Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: QM2ksP+vR/u9czQiIptJyTTIyCbP9PoxMQNDpX2KtmE=
Subject key identifier: 4F:C3:BA:41:3D:8C:28:80:55:77:7D:50:19:4B:D9:DB:05:AA:31:C7
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 0194BD4EC239F8CBAC4800643F9C899BE06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0B8D
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: ThhBuKQGInqsRPsBsXInBj7OIiWAC7Ve36Wrcy+6/yM=)
2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c2:39:f8:cb:ac:48:00:64:3f:9c:89:9b:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=4fc3ba413d8c288055777d50194bd9db05aa31c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:bc:98:02:32:42:19:36:5b:39:0f:b6:5d:
da:3d:4d:01:3e:b0:8a:df:1b:51:b8:a7:fe:67:bd:
13:e4:0d:a9:22:c2:11:b5:86:ee:81:6d:08:24:08:
17:bd:11:b4:3d:6a:21:09:ed:4b:23:af:c6:de:e4:
f2:4a:b9:c3:5f:a1:85:06:47:41:09:be:6f:24:25:
19:99:53:50:dd:38:44:81:3c:93:c9:28:7c:ff:40:
d7:28:fd:65:ef:a7:d0:74:87:e6:8e:62:bd:b0:88:
99:b2:19:69:62:07:2a:d6:89:f3:8a:8b:47:b7:26:
23:59:a4:54:74:23:dd:f4:d1:9f:28:02:78:56:f5:
e4:38:e4:6c:69:f1:b3:b3:4f:f8:6a:8c:3a:3d:fe:
e1:75:8d:63:50:7e:51:01:03:d5:fd:d3:c5:ea:67:
2b:19:e8:19:29:ba:df:56:71:fd:c3:35:45:ab:c9:
95:4a:ff:b8:05:b1:a2:ef:1c:d1:64:d6:23:67:e3:
32:5f:26:8f:52:02:db:41:f6:b0:c6:ee:b9:fa:64:
5b:8b:ca:75:1e:52:7e:f0:9f:b8:f1:ab:10:1c:f1:
26:56:f7:d5:4a:4e:19:f7:86:54:b0:ec:0b:1d:cd:
3b:ed:f9:a4:d8:b5:16:57:8c:c2:28:35:ea:23:77:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C3:BA:41:3D:8C:28:80:55:77:7D:50:19:4B:D9:DB:05:AA:31:C7
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ec:6f:35:f1:13:43:c5:f4:11:f8:dc:66:43:c0:ba:b5:8d:
92:20:9a:8b:ec:2b:1a:6b:09:34:ec:44:6d:ab:6b:ec:19:07:
07:a8:57:2d:63:53:ef:c4:7b:76:b3:bc:52:1d:71:95:c8:71:
a2:cb:a8:41:63:e9:10:d6:17:31:dd:a6:21:e9:4c:88:92:44:
3e:a4:af:04:80:5f:24:d9:6a:7c:e4:e4:b1:98:fc:06:96:64:
97:56:89:65:06:8f:49:f1:bb:b5:a5:d2:46:e7:fc:a6:c3:89:
7b:ed:26:33:9d:75:d1:ec:86:b6:69:86:2c:1b:2f:e0:59:da:
23:38:09:ac:92:ac:eb:49:ca:4b:2e:52:7d:ef:b2:5c:c3:96:
7b:e2:ac:57:6c:00:5b:9b:3a:60:89:a7:7b:c1:be:0f:08:49:
a6:7d:0a:d4:fd:b5:b4:6a:c2:33:b7:3a:1a:91:82:ef:39:b0:
0d:6b:4a:fd:35:bd:9c:52:bc:a0:d1:ed:a7:ea:17:95:0e:81:
ee:18:c7:90:fb:3d:95:f2:d6:38:c8:d0:17:c3:17:1c:42:fc:
ce:91:b8:3a:70:b8:3a:ae:96:62:39:98:f7:08:f5:45:b7:bb:
65:fb:fb:1c:1b:fb:8a:1e:e1:c6:9d:65:e3:b4:dc:e4:ca:7f:
6b:78:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:51 2025 by rpki-client