Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: rIUsYxoUij+2EDXYo9ZMfoX09jp2ql2igpoEKecIFzY=
Subject key identifier: CE:45:3C:6A:DF:62:20:1F:F3:1F:D0:83:FA:0C:C1:FF:07:32:63:0B
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 0194BD4EC7178903EC5FA29E86E604802B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: kW3x850oVxzPsXrTzfr7YIajAq628ikvLqVnXxAcYeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c7:17:89:03:ec:5f:a2:9e:86:e6:04:80:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=ce453c6adf62201ff31fd083fa0cc1ff0732630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:c6:0f:9e:d1:2e:cc:c9:4b:ee:d0:41:e2:
96:a3:df:42:5e:62:01:1a:0c:7c:67:21:71:c3:0e:
e3:85:81:a3:8b:5d:d0:8f:b5:9c:07:5a:d3:00:e9:
19:03:99:33:ae:ae:a0:b5:81:1a:25:bf:62:7d:83:
b4:a4:cb:12:41:6a:56:25:c1:26:51:61:cf:40:48:
89:51:53:bf:c6:a8:f5:84:82:1b:03:36:39:fe:ad:
b6:30:98:a8:fb:be:19:1b:30:30:b0:d6:9d:8f:36:
b5:75:a1:21:10:c4:98:a2:dd:f2:66:ca:84:74:11:
0e:9a:5c:fb:13:c5:9f:17:f2:25:e5:da:d0:06:e2:
b0:6e:94:ac:52:0b:a1:70:fc:4b:bd:85:b1:8a:3f:
1e:96:3b:1c:cc:ee:cc:10:bd:83:44:4b:bf:d9:52:
ef:d9:09:79:a9:e4:f0:12:5a:97:08:d5:d3:a8:8d:
1f:3b:ab:d3:d5:ea:c7:cb:1a:c2:06:04:38:26:a0:
96:65:a6:34:5b:a6:3a:d8:97:28:b9:ad:13:0f:d0:
19:28:15:45:24:2f:7f:78:60:ad:c3:51:84:aa:04:
d6:3a:37:2c:28:7f:7c:a1:69:99:3e:77:73:20:dd:
ae:c8:24:42:2f:26:a6:cc:48:2f:88:4d:08:8e:c1:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:3C:6A:DF:62:20:1F:F3:1F:D0:83:FA:0C:C1:FF:07:32:63:0B
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:68:2f:0c:74:90:7e:38:bc:08:b1:14:67:27:3b:f0:eb:cc:
8a:ec:16:f9:4c:7d:86:11:03:15:2e:e9:dd:91:f9:0c:65:15:
d4:bd:56:99:b7:17:24:96:43:7b:d1:88:27:56:85:1d:8d:37:
c2:f1:e7:c3:61:73:12:ac:b0:d2:26:4c:3f:f4:da:8c:b0:bd:
84:51:a9:c4:f3:75:ff:68:ee:81:a0:5c:05:86:e8:90:65:91:
2f:17:62:07:1d:df:6f:53:1e:07:f3:f5:9d:df:9b:1e:af:4b:
0c:28:e4:85:be:48:84:46:81:e1:2b:70:20:b6:7c:c0:58:79:
52:e4:c4:14:b9:c3:19:40:b2:7d:00:1d:6f:45:73:b5:34:27:
9b:33:05:52:45:5b:07:fd:5a:ca:08:cf:52:48:7a:4d:37:d2:
ce:ca:75:fd:e8:f6:3c:a4:5e:b3:48:59:16:e4:cb:bf:82:5e:
68:4d:23:cf:bf:ae:d5:d8:7a:fc:10:0b:10:a1:2e:bb:19:39:
55:2f:e8:6d:44:57:f5:f2:e6:17:f2:60:2c:41:97:b2:cb:15:
0f:da:5d:7b:10:94:33:f6:fc:5a:51:e9:3c:e8:fa:54:18:be:
cb:b7:83:c7:51:62:2f:d9:8c:21:65:2b:71:f2:f9:09:ef:1a:
3a:cf:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:01 2025 by rpki-client