Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: 6o5vRnDZcnN6bvcSZIaWrVBGgkMjrLDn5iA9LV50BuI=
Subject key identifier: FC:BF:7A:BB:D0:15:21:E8:71:A8:3E:68:50:53:EB:2D:5A:A1:0C:9E
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 0194BD4E48AF18B570482546ECAD27424E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 1270
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: ANF3Eoj+X+JTglBCjbjtT52qYcOWruSQHCHRHndqv50=)
2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:af:18:b5:70:48:25:46:ec:ad:27:42:4e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=fcbf7abbd01521e871a83e685053eb2d5aa10c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:06:13:e8:8a:17:dc:f6:98:56:d1:9b:00:
e7:a9:1c:f2:d4:ff:f5:aa:8b:05:55:44:86:6c:97:
a5:b2:a9:7d:98:ea:7f:f7:29:77:db:76:29:9a:5c:
d0:90:a7:25:c8:4e:ab:95:d3:7c:c2:1f:2e:3e:4f:
15:cb:01:58:cd:82:6a:53:cc:e0:1c:ee:49:bc:ac:
7d:59:f3:0f:55:2f:ce:7a:7e:ed:48:6c:2e:bf:63:
47:a5:d4:f9:56:a3:6f:9e:57:9c:9f:ac:6a:18:f9:
df:77:d1:0e:b4:be:2e:98:d8:0b:3e:05:ed:a2:41:
37:12:94:11:ba:ad:7e:68:cf:91:5f:82:53:85:74:
33:06:e4:c9:91:9f:b2:e9:7d:0c:a4:75:73:d1:7d:
36:2e:f5:ba:b2:1e:bc:56:c3:29:3c:72:75:b9:6d:
1a:b7:99:a4:fa:d4:ce:91:08:4d:ef:71:d9:b5:42:
4c:84:7f:70:de:7e:34:75:1e:05:a1:16:1e:aa:d4:
70:03:4b:60:01:4b:d3:c1:d5:4e:f6:32:9c:82:e9:
9d:aa:a2:bb:b3:d8:d5:b3:da:73:92:74:2e:e2:aa:
03:65:c7:a5:92:21:1f:51:01:b5:9e:4d:c6:be:51:
7a:78:d1:02:06:d4:33:1c:b7:27:4e:6b:b0:88:a8:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:7A:BB:D0:15:21:E8:71:A8:3E:68:50:53:EB:2D:5A:A1:0C:9E
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:a4:c3:9d:f8:d4:66:8a:90:8f:85:78:f2:8c:d5:ce:dd:
c6:ae:91:87:44:0a:6b:0d:78:b5:b1:76:e7:6f:5d:57:95:06:
3f:d1:01:ef:0b:ef:b0:99:d1:33:3a:21:47:a7:95:0d:73:04:
84:cf:fb:42:d7:f3:16:01:f2:0d:70:6e:3a:87:be:38:0e:4f:
56:9d:96:da:1f:88:18:6b:0c:1e:55:93:55:58:ef:cf:c5:b8:
c0:20:4d:d9:bd:11:30:d2:eb:66:93:f8:ff:f0:99:32:dd:39:
c9:80:53:dc:7b:12:a6:31:40:2d:b5:80:7e:4d:c1:43:a1:96:
bf:a9:7d:de:d3:68:ff:bc:66:f1:db:3a:4b:73:01:9b:11:f2:
6a:c7:db:5c:3b:8d:d8:d7:18:4b:58:cb:26:f5:0f:2b:80:c5:
7c:f9:a1:0c:19:28:4b:a9:94:6e:0c:2a:5c:9b:0a:e9:5f:45:
ef:34:55:fd:e8:85:08:45:3f:b5:fd:1e:73:d8:82:72:19:95:
2e:8c:19:d3:a7:d6:e5:17:09:09:bf:5d:89:0f:65:ac:18:d2:
9d:7c:72:4d:97:28:8b:c9:67:af:0c:ee:0d:48:79:9c:76:2a:
ed:29:47:be:9f:9d:3b:fe:5b:9d:8d:57:45:cf:65:09:5f:c9:
70:0b:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:55 2025 by rpki-client