Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: hjaVLUp5kzpohcnV0psrFVboc6E8mAxnyAj6VH7o7FE=
Subject key identifier: 4D:29:63:BF:38:B6:73:2C:00:FA:62:27:30:02:CE:BE:07:56:3C:0E
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 0194BC3C8F8882099314AFCB1504717D3912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 12DB
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: DJSFg9BdZtbKHziRBp/ypM6kRxq5OI3gIz2mlX1W7d0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:88:82:09:93:14:af:cb:15:04:71:7d:39:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=4d2963bf38b6732c00fa62273002cebe07563c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:cd:b6:5d:ce:d3:c6:c0:1f:f2:20:46:3b:
c8:67:b3:c4:f9:a7:ae:b6:27:5a:00:50:eb:a4:d5:
95:ab:ad:de:73:bd:fa:c3:0b:dc:9a:89:06:33:70:
57:78:b9:cd:83:2a:68:af:87:0c:0b:37:76:24:6c:
cd:c2:1d:71:73:4e:7a:5b:8b:ef:c6:86:08:c5:4a:
62:03:a4:7b:6a:3c:66:a1:f6:13:f4:b9:03:76:b2:
5a:0f:87:26:95:61:66:cf:37:1b:b7:a5:e7:69:8b:
47:d6:5c:6f:af:6f:4b:44:7b:43:97:e4:40:9c:4d:
f8:67:87:9d:30:32:df:d5:be:4a:ff:10:c0:12:3e:
21:f4:78:0a:66:f0:0a:35:f5:70:d5:19:61:8c:fd:
e9:2e:71:1e:9f:6d:76:3b:f3:32:7f:59:a9:f0:17:
40:7d:e5:c8:33:1b:60:ea:8b:2e:56:ee:ab:7b:ce:
8c:78:4b:62:e4:8b:17:bc:82:7b:12:7e:09:4f:a0:
99:39:f0:0e:bf:81:cc:8e:be:e1:9b:4b:b4:9c:67:
4c:b6:f7:4e:8c:59:5b:f2:45:e0:85:b7:17:12:88:
1a:b6:d9:82:93:d2:c6:b0:f8:e5:7e:31:4a:8d:fa:
d2:48:b8:58:c6:23:99:b6:d1:27:2d:34:d2:08:81:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:29:63:BF:38:B6:73:2C:00:FA:62:27:30:02:CE:BE:07:56:3C:0E
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4e:22:fc:d7:dd:57:65:1b:90:4c:e5:3b:d9:ed:9b:76:4d:
bc:5e:f5:c2:95:f5:14:7f:46:51:fa:d7:79:b5:7b:50:24:8b:
d4:bc:b9:21:50:ec:d8:57:df:f7:f6:9f:35:b6:a9:32:d7:52:
fa:ff:41:e9:3b:87:cd:22:04:a9:b4:6a:11:21:72:3a:ad:50:
04:64:a5:46:05:7e:23:8d:69:38:12:a0:aa:06:f9:89:5b:b8:
1d:87:d2:d6:e3:45:93:5b:f5:82:9c:df:9d:dd:7e:a4:1d:38:
c1:a7:76:36:43:68:9a:cc:ff:c4:45:77:4a:3f:14:56:b8:e3:
18:31:e9:e8:ec:d0:19:41:8b:74:8e:79:93:63:0e:3d:6a:42:
84:98:ab:3d:e3:d3:b5:a9:19:b9:81:6b:6e:d8:7a:2d:5e:22:
99:98:e7:67:99:d3:d4:27:c9:6a:24:09:e5:30:f0:dc:f9:b6:
aa:50:21:44:c7:d0:27:3f:a5:48:c7:f1:3f:4b:a9:3f:00:6b:
f0:13:47:74:f3:66:cd:e6:f2:02:8b:5c:b5:41:f4:17:cf:4b:
ad:47:c6:a8:26:d1:a6:42:85:16:7c:9d:44:3e:70:e7:c7:b5:
12:0e:ef:13:2d:b3:15:6c:3c:77:72:f3:89:06:0b:64:ca:13:
8b:08:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:40 2025 by rpki-client