Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: a69ZUVWEYFZXLZDejKuAL1cV1/1e+kUsYBmsSzdWvVs=
Subject key identifier: 23:8E:FF:05:1A:F9:E9:D6:A4:F8:43:73:D3:0B:EA:23:45:68:FF:87
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 0194BC729F2992AB4C2A50F7357D2131171B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: tWuBgxiHSBXdiorHHKKFJtZIpe32ZvuaJQi6vDLFSWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9f:29:92:ab:4c:2a:50:f7:35:7d:21:31:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=238eff051af9e9d6a4f84373d30bea234568ff87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:d4:f8:df:f1:67:c4:02:c6:4f:46:23:83:
99:78:3c:72:4e:5e:8e:a7:21:a7:a5:75:fb:ef:a8:
07:3a:d8:b9:84:32:15:0a:96:3c:5c:ab:36:00:78:
0e:b6:5c:d4:87:78:42:79:3f:75:8e:de:5e:ab:47:
97:67:81:e3:84:d0:d4:2a:f5:bc:56:87:56:bb:9d:
3d:5b:00:30:e1:65:77:b6:87:f0:be:63:c4:49:c6:
53:1c:1c:1a:d9:87:96:67:5f:bb:cb:2b:96:3b:fb:
c8:d7:6b:b5:bd:f3:2f:76:dd:cd:f0:b6:d3:49:f5:
8c:1a:6d:47:a2:1a:da:2c:e4:19:63:5a:50:67:41:
9b:34:1d:50:f9:bb:57:47:40:0a:db:d8:08:8a:40:
4e:c1:2d:bb:e4:f3:2e:e2:39:62:8e:93:15:7d:48:
3c:2c:f7:e7:af:3c:99:35:64:96:cd:c9:cf:eb:1b:
31:6c:0c:4b:58:7d:7d:41:f1:b7:4b:41:28:70:33:
97:21:dd:05:ca:2d:d0:03:cd:1f:5f:23:fd:ae:cf:
30:2b:6c:01:ad:52:59:7f:48:49:c7:e9:76:0d:b6:
d4:5d:f3:74:75:8a:a3:08:58:b9:e2:5e:7d:c8:57:
fb:14:42:53:e2:25:1a:86:4e:8b:5e:8e:36:3e:c8:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:FF:05:1A:F9:E9:D6:A4:F8:43:73:D3:0B:EA:23:45:68:FF:87
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:95:bf:39:c9:83:06:d2:3b:c1:b8:12:2a:6d:82:87:15:
31:99:5b:75:1c:2b:a9:dc:3d:11:29:a9:98:29:f2:6f:c5:f9:
45:d5:8a:af:54:70:3a:66:b7:46:17:4d:2f:51:63:72:42:e2:
fc:96:70:4f:c9:e7:1f:df:1d:86:97:18:a6:1d:ac:6d:4c:cf:
19:16:dc:24:e8:26:c2:8d:09:50:90:c2:a2:0d:a0:1f:5b:4f:
e7:5e:5d:a3:5a:14:eb:dd:5a:9a:32:fb:1e:83:41:b3:0c:45:
08:90:65:7b:d4:20:a4:f7:cb:1b:c3:9d:b9:99:f7:2d:0a:14:
f2:e9:9b:b5:0a:a4:c5:b8:25:bb:32:a5:7e:5b:c8:f9:63:1b:
b6:63:87:8c:30:e0:0b:be:69:8d:ad:88:a1:25:9b:ff:b2:e4:
d3:a0:c1:d0:97:16:d1:d1:3e:19:75:a8:e9:24:c4:ef:5b:3f:
86:36:a5:2e:a1:76:7b:3d:8d:e8:55:23:82:58:f8:ec:9f:a2:
e8:a1:c2:1c:d5:2e:19:ee:da:ce:d9:17:34:5f:42:ef:81:bb:
e1:73:fa:98:71:f5:6f:75:21:ad:e0:69:e3:38:bd:da:84:32:
76:d7:41:ee:16:da:55:a1:28:81:4e:08:61:ab:33:ee:4e:c2:
50:3a:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:19 2025 by rpki-client