Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: hum+pDh3k4Ksd7sd1YX7B1F74oTIhhizrKvBt1Br3jg=
Subject key identifier: 04:13:57:F0:91:EF:88:1C:09:11:08:F2:B9:AB:C3:90:54:90:6B:1B
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 0194BBCEA90B5EE6A25EE882198B219BF069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 03E5
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: ilmUYJP9An2tvy3PssJlCv8HfSc.roa (hash: 1qXew5Oe7BdIwNw0qvNlQOP+TeLMGt2S2brGQ7Jg7lc=)
2: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: ArGDybwfH1Zohr4ylNCgSMT/np+OLVZDHxfTAP12qho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a9:0b:5e:e6:a2:5e:e8:82:19:8b:21:9b:f0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=041357f091ef881c091108f2b9abc39054906b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:da:53:92:1b:6a:5d:98:7b:c8:c5:58:e6:
b9:fe:d7:35:9a:03:6e:3b:16:6c:e0:66:8d:50:f3:
97:83:dd:4e:dd:df:87:54:5b:00:92:d0:b5:05:fa:
94:b0:a1:03:01:11:fc:72:a3:fd:3a:1f:6a:a7:5f:
fb:d7:72:89:19:08:dd:60:89:03:5d:22:8a:0f:2e:
a3:28:ad:62:94:3f:c7:46:32:e0:96:9f:f6:a6:80:
d8:a0:8a:22:be:46:14:f3:44:74:2e:5a:c5:63:b6:
1f:c2:a9:6f:74:2b:4e:36:e3:41:0c:a8:5d:e9:18:
8c:4c:33:14:c9:87:49:c0:62:16:ab:8c:ce:d9:e2:
61:46:b7:07:22:33:75:65:e3:89:4e:13:38:bc:4a:
a2:21:80:98:f9:56:8f:b5:4e:40:b1:32:86:10:08:
ca:7c:f5:75:aa:a1:51:f0:00:c9:5a:a1:fe:b2:6a:
43:36:c4:50:49:25:7c:c4:39:3c:99:be:5b:0d:3a:
b4:fd:50:94:11:75:97:ac:00:1a:bc:b7:ab:3c:41:
22:84:5d:21:26:28:04:ba:63:55:cb:86:10:d0:da:
55:5e:ac:76:e2:2d:57:92:97:4e:fb:07:12:6f:ea:
81:19:4e:20:cd:14:38:51:05:3c:01:cf:18:c7:e7:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:57:F0:91:EF:88:1C:09:11:08:F2:B9:AB:C3:90:54:90:6B:1B
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a9:cf:45:35:ba:cf:a8:f1:3d:b1:49:1d:cc:cd:4e:d7:c0:
b5:b1:cf:e8:6b:81:e5:b8:36:07:c5:32:b1:30:a6:d6:ce:4e:
99:67:d2:2b:00:8b:1c:70:7b:86:06:b0:26:ac:da:3d:d1:6b:
5a:6f:00:10:95:4c:1d:fa:9c:6a:35:d9:f5:cd:93:26:85:79:
49:88:10:c8:24:48:7d:44:12:52:bc:a3:0e:09:5b:24:f5:0e:
18:58:42:f9:30:82:21:2f:68:48:84:eb:4f:c7:85:a7:0a:8e:
2b:5b:b7:a1:92:e5:f1:f4:1e:d1:32:8e:3f:78:aa:a0:3f:b4:
dc:5e:01:e7:d0:36:3c:c0:15:02:6b:33:43:62:a6:6d:80:21:
1b:12:6b:e6:c9:65:f6:24:57:8b:35:e2:8c:94:ac:3f:c9:b2:
26:35:1c:97:cf:ad:9b:01:4e:c7:ee:21:42:60:7c:5f:3e:c1:
81:64:d7:1f:91:ec:41:c7:84:ec:3a:19:d4:35:62:2c:49:85:
ce:f6:73:db:78:3a:be:2c:a2:3d:c9:1a:82:0d:f7:aa:ec:18:
fd:67:2a:25:a0:60:e3:08:16:79:bf:5b:7c:a0:c2:f6:15:ac:
ea:7d:3d:dc:d1:8d:fe:00:c7:27:69:c0:54:ad:a3:ed:1e:0d:
6e:d7:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:14 2025 by rpki-client