Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier: R6KBdtIStfk01KL7UR1kJkMWT6Y6/b61DvgfCwTkZMI=
Subject key identifier: 9E:F1:91:61:59:3D:47:53:6E:E4:DD:47:8E:E1:59:6D:BF:0E:BA:E3
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 0194BD8575FE301F795AFCA4498A51168597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number: 0482
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 0uXZsIzOuGlbguIFz3Zkl5De9lU.roa (hash: YNeeVSttuQ98olLv+5aLbTyXkKQvSMcGX+VvVs9cMAQ=)
2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: 3Trxs7QA+2BxlWnU5b35x9I5k5Qs82t7kZCcw3PE/0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:75:fe:30:1f:79:5a:fc:a4:49:8a:51:16:85:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=9ef19161593d47536ee4dd478ee1596dbf0ebae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:ac:bd:8c:b9:ac:ab:cc:f3:3e:d6:6b:fd:
00:de:e3:b2:0d:c1:f5:ac:2a:41:cf:1c:6c:7f:06:
76:f5:6e:67:2c:78:5d:7b:2f:8e:7e:b6:6d:93:ce:
c2:b7:4d:35:69:07:ae:97:ce:b1:e3:6e:73:d7:e1:
12:87:cf:c5:42:54:2e:c2:9f:9b:26:db:47:4e:1c:
84:fb:b2:b7:29:95:29:13:bb:48:2b:97:ef:12:d1:
89:63:c1:b8:77:ff:cb:5b:83:a2:fa:57:f6:99:b6:
e2:ae:b2:cd:2a:30:a7:b0:79:4c:4c:30:14:44:26:
c0:ae:f8:a6:3b:c3:1f:ce:e1:e8:e5:10:9c:d2:4c:
ac:f2:83:48:bb:ee:50:0f:01:98:5c:3e:9b:9d:d9:
19:ae:77:b4:ee:cb:3c:9f:2c:97:00:3a:0b:21:a9:
e8:92:5a:fa:5f:fe:d7:93:0e:a8:9b:0a:0c:dd:7d:
c2:d6:d2:fe:ec:4c:02:2d:71:7c:ca:12:db:d9:c6:
b7:02:9e:f2:5c:94:ed:44:1c:82:60:07:e4:4b:1c:
9d:a8:5c:be:65:c4:3c:16:85:50:8a:1c:02:42:9e:
58:1f:99:18:9b:90:14:67:ae:85:5d:12:68:68:a2:
3e:c2:c2:0b:6a:3d:9f:8d:55:cc:56:f5:48:e8:f8:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:91:61:59:3D:47:53:6E:E4:DD:47:8E:E1:59:6D:BF:0E:BA:E3
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e6:e4:11:2c:e8:3e:a3:a9:ed:3e:7f:19:d5:d3:01:03:e1:
b9:64:6f:ad:09:1d:ca:d1:da:21:66:25:2e:aa:54:d6:7a:de:
4b:3e:eb:30:60:00:25:c5:a3:c0:f7:16:cd:5c:1d:82:13:46:
f6:50:bb:3f:39:5c:ab:1d:5e:64:56:fe:44:d8:42:c5:cc:ba:
2f:6c:d3:3b:20:a3:ea:9b:96:03:70:76:0b:1b:53:08:f7:49:
bf:c4:f1:84:46:46:e5:ef:07:99:c2:23:25:b3:86:93:be:1d:
3d:87:61:f8:0e:e4:b8:3f:fc:cc:68:b9:3d:cf:53:a9:87:7b:
6d:ec:54:72:99:69:3d:84:fc:08:2e:58:70:b9:24:c0:eb:76:
47:ce:27:63:2c:4d:c4:cc:d2:8e:ba:8a:70:a7:23:73:79:ad:
b1:02:dd:38:78:ea:57:0f:84:28:ce:86:73:f7:1c:c1:f2:d3:
f4:1a:0f:d6:07:f2:f0:22:0f:ad:8e:7d:39:4d:47:ae:e0:fc:
b2:13:73:c1:4c:44:42:51:3d:8f:b2:57:30:ec:6d:8b:58:be:
f6:7f:90:b3:1e:d3:26:08:b2:df:6d:57:24:c2:61:94:00:63:
62:df:57:2b:36:b7:7e:04:59:72:1a:00:ff:99:e2:0e:25:4e:
a1:0a:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:08 2025 by rpki-client