Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: /ZxlMUejpnoT/O4v96jG9y8WgBfq6AjlsqxaidoBXag=
Subject key identifier: B9:C3:03:57:85:BA:A0:1A:06:28:06:47:A7:AA:BA:63:0F:21:4C:7B
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 0194BC3C84E38C82B72E50544FC5CA4E2D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 0285
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: ITK87Zl7xliiJTPZEgAtHxprrvGB8xuim0ecVncIPfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:84:e3:8c:82:b7:2e:50:54:4f:c5:ca:4e:2d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=b9c3035785baa01a06280647a7aaba630f214c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:2e:84:5e:2f:b5:2d:18:64:06:d6:a1:35:
5c:03:a6:4e:9a:4c:63:6d:bb:5c:53:7e:eb:d5:cb:
5e:a7:31:d3:cf:13:88:b4:d3:3e:8d:50:3a:79:36:
c2:34:15:fe:45:13:cc:a7:3e:84:e9:97:22:c4:6b:
1b:2b:0f:eb:56:16:f8:19:5b:e1:ff:3f:f7:d6:d7:
d4:7a:2c:cd:27:7e:27:a4:50:a8:a4:fc:4d:40:5d:
4b:df:a2:3f:b0:27:b7:3e:ee:27:27:4d:f7:84:c9:
51:ea:fe:fc:29:78:0c:74:46:2a:76:e1:37:11:57:
d2:81:2f:48:6e:73:6d:4d:c8:4d:e6:3d:70:4b:0f:
21:f3:84:b3:a0:2d:b9:58:a0:db:5b:61:85:9c:f9:
0d:e2:da:09:ae:48:a6:25:05:d5:6c:d5:f2:26:34:
18:84:5d:26:de:a6:89:86:b4:ad:e2:fc:d8:ad:22:
b9:f7:a0:2c:14:f4:64:8e:1e:3d:af:90:d8:20:0c:
a4:9a:7c:a4:0b:77:09:30:07:fd:9e:58:c5:bf:3e:
9b:b9:0f:76:cc:c6:96:b5:03:32:5e:6f:76:ae:91:
56:b8:4a:35:18:51:92:cb:44:9d:97:8a:5e:bd:8f:
ae:eb:b8:27:44:32:98:64:a4:34:50:a6:e6:32:6a:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:03:57:85:BA:A0:1A:06:28:06:47:A7:AA:BA:63:0F:21:4C:7B
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6f:28:b9:ba:c1:aa:00:62:ce:a8:6e:83:70:1e:1e:e2:eb:
81:c4:e4:40:40:90:e7:fe:ba:d4:ec:6b:0f:0f:e2:35:a4:d0:
23:b7:5d:54:1b:c1:25:84:1a:57:6b:b9:3b:e0:3d:42:61:c5:
42:4c:97:c6:45:30:bb:c4:4b:b9:fd:4d:e4:6c:fa:80:36:76:
2a:77:84:e9:e5:6b:b7:12:63:c8:08:23:2b:17:ae:43:8c:3a:
b4:03:2b:00:c1:45:5e:b6:9e:70:6d:cd:ff:cc:9a:6b:77:74:
7e:d0:61:ec:e4:4e:9f:89:5a:ce:95:ff:38:55:2f:71:7e:1c:
a1:41:48:19:b9:29:0f:89:9c:45:89:de:71:5f:5a:68:96:d4:
b8:8a:1e:47:c2:6e:1a:c6:d8:26:8a:02:99:ae:ac:b3:b4:e4:
8a:da:48:c0:c6:fb:47:a9:b7:40:0d:7b:ac:7a:11:dc:c1:50:
08:4e:5a:8f:2c:b9:9d:8c:63:db:2a:a1:7a:19:be:5f:76:4e:
31:8a:a6:bc:79:86:7f:ee:3a:2c:71:83:2e:6b:f1:06:db:59:
c8:b3:19:a0:e8:c8:c0:b0:6a:92:fa:43:6c:e1:b6:39:59:e9:
c8:e1:c9:b0:5c:ef:e4:8f:98:bb:84:a3:f1:31:dc:b1:2b:eb:
a6:c1:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client