Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: 7WwUQntRKjuXWWNgNugHR8XuJrWpwEh+sg1FCqU5+6c=
Subject key identifier: 3F:FC:3A:7F:9C:02:30:86:FA:8F:59:0A:46:AE:23:A0:79:1B:0A:F8
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 0194BBCE35FC71578861EF36C91EB61ECB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 06A7
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=)
2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: OhbT9sIh/HXheCNF5uy77d8h+wH1AHMRn/PszKKDw0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:fc:71:57:88:61:ef:36:c9:1e:b6:1e:cb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=3ffc3a7f9c023086fa8f590a46ae23a0791b0af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:5e:e9:9e:7b:c5:da:9d:2e:5a:c2:e5:9c:
65:2a:58:23:18:9b:6f:89:f9:a9:5b:53:06:8b:7e:
b0:8f:c9:48:c8:ea:29:fa:0b:ea:32:09:9e:0b:ed:
a1:4e:94:5b:51:30:84:5d:c9:0e:92:37:04:03:11:
51:8d:64:07:d6:ef:d6:4c:ab:96:53:91:83:1a:b7:
6f:67:e5:37:ae:03:54:63:8a:9f:81:6e:21:e3:5f:
c6:38:56:ff:51:bf:f5:c1:49:07:4c:0a:07:30:40:
52:c8:4f:fe:38:91:4a:1e:0a:d4:0f:ad:42:bb:01:
c1:7b:cf:a1:9a:1a:50:56:97:b6:f6:47:82:df:8e:
15:de:0e:b7:9a:d3:47:3d:7e:f4:6c:c4:6a:48:7c:
39:4b:c1:11:a5:c4:c0:0d:f1:32:89:29:cc:14:2d:
88:8e:ac:c3:bc:45:19:3b:98:16:09:11:eb:50:9a:
53:44:76:48:e5:fc:70:7b:53:95:e7:d7:69:ab:af:
f1:98:bd:0e:04:86:c0:ad:12:86:44:83:9d:7c:24:
02:3a:ee:b3:13:a9:2a:12:59:55:7b:08:2e:80:2d:
cf:65:89:d6:bf:e1:a3:6b:e2:b1:52:55:6b:69:65:
cf:dc:85:01:98:7f:e7:71:81:56:3f:f6:de:ae:a5:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:3A:7F:9C:02:30:86:FA:8F:59:0A:46:AE:23:A0:79:1B:0A:F8
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:10:58:b3:1e:df:95:df:31:23:e0:75:6b:14:2d:2c:94:b0:
8a:39:79:b2:dc:fa:e8:15:b9:2a:38:ea:e4:80:9e:8b:da:18:
03:03:37:fc:b5:0f:78:eb:24:a6:c2:a3:88:e9:f0:05:84:28:
cb:32:75:4f:d7:08:2b:1b:c3:9a:e0:d2:f9:9f:87:9c:86:7b:
54:5d:e8:4e:31:1b:77:18:c0:2c:17:95:23:98:d7:b9:7c:4e:
09:aa:47:df:5d:ec:89:37:ee:31:40:59:61:e5:ba:26:ea:7a:
a8:f2:71:b9:2a:5d:3b:a5:e6:82:07:70:ef:a0:06:d7:fc:44:
bc:7b:6b:9b:6e:36:c3:e0:d8:ea:2f:69:95:7c:27:b7:e5:a7:
b0:c6:2a:15:f0:62:2f:b1:44:19:51:13:83:e3:9c:ae:3d:c9:
be:37:4e:9a:73:59:b5:19:44:fe:83:f2:1a:a4:45:a0:09:88:
54:f2:b4:ef:90:a4:b1:43:31:8a:d9:ef:27:61:00:aa:82:f3:
58:48:aa:3c:41:18:40:f8:29:0f:b0:34:95:61:ad:1e:76:43:
e5:ec:a1:74:96:7d:eb:fc:75:52:85:93:f9:4b:61:13:f7:e4:
d1:41:d3:58:f3:d8:b8:6a:db:57:c7:33:96:64:51:4a:bf:de:
03:ea:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:27 2025 by rpki-client