Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: Au7Qqgdh0FyAA6PpM3Dq9Uc8WFdYf55rdkAsEkgHdM8=
Subject key identifier: 8C:FF:EB:FE:6F:4A:15:FE:30:9A:01:37:AD:28:CB:92:F1:25:AE:62
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 0194BCA99A1297F838326D05591A670D7F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 1378
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: RTliMBlEVGbqAhXTq3n3cnFFmmmuNDfOY6vbz0b5fIs=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:12:97:f8:38:32:6d:05:59:1a:67:0d:7f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=8cffebfe6f4a15fe309a0137ad28cb92f125ae62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:f3:fe:54:40:c8:2e:44:fa:bf:ff:8a:5a:
a3:dd:80:2a:b2:39:99:b3:13:49:0b:a6:2e:5f:6b:
13:5e:f0:d0:53:74:d5:34:b1:7c:d2:7c:7f:3a:27:
e8:53:58:5d:7e:01:bd:41:e7:40:df:76:cb:28:58:
44:40:a8:4e:ff:03:0b:55:70:f4:46:5f:89:fb:10:
84:f1:34:0c:9b:f6:d4:46:6e:96:c4:da:cd:63:6e:
fd:b9:9f:a9:92:52:51:02:d9:f6:79:4c:45:95:7f:
ae:bb:b7:f0:91:6d:b3:2a:e1:3c:6c:c3:78:07:86:
66:80:b4:96:1d:31:ec:ba:4e:8a:c6:38:0e:33:d0:
f2:5f:55:8c:71:a5:e4:15:3c:ba:ef:9c:52:99:4e:
e1:f8:b7:75:b4:73:89:ad:57:ed:2c:32:f5:44:77:
9f:9c:77:dd:26:9f:2a:62:3c:f3:31:9b:f2:fa:45:
12:9a:a2:44:3e:b1:1d:20:0d:4c:98:e2:f3:36:31:
0e:18:56:56:ba:db:4a:b5:78:3e:0a:2d:48:04:cc:
76:86:e2:5d:53:42:19:63:3d:05:2c:c6:98:3f:a4:
b7:46:de:9c:dd:2c:e9:28:78:43:2b:2f:d2:1e:42:
77:cc:6c:ca:71:63:fa:a1:7f:1a:7e:0f:c1:03:b6:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:EB:FE:6F:4A:15:FE:30:9A:01:37:AD:28:CB:92:F1:25:AE:62
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f1:b9:10:9b:4c:a0:5a:d5:58:25:ae:e8:31:f0:21:d8:20:
e0:33:3c:18:33:d5:90:f0:36:cf:b7:36:bb:95:f3:47:5f:17:
eb:88:f3:c5:f6:e2:69:a3:4f:a3:b7:d6:31:d8:46:ac:35:9e:
03:33:32:ca:d5:96:ae:cc:ba:31:e2:bc:fe:04:68:e3:b5:ea:
08:32:5d:2b:de:86:fe:45:fb:0f:72:b7:9f:62:ae:10:b0:44:
6d:bd:70:85:4d:40:b7:22:88:cd:1c:80:f5:ad:3f:e0:1d:5f:
54:7d:ea:18:20:66:c2:ed:dc:a1:ba:3a:96:33:20:f5:87:21:
65:c4:3e:1c:68:27:b7:37:93:c7:7d:ab:78:6f:ab:4f:5c:97:
5a:63:6f:42:e5:5f:75:af:c6:e3:e3:13:e5:12:d4:58:82:f2:
a4:0b:37:7d:a1:2b:b9:f1:5c:71:b0:b7:63:88:19:23:45:af:
11:87:b9:64:c1:cc:39:4c:c2:a2:89:70:37:79:d9:67:79:2a:
2b:e4:09:2e:dc:e0:de:ca:f0:1c:ac:55:6a:bc:53:4d:bc:94:
9f:cd:64:ac:04:0a:69:1b:40:ba:c2:27:a3:95:75:9a:ab:9e:
f4:24:5b:9a:9d:e1:0c:6e:1a:d1:62:bd:f5:80:00:57:a7:8c:
bb:cf:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:54 2025 by rpki-client