Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: o9G7wfRxIdoKPKzYG6wfCKL6XtKJI+Ju8BniAyMMfFQ=
Subject key identifier: 80:85:01:03:D2:A6:AB:5B:57:9E:F1:04:41:B3:97:90:D2:80:3C:7B
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 0194BCA9A2F2194F50544CCE7B7DB5360F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: X9Ta/wPVtl8Qd6Jb3KECd238vdsj2TNeNamY25V+wnM=)
2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:f2:19:4f:50:54:4c:ce:7b:7d:b5:36:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=80850103d2a6ab5b579ef10441b39790d2803c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:d7:0b:d9:91:08:d0:2f:5b:af:61:b8:c5:
4a:ee:02:b1:12:4c:65:cf:1d:bd:50:b5:eb:5a:a4:
48:04:9c:6d:61:4f:99:7b:b1:d4:ca:da:a7:2f:05:
d8:d0:1a:c6:08:aa:fe:82:c6:ca:ce:fa:e5:d3:91:
a4:13:d7:75:6d:81:16:c4:75:a2:87:f1:74:e5:43:
5e:a2:5c:73:55:31:dc:af:85:a3:d5:6f:a3:4e:75:
2f:7d:48:2e:00:39:e0:ea:4c:87:86:99:04:d9:d7:
8e:2b:68:2d:e1:98:a7:92:15:d8:a6:c7:18:5b:3e:
16:94:4c:ef:2a:4a:c8:35:64:9b:29:a4:35:c2:7f:
d4:c0:11:90:6a:e6:94:dc:0f:f9:e2:5e:5b:76:ba:
84:b0:15:01:67:97:1b:43:a9:bf:7b:9e:02:0f:67:
d0:c0:52:3b:4a:4e:a2:f4:60:a2:eb:aa:e7:b5:03:
47:c6:19:64:47:5d:4e:d3:05:eb:d4:09:ee:34:af:
f6:ab:57:93:c7:64:06:00:f9:13:9d:b9:2f:6b:bf:
c2:bc:f9:12:d4:db:bf:e9:d7:1c:fc:30:aa:f5:a1:
61:72:46:fa:09:32:53:8a:e3:49:d7:5b:13:be:38:
3a:7f:03:f3:6f:ee:cf:e0:40:c7:bc:db:16:90:20:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:01:03:D2:A6:AB:5B:57:9E:F1:04:41:B3:97:90:D2:80:3C:7B
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:4d:a4:1d:3a:e2:06:0b:e1:71:0b:d4:7b:06:45:13:8c:
58:52:f3:e0:06:1a:10:52:51:e8:49:eb:c9:f9:ed:94:2b:e1:
0f:84:92:49:e4:d5:69:1b:cc:e7:5f:3d:ef:b7:88:ca:fa:30:
c9:c2:da:45:5e:dd:c2:2a:ae:37:59:d5:4e:45:3c:ee:2d:a3:
1b:76:d8:e6:60:2d:5c:5e:a9:db:f6:77:f7:d6:19:ff:e7:30:
6e:e1:4e:f8:e2:d1:d4:48:ab:ca:89:86:79:8a:fe:dc:52:f1:
aa:a7:ec:7d:90:c6:2c:9b:26:af:39:a9:bd:16:6b:fa:7d:ab:
b0:1f:a1:80:f0:52:d3:14:a9:cd:51:53:1b:95:94:4e:d5:13:
ec:4c:51:1b:f1:b1:97:4f:00:c8:62:a6:83:4d:fe:c3:0d:5d:
76:89:55:6b:5c:83:c0:aa:24:c4:35:f9:a9:8d:3e:c1:48:7f:
9b:10:84:0c:28:36:72:af:82:94:df:55:b7:7e:6e:0f:03:30:
8e:42:fe:05:29:70:72:8f:04:2d:2b:c2:2b:34:76:45:4f:d1:
f6:af:26:bf:11:6d:61:b4:0a:36:b2:fb:bd:66:2b:ce:aa:4a:
a7:c6:d1:3a:df:43:ad:c9:58:f9:27:e3:d0:bb:64:9b:20:a3:
f2:3a:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:03 2025 by rpki-client