Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: 7XVZ0pPXge/lg9FCOccaAhWvGPb4cBjdoRJ7Y0QlZt8=
Subject key identifier: 89:E6:56:EB:44:50:32:75:2B:67:A5:5D:7F:6D:A5:5E:D3:A4:F1:D1
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 0194BCE07D1240A025B6BE4E116FB5F5AF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: E6chvONBA0tmhxQALBU8Vbp2NGNDsWOkdXbCHleGDII=)
2: MhHg4JFChvahbVNUw3bJFSkkmEg.roa (hash: 4DOu8CWNY1OjDP1XSPeR4I2ZieWWV4v3/yu30qnq/P4=)
3: jPXAyTxRg6IHrumUsMVZCICaKwI.roa (hash: yu/3MPqNqBbwh5Kh6v8tYgtrr60bnzQOIu7M1/9ZqhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7d:12:40:a0:25:b6:be:4e:11:6f:b5:f5:af:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=89e656eb445032752b67a55d7f6da55ed3a4f1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:92:c2:bf:ef:f1:25:81:93:74:a2:bf:8f:
b8:66:ff:35:11:77:b0:8e:56:32:76:14:71:dc:ea:
51:81:d4:93:47:59:a1:23:6d:b7:d8:fb:d6:64:bc:
c4:3d:8f:07:05:67:1d:3c:4f:8c:d9:c7:ba:72:10:
9d:22:be:ba:f0:c6:ed:32:51:1e:e8:a0:a1:be:48:
46:7d:a7:a6:7b:1c:b1:61:62:b5:9c:fe:a8:05:c9:
65:38:cc:f7:72:ea:79:00:85:49:2b:78:bb:74:92:
16:8f:0a:0f:21:3a:e2:68:8f:66:29:77:66:d0:ac:
c6:d0:cb:ef:f4:d3:76:2f:fc:af:b9:af:ae:56:60:
04:4c:52:97:95:7b:b9:10:13:f9:fb:9b:a7:84:51:
c0:fb:4f:31:95:ca:f1:10:a0:aa:28:e7:e2:6b:d2:
74:ca:36:c3:85:86:01:48:a2:e1:c6:20:dc:ab:d7:
8a:c3:4f:92:bc:05:25:2e:1c:ed:81:08:da:bb:6b:
f8:0a:5f:af:95:15:75:8d:b5:2a:1e:84:a8:53:f5:
13:79:35:ac:ad:fd:90:f5:b6:69:70:a6:c6:ee:3b:
8c:c2:2f:2f:b5:f2:c6:cd:fe:4f:d6:41:cc:73:4a:
cd:92:49:67:d7:19:bc:cb:78:e3:28:3e:a5:e4:54:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:56:EB:44:50:32:75:2B:67:A5:5D:7F:6D:A5:5E:D3:A4:F1:D1
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:54:2e:53:0a:d4:07:75:cd:dc:e2:fe:3b:57:fd:b3:de:e3:
d6:af:61:02:f6:6a:a7:80:18:7f:f8:d3:c8:d2:3b:42:4c:ba:
c3:aa:3d:87:94:23:80:7f:58:ec:4f:3e:48:e8:63:48:e7:d3:
0e:12:89:2a:ca:29:fd:1a:77:01:a3:34:96:d6:b1:ca:42:4d:
e0:2b:2a:bf:3d:2a:a5:9d:94:d4:10:91:4b:e5:dc:90:3b:68:
1d:b6:ac:72:bb:3d:a3:4f:5c:b5:b8:90:27:2e:e8:dd:8d:99:
e4:fe:1f:c8:d8:d4:87:23:2f:73:ce:f0:f5:4e:44:39:25:2d:
c5:44:b9:72:63:63:e8:e0:47:10:a7:57:df:a8:21:98:00:d8:
18:c2:ae:c7:3e:8e:85:cd:fd:ae:22:4a:77:eb:0b:44:8d:88:
be:88:0b:0b:7b:d2:9e:94:97:5c:6c:40:17:9d:b5:f6:df:66:
ac:c6:18:0c:2d:bf:f1:e5:ea:eb:c9:d8:28:32:ce:20:31:a6:
26:aa:47:4a:b3:1a:05:96:d1:48:50:ba:87:54:4e:e0:6f:bf:
0e:5b:69:46:de:68:f4:90:80:33:e2:51:32:93:0b:87:84:6b:
52:41:7a:f1:f3:4b:15:c5:fa:f2:bb:21:f2:64:f2:49:76:ae:
d5:a1:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:28 2025 by rpki-client