Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File: kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier: RJ/FAQqgoCAyGW7pggLIE7dDaaRj6m2spSpI3/xZMg8=
Subject key identifier: 8C:B9:7C:EE:34:05:BC:82:0E:74:CA:95:10:F7:F0:16:4A:70:A7:89
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 0194BBCE059D5C1A53652D12A1F8322CF7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number: 11CA
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: 79aNRMBWQdKg7zDcbmup2n3WmTrf/a0Z5dR4fJqoIKg=)
2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:9d:5c:1a:53:65:2d:12:a1:f8:32:2c:f7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=8cb97cee3405bc820e74ca9510f7f0164a70a789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:63:db:46:03:99:7e:84:c5:27:bc:14:21:
b7:8d:e3:78:f7:cf:a3:bb:98:4b:12:1d:97:7e:a0:
91:75:8f:a9:9b:74:0e:67:61:74:0d:d1:64:65:f4:
4a:95:f6:65:f1:89:8e:19:19:b8:ab:cd:a1:ae:91:
de:36:b4:52:eb:67:18:03:b9:da:73:55:14:4a:8d:
3d:7e:02:ec:d1:42:fc:89:d4:2c:b6:a8:e6:61:2c:
40:03:11:f0:73:d7:58:f2:03:5a:01:8e:ce:4f:ed:
bc:3a:c5:42:45:f6:9d:72:95:4d:b9:3a:51:7e:72:
b0:3e:5c:6a:d4:67:df:cd:b6:ef:33:96:76:67:9f:
89:f8:d8:0a:cd:34:8b:bd:a8:67:88:ea:72:8b:fd:
ff:b3:ad:85:8f:c9:c6:37:79:f7:e9:f5:41:60:75:
e0:5b:2b:09:c3:a9:83:74:32:1e:4e:e1:cc:67:12:
67:6a:e9:21:60:a1:54:32:23:84:04:42:1a:af:b7:
13:89:55:7d:d5:74:26:4d:31:bb:15:07:9f:c1:b8:
97:82:7f:38:cb:64:f1:a8:c4:32:44:4b:de:4c:cd:
08:57:2f:c1:a1:11:04:15:73:4a:6b:c7:74:78:56:
de:81:20:c1:d5:54:86:ec:10:ee:4a:0d:38:f3:6e:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B9:7C:EE:34:05:BC:82:0E:74:CA:95:10:F7:F0:16:4A:70:A7:89
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:41:76:42:f5:7f:b8:90:27:b2:17:1e:9a:a5:0f:eb:0b:14:
5e:88:1f:ba:98:f1:fe:b3:fd:0e:11:54:5c:c3:f6:82:c1:82:
c8:52:1c:50:ac:13:67:75:94:e6:69:3d:58:56:17:1e:72:3a:
a5:97:ed:62:5e:a2:2e:60:8a:4d:53:0e:6e:43:d4:fd:3d:7f:
c6:54:4a:0f:e2:81:b2:58:a7:f9:6c:cb:c7:cd:5e:7d:09:3a:
95:a3:23:54:e8:61:85:2c:0e:56:e5:0d:65:be:a4:9f:87:f7:
63:d5:56:2c:7d:2e:5e:5c:21:d0:5d:9e:41:ad:64:9a:5d:64:
e4:12:a7:5d:01:ac:f5:6b:06:bf:f3:6b:51:8d:21:00:56:0b:
d6:34:7f:c3:c4:81:d3:2b:f9:8f:1d:4b:f2:a9:a8:65:db:11:
ff:a6:1a:3b:ab:b2:2f:ce:35:e7:2d:f2:05:60:7c:08:f3:be:
85:5c:62:0f:fe:85:9a:67:2c:0d:6a:27:51:bb:62:1b:f0:3a:
0f:f0:d1:73:77:29:39:90:67:5b:11:d6:e9:21:df:0f:82:ae:
85:c4:df:41:a5:fb:bc:f8:f4:c0:73:c8:83:54:9b:12:a7:57:
f4:c5:c9:74:b6:d1:ff:47:50:e4:d7:10:89:68:94:aa:45:55:
b6:9d:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:58 2025 by rpki-client