Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: iHlgre7+PLhj3+wnQzlm/rTOVABRTgvTz3inEtm6DUE=
Subject key identifier: 95:95:79:B6:C5:03:56:F4:41:17:39:96:0B:CD:B0:BE:D2:CC:72:2C
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 0194BC04E9D1214449B32F7B5FFC1B6BF54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 0190
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: 1Ew9IY8DRbrUJbRsN+x+X4ew7iHAYYBaWs+T3xbElzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:d1:21:44:49:b3:2f:7b:5f:fc:1b:6b:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=959579b6c50356f4411739960bcdb0bed2cc722c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:3b:6f:e9:89:d1:71:ae:c0:76:d3:60:11:
a0:5b:d6:bc:04:b2:5f:c3:b1:36:85:5f:c9:d0:83:
de:fd:1c:e0:64:83:a1:a0:84:18:52:24:00:ce:6d:
fb:f5:7e:65:75:86:65:45:f8:a3:d5:64:d2:5f:55:
91:54:b3:95:31:7e:12:08:8c:ba:7f:1f:7f:ae:5b:
97:61:1f:f9:af:2c:b1:7f:53:68:af:4a:a9:02:69:
36:5c:c3:ee:92:ff:63:07:dd:16:06:00:01:77:49:
4b:21:bd:92:d0:cf:21:9f:b9:f4:06:54:c5:b7:49:
75:20:6c:2d:96:b4:28:d9:81:7d:b1:f8:2c:e6:82:
50:7f:18:1e:ea:d8:1c:85:1d:b3:7a:db:d5:e9:c0:
5a:7a:ef:bc:15:cc:7b:e1:e7:d6:c4:4f:fa:4f:58:
3a:9d:88:21:bf:e8:01:f8:d8:d4:da:c6:00:51:91:
a8:98:97:f5:52:22:04:3a:e8:05:76:36:7a:1d:82:
c5:19:90:c9:47:00:78:b3:84:af:7e:94:75:4d:71:
58:c3:ec:17:cc:fb:ee:4d:5f:30:31:22:72:73:84:
19:e4:1d:9f:ec:5c:b5:bd:17:ca:e2:c1:73:33:ab:
d5:3a:d6:c4:e5:b1:d0:f5:1f:a4:2a:a4:e1:58:2f:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:79:B6:C5:03:56:F4:41:17:39:96:0B:CD:B0:BE:D2:CC:72:2C
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:99:8f:2c:5b:f0:f4:37:30:d5:d9:66:2c:00:73:d7:5b:07:
97:0c:3e:11:70:15:38:84:b4:10:5f:28:66:ba:85:00:f3:9f:
d2:f8:fd:d9:4d:c4:6f:0a:61:40:7f:c2:ac:34:2a:c9:fc:f0:
d2:e7:cc:e3:64:29:ff:79:bb:41:26:0d:d6:7a:da:10:e3:d7:
d9:e1:f3:03:b3:f3:f5:18:fe:62:9f:6f:d0:4a:c0:e8:b2:9f:
45:24:e3:91:2e:16:28:06:ce:22:15:ea:3c:56:5c:16:d8:b1:
2b:fd:81:c0:e5:a9:d6:43:6c:bd:4e:35:a3:47:5f:8d:1b:d7:
9c:9c:0a:e9:de:b0:05:48:2c:74:16:ea:0b:b5:76:b6:80:e7:
57:e1:88:9f:3d:24:20:ef:49:9f:1e:6b:70:c4:02:ba:cb:57:
12:8e:f6:95:8e:d5:2d:23:de:cd:af:d3:fc:12:ca:71:bb:70:
bd:78:4e:56:13:a8:57:41:1b:b4:8c:25:86:e9:a5:d8:91:64:
a1:04:c3:22:56:6e:42:81:45:11:fd:65:c2:03:2f:15:d4:63:
0d:36:78:d6:d1:6a:9b:a3:8f:f5:11:b8:7b:e3:1d:bc:7e:90:
f2:fb:2f:03:db:7a:f2:66:89:97:11:da:c1:fd:6e:1b:ae:2d:
bd:98:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:56 2025 by rpki-client