Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: IcbNptsN4wR376DQPRIn5Rxvkrv5599q0NZltN9mqvY=
Subject key identifier: 69:5E:93:0A:C9:73:89:CD:0C:3F:45:B8:55:8E:15:FB:48:A4:2C:23
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 0194BBCDDBF3A250BE707132E36A7820F83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: DEb6Xgd9ZB8hNhijTpbtZ4o4dhi0mMMk5jXhspd/7fs=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:f3:a2:50:be:70:71:32:e3:6a:78:20:f8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=695e930ac97389cd0c3f45b8558e15fb48a42c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:ab:0c:29:9b:e5:17:7f:58:ce:fb:d3:4e:
42:d9:8c:50:42:d6:35:87:89:00:41:ee:12:3b:59:
bd:3a:93:28:76:34:95:60:75:f8:00:67:74:6a:38:
b2:0a:c2:f9:ac:3f:14:9b:d9:d3:e5:2a:1e:8b:ef:
08:85:41:42:3d:9c:4b:ba:0b:dd:08:68:59:06:b4:
44:b5:58:39:8d:9b:1b:8f:27:1e:50:a4:3d:f0:a5:
74:e8:c2:a9:65:11:a2:8b:f8:29:16:c9:dc:23:fb:
e7:07:8f:63:0d:b1:7c:75:21:7a:a7:ec:a4:01:a4:
c0:a4:c6:01:f7:87:71:87:f5:7a:42:93:91:97:30:
92:60:cf:34:3d:08:2a:90:50:af:54:a9:b2:7d:43:
05:79:65:5e:16:ea:c6:12:53:38:bd:c0:48:85:fd:
ce:c5:25:8b:2c:b3:15:91:ca:8a:9d:fd:31:ac:68:
36:96:5e:a0:e0:b6:e7:be:88:3f:a3:74:6f:58:5a:
25:0b:73:65:cb:6e:80:96:ef:f5:be:94:b0:8d:69:
0d:d8:36:3a:c8:54:15:b0:51:2e:4d:d1:62:5a:5c:
54:1c:cc:71:16:bd:4c:e1:4b:5d:c7:1e:66:2a:6b:
b0:91:bf:5c:c0:ce:74:44:fa:7b:13:88:5d:9b:49:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5E:93:0A:C9:73:89:CD:0C:3F:45:B8:55:8E:15:FB:48:A4:2C:23
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:90:19:3a:f6:c0:47:3c:1c:d2:f1:58:aa:3e:e9:73:96:7b:
9b:2c:12:e2:b0:8e:fb:41:f0:66:53:c7:bf:98:ba:41:28:cd:
24:0a:66:c7:b3:d7:b2:d3:b9:8b:85:4d:99:4b:0f:61:00:6f:
f3:1a:5b:0e:33:b5:c8:85:23:09:ba:dd:5c:31:92:4b:32:63:
c0:4b:92:86:d7:9f:da:27:e9:53:c5:d0:aa:09:d1:14:8c:43:
5a:c9:ff:25:ba:c7:f5:1d:9c:c3:80:c0:27:0b:13:cd:16:72:
4c:13:8f:8a:44:ea:e1:7d:ee:ee:ec:96:59:f0:6b:07:d9:78:
5e:72:ef:48:50:9f:e8:45:92:f4:95:d3:bb:50:fc:a5:49:ca:
0b:1f:e0:fe:93:84:95:73:cf:2d:06:ee:51:f1:61:d5:a1:af:
99:76:57:81:6b:78:ce:b1:ae:c0:ba:40:90:a0:1a:86:db:52:
e5:b2:9f:59:70:f5:c8:e9:39:ec:0c:64:42:ed:b5:35:ec:70:
a0:91:3b:1e:d4:93:56:d3:b5:ac:b1:ab:86:32:a6:6d:ea:f5:
f6:3c:b1:27:cc:28:78:3d:90:a8:28:d5:c5:1f:e9:94:da:92:
77:a8:36:5c:e6:98:86:af:fb:a7:c7:82:3b:54:7f:f2:9d:f8:
95:12:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:37 2025 by rpki-client