Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: T/zU9ysbwCLv139KbYn0RBx2xP9byb+YURCWt7HEVH4=
Subject key identifier: 0B:87:7B:7E:66:FB:CF:9B:7A:27:55:4B:51:E0:41:E3:01:EA:64:98
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 0194BD178B2D7ED784BB86345E71A33F6334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: svV4QEp203VYQLpIJQgUtHMs5UKnRuYnFsdCNy9gEE4=)
2: t6aLSSMcfA7Wmiqf40BGuDSs16w.roa (hash: QoJ0LZB+2Of6cXEGtrOrsAOrDyP5OnzmUXKVyd4YZpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:2d:7e:d7:84:bb:86:34:5e:71:a3:3f:63:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=0b877b7e66fbcf9b7a27554b51e041e301ea6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:c0:96:ae:48:0e:11:8d:5b:f8:0e:29:ba:
d5:ce:7a:f5:37:e9:8d:b3:48:38:b4:dc:69:4c:d4:
8f:e6:02:bb:c2:78:dc:a4:7a:3e:95:d2:1c:19:41:
4b:7b:85:44:4d:62:b9:4a:24:5e:db:d8:54:8b:76:
58:1e:27:42:a4:2f:34:0d:c1:8c:54:79:e7:1f:5e:
e2:43:06:ad:1e:29:63:a1:3d:3c:9f:c3:a6:25:4f:
14:77:f8:d6:5f:8d:24:5c:c6:a4:32:6d:51:ef:f3:
7b:8e:82:3c:5e:3a:6f:f8:a1:93:44:52:e0:c5:27:
a2:4c:4c:c8:0e:45:32:4a:41:7d:88:2b:fe:18:51:
b6:7d:d0:be:86:ff:e2:0b:9c:e6:ce:58:71:e9:f1:
a4:d6:38:a7:7d:c7:87:63:bd:db:66:2e:d4:38:9f:
51:58:d3:88:b7:ae:fd:0d:95:22:f6:39:95:ab:7c:
7c:ec:ca:e4:64:be:f1:1c:1c:c5:93:63:43:09:d8:
f4:3f:4f:52:11:96:f0:61:3b:e3:67:4a:62:52:71:
50:d3:ab:1a:86:f0:5e:3c:bb:d5:b6:34:9e:dd:a4:
f8:c9:4f:0e:23:a0:81:28:49:fb:c4:1c:bd:f4:c0:
6c:39:b7:2e:e6:52:88:be:0a:bf:c4:a5:2d:7c:8f:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:87:7B:7E:66:FB:CF:9B:7A:27:55:4B:51:E0:41:E3:01:EA:64:98
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:c4:7e:c6:44:c3:05:b9:11:9d:87:c9:8d:58:d3:88:44:
00:bb:aa:06:f3:de:12:9c:fb:95:fa:22:43:5d:d2:36:1d:f9:
f6:43:81:40:57:21:5a:77:94:88:e9:cd:2e:00:ef:2e:86:d6:
fd:b0:08:40:ee:89:90:42:8d:b7:34:f8:ec:c1:67:ac:df:21:
6b:26:8f:38:a3:04:8d:ed:d4:55:0b:f6:a5:d8:59:44:30:b3:
0f:f8:94:35:17:a2:35:fd:5a:b9:58:98:19:15:af:20:cf:0d:
f1:9c:9d:86:37:1e:fb:2d:08:81:9e:89:50:7b:24:dc:b7:e4:
5b:a7:80:26:c7:74:8e:80:d5:61:f1:ed:ce:18:af:5c:e3:b5:
bb:9f:9d:17:49:15:a3:b8:8d:80:0d:55:7b:95:c0:ab:a0:26:
4d:b5:a2:0f:a2:ca:c6:42:a6:9f:13:2c:bd:cb:71:80:33:6c:
a5:92:68:3a:22:45:82:08:a0:20:00:6e:71:2f:c7:80:55:09:
37:6d:f8:5e:ab:8a:65:c1:8a:5b:be:b9:21:2c:29:37:28:13:
80:78:22:a7:d7:5c:a5:73:35:db:db:0d:0f:23:95:4a:f7:64:
80:14:2d:30:6f:a7:ef:b2:62:20:3c:f1:b6:fe:0a:bb:b8:6c:
f1:f2:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:44 2025 by rpki-client