Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: MoKsXluY4f2jsvw0J+j0CkFt8QnajHtaM/jeMCVfwuI=
Subject key identifier: 4E:3C:AB:22:5A:D6:18:E7:B3:43:07:B6:C3:F5:A9:81:1C:5A:22:EA
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0194BD854F56DAA52DDD3E12BB61B4D890E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 031E
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: URATm4jCOgD3H4rtfNMfks3a2e4.roa (hash: nWiO/SjK1FVtNWytxucXj9X6RnD6dSqkVKhRqQz1kHk=)
2: hOs9nIaVlgbTGSRX2cF-L9A292Q.roa (hash: 2H7Eh3LEgJqf2jRLorxXZOs950af5ymfMFZuDGRu8KE=)
3: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: JOuy1xDhI4subimUPGnbpzKCQ4Cy2SoL+eCgfa1nIXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4f:56:da:a5:2d:dd:3e:12:bb:61:b4:d8:90:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=4e3cab225ad618e7b34307b6c3f5a9811c5a22ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:fb:e2:89:cd:c8:17:39:cf:b7:89:71:20:
eb:22:ab:7b:65:64:60:1e:68:58:65:35:4d:b8:0d:
c9:21:a7:6e:b3:6c:17:95:19:79:52:60:36:4c:a0:
b1:e3:04:e7:5e:f9:cb:0e:01:ee:61:13:74:52:f8:
d5:31:04:2e:82:19:d4:54:c7:64:07:df:69:73:82:
32:cd:54:c6:82:67:03:4e:d3:d9:02:62:b8:84:3b:
fd:85:56:45:77:6e:6c:1b:c4:ed:0e:e1:b1:58:93:
d1:45:cd:9a:bd:63:0c:16:f7:0c:ff:b6:2b:9a:b7:
33:60:1e:f8:f2:a1:28:b8:66:1f:99:13:8d:37:fd:
ba:cc:6e:f3:e9:a7:4a:3f:1b:27:42:df:5d:f4:14:
5a:3d:9a:c4:97:69:5e:59:d0:9b:2a:d4:e8:c4:ff:
58:1d:b9:ad:11:08:c2:db:4e:0a:47:c9:7d:e4:89:
b3:c7:21:20:78:4d:20:de:b2:6e:a8:2d:e1:06:81:
8e:b3:3b:b7:a6:35:0b:f1:9f:e1:64:20:c9:65:2a:
d1:b4:01:1b:b9:6e:5f:24:9d:84:aa:9b:ad:61:72:
ec:1c:d9:44:76:44:d8:54:e8:e3:8e:77:77:50:d1:
fd:1e:ba:80:49:47:fa:35:79:86:32:8c:01:78:18:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:AB:22:5A:D6:18:E7:B3:43:07:B6:C3:F5:A9:81:1C:5A:22:EA
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5c:b3:0a:b4:f9:23:a3:85:b9:85:7c:58:3d:f6:84:77:6f:
10:e3:33:58:c8:8a:38:c4:7e:d6:07:f3:15:f8:3f:6a:d8:c5:
ce:2d:5e:44:19:61:13:4d:0b:7f:e3:51:6d:24:5d:14:19:f2:
14:3b:1b:d1:72:ec:0f:83:87:2e:84:c1:08:1f:4f:09:38:63:
4f:9f:72:f6:d3:c0:a4:9c:8d:39:5d:eb:75:8a:7c:58:96:ec:
3f:77:53:8c:03:1d:a7:c0:94:20:b1:04:1d:eb:69:2b:07:3b:
77:00:76:51:70:02:e6:66:13:a8:c5:2b:4e:f4:30:e0:2b:7f:
4d:97:e0:f5:c5:c0:ee:c1:51:e6:d6:40:d7:17:00:a8:81:96:
0c:b7:bb:df:35:d4:25:93:cb:22:e0:13:27:d8:f4:c3:a1:6d:
b2:aa:64:07:ab:db:48:26:40:db:2f:d3:8f:01:19:4a:fe:c2:
e3:8f:25:49:55:9e:b2:fa:8b:a1:ca:03:4b:8e:26:b2:8c:93:
e7:13:14:89:de:7b:98:0a:db:01:ac:9f:20:3e:84:99:b7:86:
70:91:e2:a3:e7:da:72:c8:30:48:12:69:a5:42:6e:fd:fc:b4:
68:9b:de:ee:26:36:32:1b:91:db:da:64:09:29:c3:f0:34:8e:
b4:74:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:55 2025 by rpki-client