Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: OD2bBjJVnn5PQ0cWZkFnikfHZfiWrT1oRzHGJRPZ9n4=
Subject key identifier: FA:87:E7:68:06:1C:DD:27:6F:89:9A:CA:37:D8:2B:40:15:5B:DB:B9
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 0194BBCE57496CB969A71A7353930FB39ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 1308
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: 4Q1pScs6dwxXm5kGsm9GWQFxcLac7ut4+n/cZEAD4CA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:57:49:6c:b9:69:a7:1a:73:53:93:0f:b3:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=fa87e768061cdd276f899aca37d82b40155bdbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:da:e1:72:40:4f:94:7c:d8:41:01:62:2f:
cc:13:91:a3:55:47:2e:7c:bd:12:9e:09:9b:d6:ba:
28:ee:92:1e:8a:a9:47:32:eb:e1:ee:bf:fd:08:bf:
36:83:67:8d:67:bb:33:ea:64:8b:78:f4:10:b8:75:
97:46:90:89:ec:fc:d8:97:28:66:e1:3f:30:ea:dc:
dd:16:68:f6:72:e1:30:b0:86:55:99:48:66:bc:f0:
d0:69:ba:5d:43:c9:f7:56:50:ba:1a:55:0b:00:60:
8e:20:bd:7e:32:f2:be:4d:9b:ee:89:db:23:0b:83:
f2:45:e4:11:dd:d2:f6:04:f5:98:c2:ec:19:15:46:
9c:10:82:aa:c4:ee:60:f4:ce:13:a6:83:09:a5:d2:
95:7c:67:e7:4b:85:11:b9:0e:d0:83:67:6a:97:ba:
6c:5c:b0:3f:55:de:62:f2:5d:7a:66:61:bc:b4:46:
3c:ef:9d:33:17:35:58:47:0d:4f:d9:2e:53:cc:fb:
7a:e5:4b:e7:57:3d:60:b9:ea:c3:7b:ee:50:26:3b:
52:8d:23:f7:9e:3f:d2:fa:05:62:42:51:63:98:da:
55:0a:40:fb:df:9b:7e:8c:e3:ad:9b:d7:6b:8b:8b:
ad:c4:f7:4b:34:a8:41:7e:d7:7d:b8:0c:1d:77:e6:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:E7:68:06:1C:DD:27:6F:89:9A:CA:37:D8:2B:40:15:5B:DB:B9
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d5:c7:cb:cb:52:88:56:61:bb:cb:bc:65:3e:84:6e:0a:f3:
62:81:3a:ce:cf:0c:9b:af:11:e3:8a:60:56:d1:09:01:a8:9a:
e4:2d:cd:41:e7:20:78:0e:12:2d:09:49:8a:ac:83:71:6e:ac:
2c:30:21:0c:0e:b6:d6:5d:93:ce:b1:71:1c:8f:70:f9:ec:94:
be:00:c0:80:65:e8:62:b3:9e:ad:0b:35:db:9b:fa:08:fb:f9:
50:91:d1:af:02:a2:16:dc:a2:c8:53:0a:68:61:35:48:97:bb:
16:e5:a5:30:32:9e:cd:69:92:f2:c5:e4:1c:3d:2a:f5:57:e8:
a0:2a:ab:77:63:47:cc:50:58:34:68:b9:ca:fc:21:a1:aa:86:
42:fd:9d:5d:f9:5c:26:35:f4:9a:82:7b:bb:1c:9a:52:cd:0f:
e2:be:1a:74:ae:66:ae:e0:92:42:d3:a5:ec:fb:d9:d1:a7:4b:
1f:c9:9f:e7:e4:35:e2:f0:72:92:48:c1:7c:4a:de:ec:cb:94:
0c:31:9c:d1:33:16:69:df:d2:df:f1:57:25:b9:3b:4f:7c:0c:
6c:6d:a3:60:b0:20:99:d2:5a:03:04:62:d9:54:1a:3c:6a:09:
51:4b:ef:77:95:78:13:f7:a4:aa:a0:4a:7d:af:ea:b2:33:62:
09:29:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:51 2025 by rpki-client