Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.mft
File: rKKhlS5xiUSkBDSg6-__2iv-7V8.mft (raw, json)
Hash identifier: Mrxfku99OVy1uLjO8M7WAB7YRqM9FB7I1rs5R8fvwik=
Subject key identifier: 5B:88:98:FB:20:80:B3:1E:E2:88:12:9B:AC:EB:15:A5:7C:16:57:38
Authority key identifier: AC:A2:A1:95:2E:71:89:44:A4:04:34:A0:EB:EF:FF:DA:2B:FE:ED:5F
Certificate issuer: /CN=aca2a1952e718944a40434a0ebefffda2bfeed5f
Certificate serial: 0194BCE0E13760F828427375BB829AEA36DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKKhlS5xiUSkBDSg6-__2iv-7V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.mft
Manifest number: 10E7
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: mN-Gq3CnQOseJQb6vbylzDVdWSg.roa (hash: fOE9ILnEXk1PyxS5P7XqjGQMPFnkivt3IHprv8lvkaM=)
2: rKKhlS5xiUSkBDSg6-__2iv-7V8.crl (hash: htXbTmi+qi/RVyyeix8S+rF3Wp3vdcp05OHfjWK0gjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:37:60:f8:28:42:73:75:bb:82:9a:ea:36:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2a1952e718944a40434a0ebefffda2bfeed5f
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=5b8898fb2080b31ee288129baceb15a57c165738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:9e:da:87:27:7e:20:a9:74:63:ca:dc:a2:
a5:2a:63:bd:4d:68:bc:d0:2c:4e:e9:09:e7:9a:ce:
02:01:b4:d3:6a:d5:cf:36:28:04:30:94:7b:ba:d6:
ae:9b:bc:e9:2d:8a:12:b3:e1:81:04:8e:d0:77:6e:
d8:3c:61:ca:79:6c:fc:3c:76:ed:89:11:0a:bf:e6:
66:e3:a0:ad:79:c6:2e:0e:f0:12:7c:ce:25:80:ad:
a1:48:b7:d8:2c:fb:51:4f:f5:f5:b9:aa:4d:00:60:
7e:ac:76:60:74:90:1f:7c:98:ea:33:38:2f:a5:37:
59:77:b8:38:00:9a:9f:09:0a:6b:c6:62:07:f5:f4:
c1:8f:c9:c7:9d:a2:fd:1c:62:0a:b1:a5:c2:e3:60:
ca:93:1d:b3:7f:33:2c:f2:b6:27:7b:97:f4:33:0e:
5f:1a:4e:90:d0:4d:79:5c:49:49:a0:0c:86:7d:fb:
57:bb:21:c7:79:5f:9e:3c:65:3a:d3:b8:b2:c2:6f:
ec:04:57:fd:af:f5:38:bd:15:62:5d:af:f0:27:44:
eb:87:76:00:4a:7c:43:b4:09:de:a2:46:3b:51:d6:
44:a2:a8:a3:b7:88:0d:2f:e6:1a:d9:52:b8:50:cd:
71:21:fa:c6:f8:50:18:a1:0c:ee:4b:b3:a2:42:f0:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:98:FB:20:80:B3:1E:E2:88:12:9B:AC:EB:15:A5:7C:16:57:38
X509v3 Authority Key Identifier:
keyid:AC:A2:A1:95:2E:71:89:44:A4:04:34:A0:EB:EF:FF:DA:2B:FE:ED:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKKhlS5xiUSkBDSg6-__2iv-7V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a264a8-a666-4c87-851c-ada24ef310ca/1/rKKhlS5xiUSkBDSg6-__2iv-7V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:f5:01:7a:2a:e3:9f:b2:5e:ce:b3:5b:07:d2:45:a5:f9:7b:
fd:f2:95:06:57:0a:a5:b1:cb:30:95:f3:f5:67:d3:bd:74:f0:
c9:43:6b:57:5c:21:07:61:7c:dc:4f:59:c1:bb:ec:ca:86:d3:
79:0e:27:03:18:39:08:c9:a8:c3:0e:ce:33:bd:34:51:70:86:
41:d1:32:86:4d:52:00:58:82:68:ee:24:ec:37:4f:ac:e2:01:
35:60:24:af:c4:e9:a2:4c:11:f9:c6:b5:b5:fd:28:df:56:0f:
e8:a3:a1:c7:d7:6e:e9:7a:67:72:67:b4:e3:05:62:e8:d0:6f:
23:ca:ce:cd:b9:67:c6:2c:b0:55:f6:c7:ea:3a:49:4b:1b:09:
95:95:dd:8e:e4:41:c0:de:90:20:5c:17:83:7d:0f:6f:c3:83:
9f:82:c7:5f:d1:ce:9c:60:26:4e:f8:3c:e5:fd:04:59:0a:54:
57:3e:d3:11:21:8d:12:f7:ff:e2:81:92:56:b0:e7:07:4e:67:
83:9b:61:41:2b:02:91:0b:42:96:3b:91:85:6d:e4:21:58:c5:
4a:6b:96:6a:40:a1:07:a2:dd:59:f3:9e:c3:da:10:2a:c3:3b:
4a:40:fb:2b:1b:59:09:96:d7:02:06:30:66:0b:ed:dc:7b:21:
df:f2:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:41 2025 by rpki-client