Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
File: KQhfxTTBPgiC4mColfPPDFVD7wg.mft (raw, json)
Hash identifier: tx2iCi+dZL9H1ZWUjpBz4kuiDGkWu4YiLsNos1eJtJc=
Subject key identifier: AF:C7:23:34:EC:FD:66:CF:BC:59:1E:34:09:8C:75:C2:7F:BE:45:E9
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Certificate issuer: /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial: 0194BCA9927EF3089D37F14ADC75A68DBF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
Manifest number: 03A0
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 7maLWxU6IkDM2FmAqNdy7l2m8vA.roa (hash: hXSJo4W1y0TIt55yVm6o0sEdz9TFsi3M02ghZ52Dqcs=)
2: KQhfxTTBPgiC4mColfPPDFVD7wg.crl (hash: JhSm9LpP8IioF8okMyCAFrfWxYwQaOFPtuQ9OMe71lY=)
3: qf1_Wz1js3xh5T6fOQssL748W8Y.roa (hash: LIiJDjtWI/OSM/oOUeypQGPeFD9dNyCQffUSuaGgb/s=)
4: uhoFt9UL3_6UT-K7hdXHNLEPe6w.roa (hash: ABkAtvRZwRy7ibQa3d8iTzWCloU1O/vDLYDZwO5edyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:7e:f3:08:9d:37:f1:4a:dc:75:a6:8d:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=afc72334ecfd66cfbc591e34098c75c27fbe45e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:e9:3e:8c:53:8a:0f:cd:a6:39:4f:f7:6d:
1f:9c:11:da:db:26:57:52:90:24:9d:a7:c3:28:ee:
67:12:d1:5c:ad:3d:f3:0e:6a:49:a5:ac:2b:60:6d:
be:72:8b:0a:d8:52:8f:d3:40:5f:64:99:a2:f7:5f:
35:56:3b:c2:f6:11:b1:e3:9b:4e:b6:34:de:95:73:
cc:1e:ed:2b:bb:72:d6:7b:d3:ff:24:b0:b8:e1:02:
38:68:d7:d0:b5:e6:02:f2:fc:09:ad:1e:e2:56:86:
00:ec:36:7b:b0:fb:56:72:1e:ab:59:e7:8a:2d:ac:
cb:96:87:98:6c:5b:23:c8:26:96:3f:ad:a2:f0:81:
51:97:c3:d0:49:f8:08:95:e5:87:8b:94:5c:3d:78:
94:d3:27:20:61:9e:86:9c:51:59:95:ed:c3:06:48:
7f:bf:be:74:ab:39:dd:50:b2:d0:8b:46:93:09:a9:
f0:87:c5:81:2e:09:7e:3e:be:51:82:69:6f:9d:ae:
91:c3:03:3c:fb:c1:69:d3:b2:12:56:d9:de:d6:2e:
b1:2e:0e:ee:db:48:cd:bc:91:48:2b:59:8a:9e:d9:
88:4d:36:f9:ba:80:ca:4b:66:af:03:d2:4c:c2:94:
6c:d8:ac:f2:a0:f3:a8:3a:00:54:51:0f:f2:7b:59:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:23:34:EC:FD:66:CF:BC:59:1E:34:09:8C:75:C2:7F:BE:45:E9
X509v3 Authority Key Identifier:
keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:af:4f:78:09:44:0a:ac:b3:40:b7:db:2a:af:e2:23:ef:cf:
7d:ee:e4:e4:99:31:e5:39:19:5f:dd:96:c9:c5:d3:01:af:0e:
0b:30:ce:47:55:35:e6:55:a6:7b:8a:fe:8b:8f:e4:7a:c0:16:
97:0c:a7:01:84:6f:e1:e0:9d:67:ea:d1:c2:d2:f5:91:c7:92:
bc:ab:5e:f3:fe:a1:06:6b:26:5c:85:6d:e7:7f:75:49:ba:41:
b4:e7:f4:75:30:f0:4f:cb:cd:99:26:04:5e:f5:a8:ce:63:ca:
1c:24:ef:3c:47:1e:77:4f:da:87:10:54:94:2d:ff:f7:74:30:
91:05:c6:73:a9:e6:28:f8:05:93:85:fe:fb:66:11:4f:3f:73:
ce:59:5a:a2:5a:71:da:64:1c:ac:a3:54:67:0f:63:0d:8c:67:
96:2f:40:22:37:42:62:26:73:29:2b:f3:bf:2e:c8:77:69:1b:
45:7f:9d:cd:63:e5:e7:94:21:26:26:22:49:33:e9:1d:5c:21:
28:09:66:00:03:e0:b6:95:e5:3a:74:b2:bb:76:64:91:24:c1:
14:e7:e7:0b:24:1f:79:15:5b:a3:4c:3c:8b:ed:79:4b:71:4e:
c2:c5:76:91:99:90:ff:8a:2c:28:4e:d4:7d:fd:ba:69:2f:44:
b3:6a:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:38 2025 by rpki-client