Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: 6HYnwOCeUOQTTSwWxzXIApWS1npvx8+D0FXSVCXQHkM=
Subject key identifier: 12:DE:A3:0F:30:F7:BF:6F:DF:2A:67:50:F9:2E:66:D5:F0:A2:D1:FE
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 0194BD17BF3267A864EBFAE78C4A9CD19300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1134
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: OA6KWSCYCTcQAKvuGbqrwJraRdbMytVrFMerlD9Lj6c=)
2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:32:67:a8:64:eb:fa:e7:8c:4a:9c:d1:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=12dea30f30f7bf6fdf2a6750f92e66d5f0a2d1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:17:e5:c1:34:c1:b1:01:33:97:57:a2:6a:
24:84:17:b0:89:4a:12:fd:f7:63:2b:f3:4f:bd:e0:
ea:ce:06:a7:02:ab:6a:6e:15:97:ad:bc:b8:6b:42:
e5:f6:6d:61:1f:75:c7:28:a1:88:25:79:83:32:4a:
34:ec:35:63:36:3e:72:89:9c:1b:64:3c:fc:98:7b:
86:cf:ba:46:46:f8:07:0c:87:86:79:74:d1:9a:6d:
6b:c9:df:3a:da:92:59:86:cb:09:ec:1e:4d:4c:d1:
db:8a:75:cf:f0:27:88:da:0e:fd:9e:9d:ef:b3:06:
f3:99:5b:37:26:7f:d5:fa:ea:e7:7f:2e:62:4d:6f:
f9:04:2b:33:4e:18:e8:d3:9f:2c:03:50:db:be:e7:
c9:d8:6c:40:05:ab:b1:4a:1c:6f:1b:19:ea:b2:c6:
6e:aa:11:c0:db:8e:4f:a7:b8:74:e6:25:7a:04:51:
7e:1a:35:4d:b4:8d:b1:f9:2c:a3:fc:42:fd:6c:2b:
8e:57:12:6c:d1:d1:df:fd:d5:84:26:15:f6:64:27:
b3:2e:43:61:d5:b9:60:6f:a0:a8:7a:05:8b:96:e9:
5c:27:c5:5f:f2:c8:e8:74:45:4e:a6:47:e9:94:96:
97:b5:ba:63:46:a1:7a:3e:4c:43:ef:d7:80:6b:c9:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:A3:0F:30:F7:BF:6F:DF:2A:67:50:F9:2E:66:D5:F0:A2:D1:FE
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:56:33:dc:4c:39:45:82:1a:ed:77:74:bd:9b:28:cc:36:53:
3e:82:70:b3:6e:3b:ec:d9:e7:31:2b:ad:23:d6:e5:ab:91:ec:
8d:85:e2:ac:25:a0:1e:49:2a:96:63:9a:a0:c6:a4:ff:8c:de:
7e:90:2e:92:61:07:fe:94:4e:4b:33:e5:43:c9:27:3c:da:5b:
13:85:f3:0d:cd:c2:27:dd:a7:9a:c3:79:40:33:fc:aa:1f:b7:
c9:95:cc:9d:b8:63:de:22:1e:7f:6b:68:58:e4:19:89:0d:8a:
e7:2a:c6:e7:b9:63:c1:15:43:e8:2c:92:6e:13:8a:0c:62:9c:
8d:01:a2:74:46:32:cb:53:62:e0:60:d7:aa:87:7d:82:1a:31:
95:3e:08:47:4f:82:13:be:74:0f:d2:00:a4:4d:8d:9e:da:b4:
89:88:ac:52:e4:b4:2d:c4:ef:0e:96:cf:01:e9:47:b2:4b:f8:
56:58:90:47:7b:29:65:bd:e0:9c:97:c2:e7:a4:c6:2d:5f:c4:
52:65:e3:27:99:c8:50:89:dd:a8:83:82:e3:48:eb:5e:a3:f2:
a0:ec:ed:49:a6:15:16:63:10:2d:45:80:25:5d:d6:52:43:2e:
51:b5:13:8b:89:f2:12:c2:01:51:36:ce:11:bc:be:61:aa:e3:
25:58:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:29 2025 by rpki-client