Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: h43ND9DEZlGsq1wj2ZDtTUFFTdKc6bH6j4ohm/AXv70=
Subject key identifier: F0:82:51:A5:27:4F:64:38:3C:21:B8:58:BA:F9:21:9C:BC:16:CB:64
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 0194BD8535599E341537DEFD0D3BF5BDA80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: LEYF6Y2CrlswN/su/GuvrQzDd33Lq+8qF/US9npEepU=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:59:9e:34:15:37:de:fd:0d:3b:f5:bd:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=f08251a5274f64383c21b858baf9219cbc16cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:6f:d2:ad:41:c0:73:51:1e:88:4b:78:82:
f4:27:72:af:1f:37:2e:63:c3:4a:dc:b7:fd:3e:84:
e7:65:0a:b9:db:65:8c:57:87:28:36:3b:d6:0c:e8:
27:1e:13:11:43:b5:53:24:b8:98:e6:e4:9b:2e:5e:
6b:b2:7f:41:29:87:b3:fd:45:58:25:72:2d:d3:17:
01:a9:ee:69:b5:e5:bf:74:61:01:e7:cc:ee:c7:94:
27:cd:a5:b0:8d:e8:26:70:3a:bb:b7:f5:be:a8:80:
ac:65:32:4b:3f:f4:44:8c:88:35:a4:ed:4a:93:3c:
c3:05:ad:31:a2:4d:e8:74:80:5d:d2:a4:ed:b1:39:
03:b2:0b:a3:60:56:fa:34:eb:81:a7:75:29:07:79:
4f:3e:23:63:7a:77:f2:df:43:85:8d:d0:5c:b9:cf:
10:ab:ca:32:db:20:d3:c2:e9:83:d1:8d:ca:f1:7d:
01:bf:d6:f1:7d:6b:d4:3b:59:17:c1:0a:f3:7a:b2:
3b:4c:aa:30:98:0b:2d:aa:f8:48:37:18:79:b7:ac:
91:b7:b3:ca:96:d3:e0:bd:a0:7b:12:96:13:dd:85:
b5:b3:30:16:9c:6d:36:05:99:8f:77:05:28:e0:a0:
91:9a:3e:47:96:dc:50:15:80:54:a0:3d:09:cf:b2:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:82:51:A5:27:4F:64:38:3C:21:B8:58:BA:F9:21:9C:BC:16:CB:64
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:5f:d0:fb:3e:24:28:7d:7d:cc:37:36:33:d0:95:c5:be:
ac:5b:0f:f8:e2:e0:9b:16:3c:b8:d5:b4:f0:bd:69:a3:b3:1d:
60:ae:0c:eb:f3:c9:0a:93:20:99:1d:9d:41:19:57:7d:60:ad:
08:c5:89:60:0c:f4:41:8e:f6:b9:6f:3b:f2:7d:3f:5c:b8:b6:
47:12:69:07:cb:30:8c:46:ca:be:a7:df:31:ba:e5:17:38:4b:
ea:01:a8:ec:7a:c2:8a:18:50:fd:43:11:37:45:df:c4:8a:c9:
ef:9a:39:02:1e:67:18:d4:9d:d2:12:64:86:41:b5:3b:b2:12:
8b:1c:79:23:e3:d6:7a:ae:ed:07:56:e1:7f:74:c4:87:2b:eb:
d7:b3:6a:5b:ab:00:17:85:5a:35:d4:55:2c:6a:9b:5c:24:f4:
49:93:0f:aa:90:85:f8:3c:1d:da:47:a9:16:32:31:27:8a:f9:
53:cd:e3:73:62:d6:35:d7:d3:49:18:47:e9:67:2c:63:87:ba:
e0:ba:42:8f:c6:c3:6b:60:e7:ef:0f:d1:91:3b:72:11:3e:b0:
cf:f9:05:b3:9d:db:35:55:0c:16:c0:f2:08:21:e7:6e:e1:b9:
1b:7e:27:72:c4:6f:60:3e:aa:c3:a2:99:07:b4:f3:c8:2b:52:
97:61:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:32 2025 by rpki-client