Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: KRH6hWRAr1y2yT0m3AEuJizXiQ9EUB+Y68GCGYozgr8=
Subject key identifier: E8:45:F8:43:02:4A:D9:3D:07:2B:65:1E:7B:68:75:04:95:9E:A8:BA
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 0194BC3CA512240E2C4C3A961723E85A41E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0A29
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: gjDo9fyAqWlIozEXfGOyZ9RKnp0pzukbNon1+9ue5t8=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a5:12:24:0e:2c:4c:3a:96:17:23:e8:5a:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=e845f843024ad93d072b651e7b687504959ea8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:f0:34:09:06:79:18:63:df:bb:21:8a:66:
72:66:b1:d0:f2:ae:f9:15:35:0d:3a:04:8f:8a:cb:
5d:f9:e4:8e:64:e0:38:a6:87:c4:f3:e6:f4:fa:0c:
07:b3:0f:bf:a4:19:6a:c5:48:9d:92:9d:23:6b:47:
c5:93:44:56:ae:3f:42:03:42:8c:19:7a:24:a8:29:
9f:fe:7e:7e:e4:ac:ab:8e:66:c7:19:e5:6a:b3:e3:
57:f7:bf:a1:6d:82:5f:ba:1d:c5:a4:70:6d:76:3e:
46:0d:48:e0:e9:5a:e0:50:fb:f4:76:09:f4:99:6a:
8d:3f:68:bd:2e:dc:34:ef:b2:a5:d1:23:87:5d:22:
8a:97:34:a8:dc:e1:f3:f9:d0:30:2a:f0:43:8f:49:
bf:e4:35:49:66:ee:7e:71:14:83:8c:80:4a:57:13:
de:89:24:bf:13:00:c3:c5:43:ed:b9:33:9d:d7:ea:
28:67:01:82:f3:b0:f3:22:9f:53:d2:10:27:42:85:
41:67:94:3a:d9:99:cf:23:87:02:0b:ba:a7:fd:55:
f7:0c:c3:e7:8c:24:01:2a:ed:2c:a5:5f:1b:7d:2c:
91:78:df:f2:1b:e5:b3:f5:34:45:a8:ba:67:03:fa:
5f:23:25:39:8b:f1:aa:7a:4c:43:55:42:62:23:fd:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:F8:43:02:4A:D9:3D:07:2B:65:1E:7B:68:75:04:95:9E:A8:BA
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:22:55:65:91:37:ef:16:fb:d5:92:ca:56:3b:b4:46:7b:
cd:92:eb:8d:9b:f5:f9:41:7e:30:b7:6d:50:6a:1e:7c:38:76:
56:43:7b:49:37:af:3b:68:c6:65:13:90:c8:b8:f7:96:bc:cd:
5d:19:46:63:d5:7a:cf:6a:17:c9:a5:ca:db:cd:f5:7c:3e:e4:
9a:d5:da:45:6a:e4:9f:31:19:d9:7d:ca:22:b6:c3:e6:89:3c:
ce:4c:13:00:db:fa:3a:8d:1e:79:5e:cf:d8:fb:d2:37:03:98:
c2:7a:19:aa:20:9f:e7:c4:de:43:42:13:82:8f:74:24:70:fa:
a0:57:25:1e:8f:25:9a:c6:20:0b:17:71:4f:c5:54:33:e2:08:
e4:29:45:f9:6d:97:0e:33:c2:d1:20:64:51:59:a9:3c:54:87:
2a:cd:f7:b9:d8:53:e3:ea:c2:25:07:a1:b8:bb:ca:8a:9e:35:
82:94:7d:83:65:15:83:00:1e:ef:f9:71:41:e7:06:2c:22:72:
fd:51:e2:71:c4:cd:69:e0:0c:cb:c8:ea:87:d7:dd:c7:bf:cc:
96:01:80:33:a9:1e:55:be:d6:e8:78:b3:34:bb:3c:0d:59:1d:
55:eb:b9:51:69:e6:07:09:6c:eb:7b:f1:e4:e4:70:6c:94:71:
ae:1d:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:46 2025 by rpki-client