Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: YYLv2cZsn1+1XjVnVsE/rfRQMr7Ca+5H1b36dCbtmnA=
Subject key identifier: 77:99:10:40:3D:59:C0:87:F8:29:57:58:B0:A5:DC:80:5B:C8:A1:6E
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 0194BD4EAF648D2ED49DEE523C5C8CF4C790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 0B8E
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: gqkfVceGvzl69E1V9fG/8ErhcY4ucZlAOI31beXK9cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:64:8d:2e:d4:9d:ee:52:3c:5c:8c:f4:c7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=779910403d59c087f8295758b0a5dc805bc8a16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:09:ed:0d:90:bb:1c:bc:a1:74:3a:23:61:
15:8b:45:29:d8:13:50:85:66:b5:8b:77:d7:51:6d:
40:ff:eb:24:64:13:8f:ac:00:cf:7a:1f:de:51:85:
a8:40:86:c2:bd:77:8e:19:93:e3:c7:3f:93:38:aa:
df:06:65:db:56:fd:37:52:34:2e:e4:b4:f1:7c:fc:
f3:90:92:13:cf:f8:fc:c5:30:d3:a0:a5:07:df:f4:
dd:b7:f9:4b:d8:2d:b8:a8:88:44:e9:d0:04:2d:c6:
08:b2:84:f4:97:a8:ea:93:5c:7d:75:74:6a:32:6b:
7d:02:d0:00:a6:30:6a:e9:c2:18:c5:d6:f0:22:df:
bb:9b:db:61:47:ae:3e:1a:b2:0a:70:5e:3b:50:9e:
dc:c7:d3:94:95:54:2e:d6:c8:70:e9:3b:fd:a5:9e:
57:54:00:86:b5:24:94:0a:e9:14:ec:3d:c5:71:12:
26:54:43:dd:5e:29:02:37:77:87:90:b3:77:44:7b:
0d:1d:14:42:d0:d6:00:2f:6b:9c:ca:46:fe:c6:0c:
ea:1a:a7:3f:da:81:ef:14:01:49:c5:44:63:77:61:
a9:03:00:91:fb:f1:99:de:4a:35:a9:09:04:f8:7b:
3d:4b:f7:e6:ed:87:b4:38:b1:e7:d7:1d:35:c8:80:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:10:40:3D:59:C0:87:F8:29:57:58:B0:A5:DC:80:5B:C8:A1:6E
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f8:e2:42:7a:fc:0f:69:78:3d:55:ca:94:bb:fe:d5:40:a3:
9b:0f:47:52:90:cd:ad:3c:5c:cf:51:ba:56:19:2b:7f:14:a3:
54:a5:19:cd:0c:1b:1a:ae:56:bb:ff:ac:72:da:58:59:8b:38:
00:77:ce:51:f5:42:e8:82:6a:d1:c2:23:f0:fa:58:cc:4d:c8:
ea:8c:72:92:98:03:2a:d1:ad:e9:f0:5f:de:6e:43:c6:ae:98:
43:2a:4f:e2:df:c3:9a:83:ec:88:50:9b:e8:cf:f9:b0:21:fe:
b7:59:f4:49:54:37:14:f5:70:ca:83:4e:82:98:79:9c:98:d6:
ad:19:77:69:5e:46:2f:5b:3b:0b:32:30:89:f7:2a:d5:d7:f5:
e7:83:a1:db:2d:41:e6:18:c2:e5:12:7f:ce:07:96:60:e0:ec:
88:72:ef:c3:62:fa:6d:90:fa:78:fa:69:0f:4d:45:0b:d3:35:
df:d5:e4:9b:5c:48:42:d9:81:bb:c1:51:65:e4:67:03:79:49:
aa:b2:57:8e:41:cc:9a:58:31:f0:f5:75:be:39:a1:b9:76:28:
b0:7a:17:37:a1:1d:c6:c7:b5:45:93:94:ad:77:ae:e5:b4:1f:
46:3f:29:32:88:a6:fa:3d:cd:01:1f:89:3e:0e:a2:79:8e:01:
c3:fd:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:50 2025 by rpki-client