Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: cs8OKFjZb8ylo0FxEWRT4feOopujecukvaFJauERRS4=
Subject key identifier: 64:73:1C:1A:AD:B6:7E:D3:18:35:71:AB:B8:C6:B5:2E:FB:57:8A:78
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 0194BBCEFBEADF9A57F6AE6A2FE3607FB83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: 8QA7o6Hj1+KPsQ0LnVcRiNX2SC939H0YTBqoX+DoS0c=)
2: SjvSMbvX_pvw3i1Pn6Bx1TTyu6U.roa (hash: kgWKItzA9z25TXtV7XlZgfoMV6KRvWKz0GsOPfm6isI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fb:ea:df:9a:57:f6:ae:6a:2f:e3:60:7f:b8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=64731c1aadb67ed3183571abb8c6b52efb578a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:7c:e3:92:6a:3b:6d:9e:07:4c:25:34:0d:
be:53:0a:c4:53:a9:e0:37:ae:f4:6f:0d:6e:a7:80:
ab:f0:a4:3d:e9:22:14:21:6b:23:be:9f:b3:47:24:
47:09:13:55:ff:df:a0:a0:e5:7a:cb:0a:79:ca:5b:
d3:38:54:18:4c:b3:7c:d3:3f:ad:19:cd:22:32:5d:
a8:94:74:e3:63:2b:e5:c7:c4:27:f3:c6:0c:e8:72:
43:8e:84:80:40:74:ed:08:48:72:82:02:a0:5e:d4:
dd:8c:36:82:f0:92:d0:b7:c4:f1:7e:9d:84:04:44:
32:4b:e6:ab:06:62:1e:fb:83:8c:3b:bb:d4:05:bf:
1f:a3:5c:6b:fe:0f:70:0f:3f:10:4b:b5:6e:91:78:
24:f8:2d:d4:bd:30:e8:93:89:d6:88:c9:8d:ae:13:
bf:74:59:35:06:bf:9f:1a:00:f4:6e:10:b4:d0:00:
03:29:7a:97:73:48:32:35:10:54:30:75:d8:d8:4d:
09:0b:f6:ae:78:2a:7d:39:d7:03:64:46:57:6a:dd:
e6:df:ed:21:3f:9b:09:20:98:34:e7:f0:dd:1f:ef:
02:50:eb:9d:43:c3:b9:a1:76:27:9e:1b:a0:2b:56:
67:ad:43:19:fd:4c:8c:fc:93:69:5c:84:0a:45:c3:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:1C:1A:AD:B6:7E:D3:18:35:71:AB:B8:C6:B5:2E:FB:57:8A:78
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:eb:e8:b0:80:5f:35:64:5c:de:c1:84:58:9a:51:5c:f5:7f:
9a:c6:fa:50:5f:b6:f4:ae:c8:ad:2e:88:1d:ab:3f:4f:7b:04:
42:38:a8:83:e4:a8:db:fe:f6:9b:eb:ec:cf:4f:ea:5e:14:e1:
53:1e:25:c1:4c:03:e4:7c:0b:f1:42:3e:66:2f:2f:8d:1b:75:
b4:57:fd:9c:a8:29:f8:77:bf:33:91:4e:63:4a:da:90:cb:4a:
d5:d4:a4:37:eb:7c:ad:67:32:13:d1:32:b9:2e:f8:66:be:64:
4f:7c:89:aa:df:64:d2:06:ee:8f:36:5b:24:a9:ac:19:ec:e4:
97:e0:c9:c2:e0:cc:60:d0:aa:0b:35:d2:49:e7:29:d3:ba:e9:
d3:f7:9c:d4:15:9b:65:2d:ee:ab:90:be:76:b6:d5:e0:ab:23:
ae:59:ba:bb:28:79:56:26:9f:53:72:d1:c4:73:bc:c6:d1:02:
38:5f:c7:1d:43:cf:46:9c:bc:cf:dd:e6:c7:cb:32:b6:1f:ea:
f5:33:9e:ce:f2:63:f1:2e:f0:b2:10:89:df:31:6f:b0:a0:91:
80:5b:e5:c1:a8:0e:99:4e:72:79:b7:a8:02:76:04:f0:af:f4:
b3:ca:6c:f4:b4:64:5e:7a:96:28:c2:73:d5:c0:3d:ae:39:7f:
24:0c:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:44 2025 by rpki-client