Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: FyJPySrM6vjwgvFS/WUVIxyUX9+th+CIwYXCytZPgYY=
Subject key identifier: BF:C7:F1:48:2F:62:9D:41:BD:32:EE:03:AF:AE:66:67:0E:2C:25:CB
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 0194BCE0D9A384E869251A9565937965CEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 0E11
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: wxuvMTsxmZRRsEbawRuo8PmYQZgkv6vVdWE93lTE9ek=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:a3:84:e8:69:25:1a:95:65:93:79:65:ce:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=bfc7f1482f629d41bd32ee03afae66670e2c25cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:05:a8:1b:c8:05:f5:93:5d:97:f7:7e:27:
e8:ce:6c:7d:9f:ae:29:c3:8a:70:c2:e7:ec:be:b6:
c5:6d:3c:f8:ac:eb:f1:2c:bc:3f:8f:0a:fc:31:50:
41:bf:c5:a5:eb:0a:ef:e0:c9:12:64:84:27:f0:60:
ad:cb:d4:31:fe:2c:67:66:17:22:a3:2b:1c:c5:f2:
65:4b:e1:60:ec:22:63:cc:4f:ce:16:40:d4:4f:6b:
70:e7:c8:04:6c:29:2e:a2:db:b2:d5:c0:ad:d5:fc:
a9:fb:0f:92:ba:8c:2c:47:77:32:5a:5a:d9:3c:5b:
22:ec:55:47:20:54:99:5d:1b:f1:ad:1c:cc:24:56:
a9:30:69:0f:81:c2:c6:cf:8c:af:2a:15:38:b4:fc:
de:2d:41:65:2d:f3:35:db:b9:2a:09:16:3a:42:0a:
0e:19:cb:a1:86:a5:80:52:de:65:5f:81:b3:2c:d2:
63:1d:2c:e8:18:bd:a7:a1:22:e7:6e:ed:d5:1f:bc:
13:61:d1:b1:b4:74:bf:dc:97:f6:22:9a:99:3e:be:
37:01:33:96:ac:09:d6:b2:4b:59:c9:f2:28:ce:e3:
ee:b1:33:40:06:4d:c5:a6:a6:4d:7a:83:9e:43:e0:
04:ef:b2:ec:93:3e:a6:85:f4:01:d4:2e:91:6b:1d:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C7:F1:48:2F:62:9D:41:BD:32:EE:03:AF:AE:66:67:0E:2C:25:CB
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:db:ad:28:e7:f0:49:ba:c9:90:6c:b4:bf:9f:16:1e:94:25:
7b:b1:f9:61:38:51:bc:2a:8c:02:7f:00:26:e6:b2:41:61:cc:
8f:e1:f4:db:ab:29:2e:10:ea:80:39:83:96:bf:b1:18:9d:12:
a2:9e:08:bc:06:4f:cf:cc:08:4c:7c:e7:13:39:3f:6e:21:91:
3c:39:48:08:db:3c:43:72:51:c8:cb:f2:cd:ce:93:72:12:56:
58:2b:13:af:e8:1a:bb:3c:18:d2:a2:6d:8d:e0:68:ef:90:cd:
1d:bd:ba:92:2f:e6:ff:13:ae:dc:17:e9:59:da:1e:da:71:b7:
18:8c:f7:b2:f6:99:aa:d3:49:76:57:13:0e:c7:ba:a4:43:ad:
3d:f2:7a:5c:bd:23:e0:8d:a0:73:22:27:fa:f4:6b:62:c5:04:
bf:a0:6f:cd:e7:87:7c:41:0e:f5:da:96:cd:31:3b:f1:1b:03:
a0:2e:6b:ed:7f:5f:6b:37:b4:33:79:4a:e6:46:d3:eb:e6:c1:
41:92:eb:77:e9:29:56:62:c2:61:5e:8d:26:3d:fe:37:3f:a4:
af:39:27:fd:2a:c2:1c:a0:36:ad:1f:65:ba:e9:42:9e:1e:12:
be:5f:cd:2e:41:d9:6d:4c:ff:ee:cd:b0:5c:b3:2d:36:3e:ef:
99:d6:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:17 2025 by rpki-client