Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: qIk/xUFIZmZiFSDcfNerQ2qhoBUEwCtFWi/7dVkkuPA=
Subject key identifier: 61:70:34:36:62:CA:2F:E5:22:58:41:25:DE:C2:D4:91:1C:71:B0:A1
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 0194BC3C94BD582EF553881401DD8373BBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0385
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: nCNuIgUixmvSkiSqO3Yju4J66M2bubjSZbRRkWFCCqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:bd:58:2e:f5:53:88:14:01:dd:83:73:bb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=6170343662ca2fe522584125dec2d4911c71b0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:c0:2a:2b:21:17:3e:c8:59:2d:fe:ba:d6:
ab:04:13:38:dc:69:b2:b9:80:2c:4c:67:a9:19:d2:
fc:97:a0:25:91:c7:21:19:71:b1:37:1c:a6:c5:91:
b7:4d:11:46:62:ad:93:8d:7b:17:e7:48:a5:ce:6d:
cb:54:ff:82:66:20:b9:c8:b0:47:a3:ef:cb:16:4a:
e9:b2:66:f9:98:45:39:69:60:f1:cc:8e:2a:a0:f8:
b0:d5:11:21:4f:b5:34:a6:d8:7e:b2:91:ec:d2:c0:
63:68:96:5d:89:dc:ec:ad:a1:79:08:1d:9c:ea:fd:
a3:0a:fe:68:f8:ac:2e:77:9f:84:66:cf:97:7d:68:
58:dc:f9:c5:15:52:26:9b:ce:18:5d:37:96:3e:7f:
85:70:0f:8d:bd:15:a3:8f:56:2d:49:ae:17:b1:93:
33:c0:ea:c5:07:b9:c3:69:b9:c9:0a:5a:21:e4:6d:
2a:f6:4e:52:e7:e2:16:63:75:a3:8c:66:b0:a5:d8:
77:21:9a:06:39:80:8e:e2:64:cf:4c:69:a9:b7:5f:
f8:3e:70:e4:17:66:87:e3:14:51:c4:e9:6e:39:29:
38:69:dc:b2:82:bb:7b:c5:26:57:42:6c:fc:d0:5a:
f3:9f:29:22:63:ee:5e:7a:03:ff:e9:e0:ca:65:3d:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:34:36:62:CA:2F:E5:22:58:41:25:DE:C2:D4:91:1C:71:B0:A1
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:4d:bd:84:17:5b:9d:c8:9a:a3:bf:5e:34:6d:77:c2:d8:
3f:fe:9a:79:b1:88:d9:43:0e:7b:af:7d:cd:63:02:c6:10:c6:
cf:e0:3d:c5:ca:1f:e6:5c:71:2b:f0:9c:fe:ec:91:ca:b8:19:
0f:cc:d4:f8:b5:70:88:e9:61:75:14:57:a3:8e:a1:5b:54:8a:
06:52:3d:32:65:2d:d7:6c:97:91:28:30:e6:79:d1:79:4f:33:
a9:98:76:7c:ea:84:92:92:24:37:78:bd:39:fe:ad:48:e7:89:
7e:b2:e1:e5:37:6f:77:eb:d8:89:c8:64:9b:0b:48:cd:83:39:
3f:8a:31:0d:69:75:46:43:03:a1:6d:44:a0:c9:f8:18:77:ab:
92:48:db:43:0a:de:9e:bd:ef:14:d3:55:3a:5a:e7:35:3c:30:
40:1b:c1:8d:59:b3:ab:8c:31:a1:dc:57:64:00:13:92:bd:0c:
2a:77:1c:d6:43:94:db:3e:f6:96:08:26:e2:48:b9:c2:79:54:
0e:ff:9c:a0:5d:c0:46:69:71:5f:f9:de:c0:bf:99:e7:97:ac:
16:9f:65:89:91:fd:1c:8a:42:7e:c0:eb:4e:e4:f9:a8:f9:f2:
dd:de:85:15:70:92:69:89:a0:18:29:9a:42:53:00:16:41:02:
ed:2f:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:03 2025 by rpki-client