Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
File: k0S0h58Z7nGaNRRjABcm9obWWe8.mft (raw, json)
Hash identifier: GC0epWn1Gajoy+4bhChplFWXHHhImnlfxJ6hYQNW9Pg=
Subject key identifier: B8:0F:24:8D:8F:B4:18:23:E5:D2:E4:C4:92:B3:26:F5:47:5A:CC:F1
Authority key identifier: 93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
Certificate issuer: /CN=9344b4879f19ee719a351463001726f686d659ef
Certificate serial: 0194BC3C10B1F147266095518628E92385C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: Sp6LS-Lr7aNgCkiG-x4vIYL0m7M.roa (hash: 4a/RW16MYDyNLA++zl3ynSiVWGswaNsaMa2lua4RkWg=)
2: k0S0h58Z7nGaNRRjABcm9obWWe8.crl (hash: d7GbRYRemY1RYTyY2/3gQssdhPpLGK1+pOdBONm3ySs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:10:b1:f1:47:26:60:95:51:86:28:e9:23:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9344b4879f19ee719a351463001726f686d659ef
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=b80f248d8fb41823e5d2e4c492b326f5475accf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:f1:a3:b1:ca:c9:83:9b:41:00:b1:70:39:
5a:4f:c8:38:c6:4d:f6:60:ac:0c:0e:da:b5:c1:55:
a2:87:52:e3:6a:06:a1:a1:23:f2:2b:58:e3:68:d7:
ca:88:d6:1a:2c:87:32:42:8a:12:09:57:41:0e:d4:
8d:e6:5f:bf:52:be:1f:e6:7c:9d:3b:fe:c7:56:b0:
44:54:24:36:6a:8e:c9:60:33:f3:96:02:3e:9a:c5:
6a:4a:39:7b:37:24:17:c7:ed:a1:09:0e:3e:13:c1:
d3:f8:9f:6b:07:45:c8:14:63:8a:40:63:5f:f2:62:
19:8f:e6:02:94:8a:5f:e3:8d:43:56:d8:39:41:84:
a8:b1:4e:59:f6:42:35:e1:bb:0e:6b:f5:2e:60:d1:
03:40:be:15:e1:e5:83:3f:1a:ae:a0:8b:1f:ae:9c:
f6:93:8b:ea:d1:9c:e7:bc:16:63:b0:fc:b6:e1:3f:
20:44:84:11:06:18:04:99:d0:b3:a4:21:1b:24:55:
de:44:43:2d:38:ea:1f:03:43:8c:dc:6c:bd:89:c0:
e1:6b:50:9f:4b:75:5e:5b:ef:e0:a1:a4:60:24:9a:
92:f2:d9:fa:d6:8e:5c:12:af:bf:82:59:db:c2:8c:
7e:9c:37:f5:29:ef:78:b2:a0:8c:16:5d:4d:73:c9:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:24:8D:8F:B4:18:23:E5:D2:E4:C4:92:B3:26:F5:47:5A:CC:F1
X509v3 Authority Key Identifier:
keyid:93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e8:75:11:4b:eb:49:6b:7c:3a:7c:f9:03:c7:20:5b:11:c6:
e6:a9:35:89:5d:f8:84:08:fd:08:1f:d4:ad:65:e3:d6:4b:dd:
27:b8:ce:ad:11:c9:dd:9f:9e:2b:80:b5:e2:2f:0e:8b:2e:be:
52:c4:ea:6d:b3:cb:7b:7a:4c:c1:b7:38:76:93:01:97:7f:4c:
74:e6:c9:f6:be:0e:ed:e6:10:ca:cb:33:52:8e:9b:df:c5:e2:
3d:e8:3d:52:c3:77:43:e3:90:8a:b8:21:c0:5d:cf:ad:a0:b3:
2b:42:0c:e3:da:f1:ef:bd:d8:c1:51:4e:ff:e3:5c:60:ca:62:
b9:60:8f:a2:36:50:7b:d3:6a:49:dc:18:b0:4c:ad:83:38:de:
62:64:ae:ec:2d:a2:63:a2:ab:95:c1:40:1f:02:eb:bb:c7:2c:
88:64:3c:ea:88:3b:c9:a5:ed:55:c1:e0:61:66:c0:e5:d4:00:
17:30:ee:41:45:27:45:d7:65:96:79:21:69:d5:8e:3c:21:e9:
64:ab:c3:13:02:6d:ed:47:b3:80:ab:1a:d7:69:e4:11:6d:5c:
e8:b3:b6:7c:60:a5:ec:9a:55:a0:dd:0a:4c:38:ea:c3:b8:39:
e9:b0:36:af:db:44:d1:a4:69:b8:08:cf:16:f9:64:c3:ad:06:
e7:c1:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:31 2025 by rpki-client