Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: kQnuydpS9kFWxtF5ouberdDOU9BmXYU+oSnf70R4Rsc=
Subject key identifier: C3:0E:EB:DB:E6:CB:A8:76:FA:7E:1D:70:22:25:6B:F8:9E:A9:14:57
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 0194BCA983B7281AEA597C5A38B153E19DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: rg3LTE/EFKB9UjiQeIkyzxsjXcGVOtjS26MMSEematY=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:83:b7:28:1a:ea:59:7c:5a:38:b1:53:e1:9d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=c30eebdbe6cba876fa7e1d7022256bf89ea91457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:f7:3b:10:ae:59:63:01:28:ff:28:17:57:
8c:fe:0b:c2:67:e3:2a:4b:1a:2a:47:9c:1a:4b:51:
3b:ff:20:74:b9:a9:29:1e:d3:b2:ce:ac:09:57:f6:
28:5e:2a:b7:73:a9:2a:7d:8c:9f:f1:6a:41:77:9c:
d5:e7:22:5a:cd:d8:84:b0:82:20:b3:a6:61:fb:29:
82:ef:2e:ee:5b:38:c9:1c:09:11:ca:46:91:95:10:
b1:0b:78:3c:30:4b:65:93:63:b4:48:d5:44:a5:59:
0b:34:73:c2:0b:02:cb:2d:84:37:29:49:d4:95:61:
c9:aa:6f:ed:c6:08:97:02:74:f7:1d:40:74:df:f7:
01:d3:93:12:92:e0:36:1e:7f:ce:6a:2b:21:4f:54:
e7:dc:6d:50:e9:2e:23:8e:fb:cf:eb:c3:4b:47:0e:
40:3b:84:85:f4:0c:00:05:db:1f:a0:f2:2e:c1:d8:
0d:26:0b:78:b2:39:05:c4:21:57:ae:9c:fb:f4:05:
09:88:d9:27:5d:f2:63:d6:d2:28:e5:99:4c:f7:1f:
94:7a:6a:93:0f:d7:48:61:fe:17:63:d3:b6:7f:7f:
e8:b4:0c:32:22:2a:03:bf:09:df:02:5d:44:59:11:
e8:80:be:b4:05:de:b2:6a:3e:5c:d2:28:f0:e4:01:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:EB:DB:E6:CB:A8:76:FA:7E:1D:70:22:25:6B:F8:9E:A9:14:57
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:bb:a3:2f:39:c7:6a:67:42:ac:a3:c1:59:50:eb:80:36:
0f:bd:0c:d7:d4:bb:33:0a:0f:de:79:72:1a:67:e6:b9:49:04:
b4:b7:08:12:9d:cc:30:3d:d2:38:1d:83:07:ab:4d:97:8b:b3:
c0:6e:ab:34:f4:aa:ea:5f:f7:2e:86:39:7d:7d:bf:e2:e9:e1:
96:59:f6:24:4c:5a:e0:46:b2:dd:19:4f:12:b8:a6:a7:b1:3a:
1c:49:c0:06:54:43:4e:e7:88:fa:f8:e9:b6:0a:d3:77:15:89:
f1:89:7d:d5:d0:04:26:e2:68:92:75:4c:a7:f0:d0:89:06:1f:
15:01:c8:cd:2e:68:ff:ed:ab:9d:54:b3:15:fe:33:f4:9b:40:
f5:74:64:75:41:87:8b:0b:48:ca:35:48:22:f8:c1:61:d7:2b:
67:ad:30:69:71:4c:4e:f0:17:c2:23:bd:8a:e1:ee:56:19:41:
60:81:05:07:52:f0:21:8f:cd:9d:9a:1a:9b:bf:43:9f:89:7d:
ce:6b:c9:3f:4d:af:40:8a:8a:b3:1f:6f:e6:bd:f1:ae:87:b1:
f3:e3:eb:0d:7a:d0:e0:3d:79:b6:ca:a2:91:ab:36:dc:b4:30:
20:75:71:7f:7f:c5:f4:f9:f1:67:79:56:17:6e:0b:f3:79:b6:
7e:db:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:12 2025 by rpki-client