Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: qjoYvzrn6Z/pEeZD+UhViPkbBOHts3htdsYbbImlreA=
Subject key identifier: 67:88:90:AA:97:86:D1:00:E1:E0:43:EA:92:B9:41:28:38:38:86:3A
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 0194BCA9EE9A126690802B9A58B0A38A3D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: t8wCU9Mbas7LlIAxOr11YvBviu2Z4eq1AZ4t0+gxJ4o=)
2: q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa (hash: /Mga5oX8Op4TctH5TWu+rLivpwbBRAO4KpJeZeXs2ec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ee:9a:12:66:90:80:2b:9a:58:b0:a3:8a:3d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=678890aa9786d100e1e043ea92b941283838863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:e3:30:a1:af:2c:f0:27:66:b5:1f:9c:d5:
3d:69:ba:de:85:4d:f6:f0:45:53:db:8c:38:31:1f:
8e:1e:81:96:5c:00:2a:e0:87:8d:c9:bb:61:2e:0e:
d0:84:a0:97:f9:ad:07:a7:44:7b:ae:51:ee:4f:fb:
ad:8f:c3:62:84:90:41:4f:48:da:f4:86:32:b5:cc:
f9:da:2d:45:68:14:1e:28:e4:9c:18:89:72:68:ab:
70:2b:6f:34:95:41:0d:5e:c4:d9:64:d6:ca:6a:e1:
ae:ac:49:53:a1:a7:01:52:fb:97:3f:3b:3f:47:f2:
76:c2:2b:25:69:c9:f2:51:4b:6c:ff:3f:45:e8:f0:
4f:eb:eb:68:9b:e8:f9:40:cc:8c:fe:20:5d:31:15:
9f:db:75:3f:c0:ff:85:96:fa:80:0d:73:6e:cc:3e:
af:4d:af:cb:25:94:17:94:a8:38:b0:5d:3b:87:2a:
fd:c3:4b:6f:d2:34:6e:bd:07:ff:43:9e:7c:08:45:
05:87:36:c0:c1:1b:bf:2b:c2:ff:a4:53:61:eb:73:
03:3b:56:55:ef:84:76:24:08:f7:fc:77:98:9c:4a:
c3:bc:bc:a4:6f:f0:f4:a6:59:26:57:c8:67:9f:f6:
14:5e:3e:90:b3:16:2a:6a:c8:43:8a:db:39:73:ce:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:90:AA:97:86:D1:00:E1:E0:43:EA:92:B9:41:28:38:38:86:3A
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:58:b5:74:10:c3:cb:bf:4f:2d:fe:7c:dc:b7:43:98:3b:60:
31:ce:33:60:4e:0f:01:48:30:05:9c:d3:53:a1:df:7b:95:f7:
b7:87:5e:9e:94:c2:c1:c0:af:f6:89:4f:3d:a4:d2:6c:27:be:
5f:e1:1d:c0:1b:e2:c0:84:07:17:cf:2c:a0:89:16:b1:a8:23:
0d:ba:5d:0f:63:33:f5:af:09:15:db:a2:bd:59:63:1b:a7:a6:
71:33:10:8d:b3:eb:d7:d1:f6:c4:9a:d8:ab:40:22:2f:5f:a6:
c4:ea:9e:44:b6:7b:53:63:90:5d:f2:63:53:f8:fa:09:8a:cf:
6d:68:48:d6:a5:a2:a0:76:56:ec:63:f0:18:2c:e9:0f:2a:df:
ed:68:be:10:01:4f:40:a3:8b:73:2e:2f:4c:c7:2d:5f:55:07:
39:08:41:d5:fe:2d:33:70:d5:b6:21:4d:63:07:69:65:e6:98:
f1:f1:d3:2d:c4:09:1e:71:41:d6:57:50:aa:18:0a:3e:1e:2e:
b6:2c:e8:62:23:31:16:3e:4c:f2:33:49:4e:b1:e6:f3:4c:cc:
f7:36:f6:43:95:b3:d2:3c:55:e3:12:6d:bb:07:e0:34:3b:e0:
b8:b4:8f:7a:57:ca:30:9b:37:fb:45:e2:2b:b4:07:78:83:35:
93:b5:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:08 2025 by rpki-client