Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: 5hqdiY+9a/j4CsnnkGFUnA03PvEhdFMn4kYcn0d+cPQ=
Subject key identifier: 95:BC:CF:75:92:70:6D:21:84:F1:50:39:75:5D:D3:A2:73:5B:72:6D
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0194BBCEF8F1BEA203436DAED0197222DD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: EUlBKUC70EBgMWlU7OBu/JnWh8a8MbuPoM6ieRE8F2E=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f8:f1:be:a2:03:43:6d:ae:d0:19:72:22:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=95bccf7592706d2184f15039755dd3a2735b726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:c8:26:6a:f3:10:1b:42:86:37:cd:f6:de:
b8:cb:ad:8d:05:5f:79:9b:f3:ae:26:28:79:74:89:
dc:9a:d6:5f:ee:65:6a:d4:be:80:cf:5d:9b:30:9d:
29:c8:41:98:17:eb:e3:8a:ae:cd:ce:2a:a2:4e:80:
eb:bf:51:04:54:b6:0c:52:02:67:6c:b1:bb:7f:1c:
c9:56:70:50:06:23:ef:81:ad:4b:2d:03:37:ab:0c:
ad:42:99:8a:22:46:a7:0a:34:a5:71:32:06:d4:fa:
dc:be:65:cb:db:f9:ec:9a:ca:b5:8a:e9:dc:87:ef:
ea:48:95:1a:2e:7f:51:ad:70:39:4b:6d:2f:a4:ae:
63:e1:1a:6d:f0:b2:b0:ca:2a:8a:a3:60:65:f6:bf:
c7:ee:72:06:69:1b:3e:02:10:5b:c7:0e:02:d6:66:
dd:23:72:9c:42:6e:f0:30:4a:51:7e:df:ad:9b:00:
69:bb:9b:41:ed:cd:e2:28:ac:e7:02:35:b0:de:64:
64:b4:53:dc:d4:c2:cb:69:04:b0:e4:7b:b1:15:47:
02:34:ce:8a:16:86:c6:1e:f7:e2:a6:b6:0e:0f:36:
48:35:5f:0d:86:58:96:ef:73:14:31:0a:99:99:2b:
16:a3:c2:77:5f:e4:d9:e7:76:4f:70:03:cb:b4:20:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:CF:75:92:70:6D:21:84:F1:50:39:75:5D:D3:A2:73:5B:72:6D
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:93:25:17:ab:15:74:4a:2a:95:1f:3e:5e:ca:ae:c1:c3:65:
c9:54:d2:c4:84:b0:d6:88:6c:d1:96:5c:95:52:69:5c:27:e9:
0c:e7:fa:cb:c4:84:83:55:99:5f:b5:7b:58:73:65:ef:38:eb:
e0:fb:d8:b3:83:33:ff:16:55:bd:4c:f1:0d:c0:d4:4f:82:82:
6d:cd:fe:72:b5:49:45:8e:e3:bd:31:f1:cb:28:8b:8e:03:b3:
4d:d2:a5:c1:68:64:46:e3:f6:bb:7f:fd:ea:fa:dd:df:44:32:
6b:4f:a4:77:a4:15:db:11:b5:cc:04:0a:fd:ab:fe:8c:74:3a:
39:90:2c:e2:27:39:b7:08:d0:6d:d2:19:4c:8c:8f:25:f6:28:
9b:84:54:8f:8d:75:d6:54:bd:cf:2f:cf:70:a2:ea:16:f5:d8:
d5:67:57:0f:2d:05:50:a4:7d:f9:da:2e:23:94:32:86:db:37:
41:87:4c:c5:b6:21:7c:be:6a:ff:de:8a:2b:01:f5:d7:4a:03:
9e:e7:0f:37:26:99:c8:0d:21:ad:27:b6:66:7c:92:2a:dd:95:
cf:d6:80:44:b5:31:89:f6:49:00:71:e5:7d:d8:9b:6a:f9:ed:
48:23:40:56:a8:71:43:9e:84:5b:9d:73:6f:97:95:3e:91:43:
98:26:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:06 2025 by rpki-client