Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
File: kMABN-5t-utOpII7wXPDvAADHfk.mft (raw, json)
Hash identifier: MHKS6ndx4x1bxZotNozAoRUTB6Pq00zHF9bJj9mGINo=
Subject key identifier: EE:22:3D:FF:0F:7A:5F:5F:FD:D5:25:5A:C1:F4:8E:4F:A4:94:D1:3F
Authority key identifier: 90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
Certificate issuer: /CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Certificate serial: 0194BD854A229D359484BB2F32D6D1BC5EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
Manifest number: 0410
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: FCW2bGoLdcM6i-Jx_GrHtMzXAlk.roa (hash: WJgWrgAT99wsdStIPz/Fl698liisGeyhumyE7tw/O7c=)
2: kMABN-5t-utOpII7wXPDvAADHfk.crl (hash: dXgBf5LpVmS28AhTnC1L5M1o/bieN9T0FCWeLO/MtQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4a:22:9d:35:94:84:bb:2f:32:d6:d1:bc:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=ee223dff0f7a5f5ffdd5255ac1f48e4fa494d13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:2d:ba:d7:35:79:11:2a:8a:9c:d2:bc:e0:
9e:cc:51:99:8d:c1:12:4a:76:bf:0a:e8:5b:38:bd:
93:e1:b4:8d:e4:98:4d:5a:c5:18:44:40:fe:38:df:
c5:2e:88:d1:0f:91:5f:c6:b2:17:eb:eb:d0:1a:a9:
76:25:3d:54:7e:b0:8c:6c:cb:6f:85:4a:4d:cc:e2:
c3:3e:d5:3a:d4:98:d9:35:55:94:fe:5a:4b:61:4e:
4c:4e:ee:51:3b:8f:ca:69:46:e0:1b:cb:1d:89:14:
c5:76:bd:7a:56:5b:23:27:87:63:49:e9:6c:1d:83:
67:c4:8c:5d:0f:6b:ae:44:28:eb:f3:44:a9:6d:d3:
08:2e:3c:60:06:01:95:a6:72:83:95:d8:97:28:83:
f5:fc:af:08:ce:f8:7a:72:eb:0b:1f:1c:d4:67:af:
83:99:f0:9b:1f:34:68:47:f1:bf:69:67:bb:0a:58:
a6:92:db:70:46:e3:20:c1:6b:12:60:d8:8d:e7:39:
fc:66:d1:49:72:5a:b2:a1:32:24:0f:ea:36:34:08:
50:8b:b1:64:75:9f:46:ed:e1:27:3b:ff:2d:77:1e:
09:78:d8:77:4b:93:fd:00:e9:fe:88:7d:21:34:d1:
c9:9e:b0:b5:32:39:f5:ff:15:f1:3e:d3:25:b1:a1:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:3D:FF:0F:7A:5F:5F:FD:D5:25:5A:C1:F4:8E:4F:A4:94:D1:3F
X509v3 Authority Key Identifier:
keyid:90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7c:a1:dc:44:f6:8c:e6:b2:c9:4b:1f:8c:38:c8:3e:f2:2d:
34:25:0b:19:45:9f:c6:27:84:be:61:fc:41:91:21:c1:72:68:
c4:f6:a6:5d:73:ef:0f:63:0e:86:ac:ee:95:84:c3:50:22:42:
f8:65:35:5e:10:3b:a7:e6:2c:89:b6:3c:73:ec:85:c3:7b:93:
3a:e7:b8:37:08:55:9f:7f:f1:fb:5e:27:ce:4d:22:6e:c8:d8:
b3:31:59:e7:ff:78:29:20:cd:1e:04:a8:00:39:d0:b1:fe:80:
22:6a:37:cd:c1:b6:64:35:b3:d2:b1:de:e5:b1:b8:e0:e8:16:
83:07:4f:fd:bd:78:33:01:bb:aa:06:1d:34:a4:e0:41:a0:43:
6c:5c:29:de:60:d6:43:b0:1a:7a:7f:1f:ef:03:21:6b:2c:f1:
8d:da:36:6b:b5:87:44:d5:e7:fa:c1:a0:d3:f2:89:60:71:b2:
51:f1:6e:42:8c:71:ee:4b:b0:6c:bd:b5:e8:03:10:2a:91:dc:
4f:e6:12:d8:84:17:bf:89:b4:a6:84:a9:cd:2f:e6:03:a3:e7:
92:fa:1c:75:c3:a1:26:59:53:6f:db:1b:51:cc:76:55:a5:fe:
e9:f7:1c:32:2e:f6:57:6d:38:eb:9e:0d:35:e7:f5:14:af:4e:
0a:8c:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:34 2025 by rpki-client