Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: AV0ABqF6xc8t+q/H1X1E5U1fDFptr/GeG2Fqx43o5QI=
Subject key identifier: 03:9E:95:57:9D:97:95:20:C4:09:39:D8:18:C8:5B:DD:76:D9:46:CA
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 0194BC04C62AA0BB1F0DC214D3CA4E7FDD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: uMd1rVpaMBa3WfZE7jdwmYm8VdUYTvoByGMy+ShEiRo=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:2a:a0:bb:1f:0d:c2:14:d3:ca:4e:7f:dd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=039e95579d979520c40939d818c85bdd76d946ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:f3:c2:26:06:4e:cc:14:37:4c:19:17:44:
4b:b9:3b:b3:53:cf:48:f1:8f:e9:b7:6e:80:ad:01:
fb:e9:d5:3c:61:ea:05:00:ea:d2:22:bc:cb:14:d1:
64:4f:3f:22:4f:a8:ed:19:c6:b9:82:78:ab:6d:2f:
d0:e6:81:a3:29:ac:0d:50:35:ad:b8:d1:35:97:c4:
c8:f0:31:ce:dd:50:f6:eb:42:a5:77:d5:04:48:f5:
57:5c:0b:dc:39:af:0b:19:91:8e:d5:b2:7a:ef:f6:
4b:5d:8e:5d:1d:b7:80:2c:50:cb:b5:68:d0:33:23:
b4:b4:22:71:dd:d6:0d:00:d1:18:4d:e9:43:fb:57:
76:76:2f:56:4f:4b:b1:79:18:8e:14:53:a1:0a:07:
b9:d6:99:63:f9:cb:fd:13:74:41:1b:93:0f:c4:40:
09:82:d1:ab:1d:69:3f:a3:64:bc:57:db:d5:61:b9:
fc:17:92:67:38:01:bb:6b:1c:12:3b:dd:d0:54:c9:
c7:78:bc:5c:f9:9f:92:33:0c:08:7d:74:fb:83:86:
95:7b:40:31:99:bd:1e:77:f0:cb:20:d0:b9:2c:52:
37:dc:df:96:ea:7b:1d:52:23:a7:7e:53:e9:fe:f2:
ca:7d:e7:68:8d:dd:da:22:cb:4f:01:c0:c7:4c:72:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:95:57:9D:97:95:20:C4:09:39:D8:18:C8:5B:DD:76:D9:46:CA
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:5c:b4:70:8f:2d:c3:bb:fc:a5:93:75:ab:d2:fd:0c:5c:
d3:e0:7c:f9:70:63:03:86:72:51:11:3c:31:3b:7e:84:e5:b7:
22:1d:17:81:b2:ea:3f:4b:a8:50:38:d2:18:7f:6b:af:b2:ad:
ea:8b:6b:d1:55:68:de:54:97:4c:e8:51:0c:9a:10:0b:a9:09:
d1:48:02:10:8f:7d:5a:fc:0a:c1:42:c3:d2:7e:09:10:7d:50:
eb:3a:d9:ab:a3:2f:b9:ef:5c:a2:d6:d6:a2:6d:4e:fe:32:6d:
6e:af:c6:9e:b7:44:a1:6d:ad:59:4d:d9:d0:e1:7c:4c:45:f7:
54:d7:41:c2:f2:52:b7:4d:09:95:e9:fe:2a:c6:8b:11:2f:d4:
91:1c:66:e3:b3:25:71:ca:4b:6e:c9:b5:af:35:2d:05:5b:e5:
2d:7c:bb:ef:dc:00:02:f6:c4:0a:ea:e1:cd:2e:36:16:dc:52:
10:f3:42:aa:15:c2:2f:fa:3a:25:a2:70:55:fd:11:f3:87:4b:
84:70:7c:2c:fa:64:08:d2:84:ed:da:57:cd:b7:c2:03:22:2d:
0b:bf:a1:95:b5:e6:a4:a6:fc:7f:17:d2:41:a0:28:d0:13:a3:
d9:4e:b5:70:29:c5:12:2c:8a:1b:80:56:99:46:11:4f:a7:77:
34:29:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:42 2025 by rpki-client