Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: OQTayYRzrbsXymmT3vhAc6gKN+i3gqV878yzzyy2y4g=
Subject key identifier: 10:D0:78:30:42:17:C2:6B:E6:FE:CD:23:DA:D9:9C:D1:F1:45:37:34
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 0194BC730EF8BCE5A6F9F72FBD1EEBFE426A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 117C
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: 7dUaNv6VbPoEhGYf5XMIMZoVmaocZ5Eh2cjV6bm7mus=)
2: pX670p9lqGVYlJwJxGSVdPdpex8.roa (hash: vH3U6U3c0Q6E5azhBlckois455z44QpWevZu8CkEanM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0e:f8:bc:e5:a6:f9:f7:2f:bd:1e:eb:fe:42:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=10d078304217c26be6fecd23dad99cd1f1453734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:59:cf:88:4f:14:6a:00:89:00:09:f8:2f:
56:b3:08:e2:a0:20:63:ac:8c:7b:bd:69:04:3b:55:
dc:36:31:72:d6:d7:26:37:85:38:e4:80:7d:17:6e:
27:6d:62:89:00:59:a1:82:0c:bb:4b:36:55:0e:2a:
84:5b:28:a8:46:d7:bc:36:2f:aa:68:e8:b2:a4:dc:
83:93:2e:38:4a:5d:30:58:7e:cd:c0:97:a0:7f:0b:
fb:db:3b:08:be:6f:e5:49:ec:01:a3:fb:48:70:b3:
f7:26:a4:44:a1:45:c5:46:ef:62:66:02:a2:54:87:
72:ca:a7:cf:58:3c:cc:0a:49:a9:0e:75:bd:88:c3:
44:71:3c:0f:17:6d:29:4b:12:95:62:3d:fd:9b:9c:
f9:46:8f:1b:6b:1d:04:aa:47:e6:60:dd:53:23:d4:
62:39:44:1b:49:27:ae:63:7d:9f:f4:d2:0c:7f:7e:
d6:20:22:f0:5b:49:79:7e:6e:20:3b:fc:51:ac:b2:
7a:f6:5f:68:1b:9e:a5:02:93:ef:1b:55:08:d2:da:
ba:45:e3:a7:12:2b:cf:ff:5c:bd:16:95:52:0f:a3:
23:0c:26:4e:97:3c:2a:cf:7b:5a:18:4f:71:c3:be:
20:07:72:0b:db:af:ce:df:a2:75:cd:bc:7c:eb:1b:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:78:30:42:17:C2:6B:E6:FE:CD:23:DA:D9:9C:D1:F1:45:37:34
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8c:07:09:eb:12:a5:d1:1f:bf:76:a8:fc:ae:45:07:ef:c5:
20:35:f6:9e:9a:07:28:3d:30:ba:37:2d:22:4f:aa:7f:26:c9:
a5:f5:af:4b:be:4c:0c:1c:59:b3:e1:a4:cc:1c:01:87:79:1c:
01:42:9d:83:ed:7d:7b:9f:ec:32:38:d6:e1:67:79:a8:61:6a:
0f:dd:a1:16:19:af:0d:98:8f:b2:6e:e4:77:f8:f7:52:09:92:
76:88:8e:7a:2e:d5:5b:b8:97:bb:93:a4:e5:ed:fb:49:d7:74:
b3:fe:6c:69:0d:d9:04:21:a1:57:8e:d8:c8:1f:8a:f4:87:e7:
21:cf:74:b7:32:35:88:45:c3:f3:ae:a6:ca:4d:b7:9d:9c:49:
21:5c:c5:f0:2e:1a:a3:50:05:36:eb:f6:c2:c5:fb:0d:38:3a:
a2:25:00:68:60:90:a8:42:c3:c0:22:f0:9a:40:c7:d9:32:1b:
57:04:71:ab:80:12:24:da:41:fe:07:ec:dd:a2:cf:4c:cd:12:
70:69:4a:66:b3:8a:f1:b5:aa:10:ee:fc:20:0d:7b:f7:ce:80:
89:75:ea:8d:3c:ce:ea:e4:a2:19:79:39:75:40:8a:1a:6e:fa:
1e:c9:65:63:c8:00:7f:72:93:3a:6e:0b:0e:64:f4:84:9e:fb:
31:52:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:51 2025 by rpki-client