Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: EM5hNtejHCusOJ0Hm8ils1Ww29m7cB7O6iHx4NmJHSk=
Subject key identifier: 14:85:46:D6:CD:F4:89:2E:95:F3:BD:FC:BD:5C:FB:AD:3E:D5:39:59
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 0194BBCDC7B2DD0CC75741B2C92EDA57ED6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 0EB5
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: mA3uT+A9Ny8+tCdrwxs6nQEDi7tbqK5swdzmPQCZpQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:b2:dd:0c:c7:57:41:b2:c9:2e:da:57:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=148546d6cdf4892e95f3bdfcbd5cfbad3ed53959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:ec:59:e1:6e:92:18:e0:74:71:af:07:ec:
9b:76:61:90:c2:14:2b:83:50:9c:ce:08:2a:c4:b9:
bd:c4:c3:cf:68:cb:9a:4c:5d:b2:c9:6f:82:6a:5c:
4d:86:31:54:9b:48:2a:7e:53:47:e8:00:49:42:2f:
fb:bf:3d:db:a8:08:37:59:1c:22:13:6e:5d:a3:38:
4f:a1:83:06:f8:47:8b:0e:17:c1:0e:84:e6:18:85:
69:ed:22:91:6f:a0:0d:65:3c:d8:f5:50:37:64:0d:
48:59:18:08:fe:65:69:3d:bc:6d:12:b7:30:4c:8f:
9e:a4:ee:1c:76:6f:2e:22:85:7f:fd:82:ad:09:a7:
a5:69:e4:43:6b:ce:46:f6:64:f8:b7:d4:3a:24:d4:
2a:bb:a5:43:b0:82:e9:7b:10:36:07:22:72:a8:21:
73:d5:b0:21:09:5d:21:61:2a:bd:de:5a:90:7c:b1:
a8:a2:5b:5e:68:74:b1:d1:51:82:7d:2e:d6:3b:cc:
1d:66:c4:ab:60:2a:a1:74:d3:2e:c3:9d:8b:46:2e:
73:b1:53:57:a4:e9:8e:6d:da:69:86:40:9e:a7:bd:
ae:ef:dc:9b:1d:11:28:aa:f1:b1:d9:fc:b8:ee:4c:
c8:81:5d:19:69:74:c3:76:95:e6:a6:d0:cd:a8:2b:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:85:46:D6:CD:F4:89:2E:95:F3:BD:FC:BD:5C:FB:AD:3E:D5:39:59
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:e9:9d:c1:89:6e:55:9e:c9:a4:5a:a0:15:a2:cf:b7:50:
38:bc:7d:0c:c1:4d:41:97:32:13:79:66:26:fe:56:1f:8e:d7:
86:0f:af:74:f1:79:03:7b:ca:9f:5d:6d:e9:98:09:6a:8f:7b:
4e:8d:54:cc:16:b4:70:5b:b6:a2:ff:3d:b3:db:65:5b:ec:ab:
68:27:0c:3e:42:41:87:b4:d9:1b:8b:95:b9:01:46:5c:dc:2a:
68:93:01:61:59:e6:64:b9:4b:31:a9:ae:1b:2b:8e:d0:af:e0:
ac:2d:1a:c4:5d:6c:a7:91:5a:76:25:9f:16:0a:d9:ee:1b:90:
18:2d:de:eb:90:25:60:1f:81:ab:99:01:c2:5d:ca:fd:ba:8a:
1f:47:bb:bd:89:17:81:e8:f9:89:c5:ff:2f:a8:d3:36:68:40:
83:6c:10:13:09:dc:c5:df:63:4c:f5:9b:ef:02:6f:32:1e:b8:
77:78:f2:6a:56:e1:2f:32:3b:f7:4d:81:34:e0:d4:47:7d:a1:
f1:7a:40:32:49:15:05:a7:dc:00:03:7d:91:22:f0:ee:d8:a1:
4d:33:cf:65:20:21:86:0f:bc:5d:0d:74:66:dd:c8:6b:cf:d7:
23:9a:5e:c5:1a:16:1e:4f:92:a4:83:59:17:82:1c:b9:5c:32:
8e:e3:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:02 2025 by rpki-client