Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: 8ICCRZyXokUPr2fqTxonVRJPocprwpnFICkIgTAiBQk=
Subject key identifier: 07:95:93:EC:AF:CD:C6:66:C8:0B:F0:1F:87:DB:15:D3:5B:88:DD:F8
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0194BD8592000F76AFE2851BF945572E2E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: NTg9OXL0K1q6oIphLyEzaDGfQCY.roa (hash: JPGRMPCgNa0qX2FCRDdYUj8vtmsY21KyuXO1oToaMRc=)
2: dY-Dye7h41u-2hfRoP7W4pxXIJg.roa (hash: UwiKyU3cKOo3zfN7zb9sCFXqqeVuVkYYi2igBoealCQ=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: e2RtK9BpmDWCzXyBmSWIDfcURFz127L0HBFM3QkimAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:92:00:0f:76:af:e2:85:1b:f9:45:57:2e:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=079593ecafcdc666c80bf01f87db15d35b88ddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:c0:fe:20:32:16:3a:74:05:0d:3c:29:7c:
9e:bc:ca:dc:50:30:fa:2d:fe:a8:c6:a4:15:2f:cf:
10:42:ad:04:d8:e6:23:79:6d:b9:cc:9c:78:76:57:
78:bd:b6:d7:48:68:e9:7b:db:5f:7f:39:f9:ac:8f:
3c:ad:0b:e0:bd:0a:a5:86:a6:64:a6:4b:36:46:57:
86:97:0a:e2:d1:90:18:ea:86:e3:b2:93:3f:dc:b6:
95:1f:bc:64:2c:86:fb:b2:03:41:de:19:46:01:05:
11:36:19:50:f6:e1:a1:c9:f6:62:63:1c:77:46:c3:
66:46:a7:35:e5:a7:50:db:1a:41:8b:55:27:74:8d:
56:9f:bb:d9:52:dd:61:ac:45:0d:93:c1:cc:68:b8:
6d:9f:a0:b8:d2:ec:82:a3:a3:8b:b3:f3:d2:0f:0c:
43:cd:fa:37:6f:1c:03:7c:bf:2a:ca:23:86:32:96:
97:46:7d:d9:71:23:03:64:66:79:0d:2c:17:d0:1d:
57:fe:49:38:d8:d3:52:a9:e2:4e:31:97:9a:81:34:
38:c9:5b:2a:30:a0:c9:71:3e:17:74:aa:ac:69:c8:
d6:e5:e3:ee:9a:2c:b7:71:92:be:81:57:a2:49:ad:
b7:b3:60:27:7f:09:cf:17:a6:ce:f0:ef:74:f9:f5:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:93:EC:AF:CD:C6:66:C8:0B:F0:1F:87:DB:15:D3:5B:88:DD:F8
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ce:68:43:0e:b0:d3:e2:f2:2c:fd:be:1e:bb:72:16:35:af:
b3:e9:05:ff:2c:67:30:84:70:16:b8:82:f4:81:8f:45:55:b8:
4b:7f:79:19:9e:14:91:e2:76:51:21:9c:9c:98:94:87:8c:2f:
f0:6a:1c:da:41:89:0e:bc:1d:e9:7b:0b:6a:a9:81:9d:15:de:
a3:de:df:dc:f8:01:64:14:00:7a:d0:6a:a4:c0:68:57:0c:00:
46:72:a9:e9:37:73:44:a8:18:8a:b1:0c:2f:b1:b5:a2:6d:ce:
27:5e:18:df:2f:71:f8:fd:f3:b2:17:32:24:7a:be:74:96:8d:
81:ef:47:e6:09:1d:86:dc:40:ef:94:2d:f1:68:67:81:b5:b3:
d7:dc:69:dc:31:58:30:5c:cc:b0:b0:47:92:74:0a:a9:73:d7:
1d:da:77:3d:aa:48:35:41:2b:db:e4:93:2b:4a:3f:d4:8d:e6:
93:11:f9:6a:c2:5e:80:37:06:74:ac:c1:d7:f2:51:03:89:05:
85:26:62:8b:3d:84:96:60:2b:65:e4:24:db:42:b7:b4:06:9f:
73:80:a8:99:08:e4:9e:29:6a:c4:ea:a8:d0:b4:df:7d:53:59:
c9:4f:f1:b8:51:1f:11:b7:86:4a:04:ad:16:70:79:76:e6:ad:
41:d0:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:17 2025 by rpki-client