6C:DA:14:34:10:D9:42:58:EB:80:31:F2:60:C5:DE:19:36
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:21:5f:7a:9d:ae:87:a3:a0:7f:6e:a0:71:eb:cc:5a:63:fa:
c3:94:3d:22:1d:27:49:f3:84:ea:9e:f2:97:70:9b:68:32:c2:
7b:c8:20:bc:5f:2a:a0:18:1e:e9:c3:c7:2c:0b:0c:ef:a4:12:
7f:b9:e0:8b:f3:04:d4:b4:3d:74:a2:f3:20:9b:fe:7b:c9:6f:
8a:49:c1:cd:07:a9:60:f3:37:a7:2b:1d:81:6c:47:c2:57:04:
fc:cb:58:9d:1d:bc:cd:e0:f7:07:31:26:7a:2c:24:e0:ad:01:
82:c3:06:ba:31:2c:1d:8b:09:8c:83:31:a1:ea:46:04:1c:d8:
41:ee:04:23:82:b2:41:56:b4:a8:f6:f5:40:84:ea:31:37:a6:
b2:45:c4:1f:fe:75:57:48:61:83:20:67:0d:db:4a:3a:e1:e9:
98:77:8b:0b:17:99:32:9f:54:56:19:d3:23:ea:19:de:70:fb:
39:fc:a0:92:39:1c:4b:9f:2f:05:df:8c:37:1e:7e:36:4d:56:
d7:5f:5c:b1:46:5f:6a:07:1c:bd:3b:d9:eb:04:ad:85:cd:4a:
23:2a:a0:09:e3:44:61:b9:37:ff:0a:b0:c6:64:99:0a:25:f3:
b5:96:d7:19:37:ae:26:ad:e6:f7:1b:53:57:09:95:40:68:87:
91:22:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:49 2025 by rpki-client