Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: TerU2ZDzccZloe3owzsJXdMNOuYa3T5FCV5mc0z+zEU=
Subject key identifier: BD:2D:12:00:BB:02:CF:B2:AE:7B:04:C3:77:C9:EC:E5:5E:20:68:C6
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 0194BC3C9300B315C48F934C5E538BB15D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 089F
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: fhqhrm_dY2gYWI5oCp04pibtM_o.roa (hash: s8FH9ikZ8P5QdYR5uDaZwWuPJb6gYAb8hHHjeN9RXKc=)
2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: R82BNVpUjURtyyJ+h0AyxdTKRnuZWn9nGAjh3+F3dNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:93:00:b3:15:c4:8f:93:4c:5e:53:8b:b1:5d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=bd2d1200bb02cfb2ae7b04c377c9ece55e2068c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:14:32:36:97:60:48:97:1e:d0:5a:90:0e:
05:66:aa:8d:a8:82:5f:c1:5e:07:56:eb:e8:bb:f6:
6e:2d:39:57:68:d9:0a:a5:f0:1d:a4:44:7a:9e:8e:
b3:4d:b7:c2:57:51:21:51:d1:02:04:ea:eb:7b:6d:
ef:a6:be:24:bc:63:49:1e:5f:0b:3f:c9:0d:bf:4f:
2d:31:4a:b1:1f:c2:39:a2:29:77:dc:89:c9:72:77:
e4:6b:93:c4:dc:84:14:53:0b:f8:56:a4:b8:82:8b:
3e:58:ce:fa:71:22:3e:15:7d:f4:1c:82:7a:99:65:
9b:1e:c0:1b:a9:8a:e5:54:c0:66:f4:09:66:ea:cf:
28:5f:ab:04:ec:71:40:79:a2:be:4e:82:6a:d7:fd:
1a:61:62:04:7f:c7:e6:91:0f:44:5e:ec:a4:fb:33:
81:2d:2f:a2:b0:d1:dc:a4:d3:3d:9b:fe:19:4a:14:
75:3d:bf:05:8f:3b:e3:c6:34:df:e7:c9:31:fa:d9:
76:79:96:8c:e3:7a:ef:8b:08:21:98:bf:5e:a6:9b:
e2:34:24:7c:ae:8f:f2:13:b1:62:ac:8d:30:05:df:
50:f8:c8:8f:19:67:16:50:6e:40:b7:74:08:08:bf:
5c:49:95:38:ca:83:6b:a9:1d:54:91:52:a8:f4:f8:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:12:00:BB:02:CF:B2:AE:7B:04:C3:77:C9:EC:E5:5E:20:68:C6
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:91:8a:49:f1:32:76:8c:8a:d2:22:b0:59:62:09:9d:69:b1:
94:b8:0b:1c:d8:ac:93:f1:fe:4e:e3:9c:c8:29:58:47:e5:80:
5e:97:a5:5f:5a:47:02:21:67:c5:6d:a0:f2:6a:6d:be:b8:65:
df:86:b1:d8:30:3c:19:a8:f2:c7:00:c9:e2:cd:21:28:e6:3c:
42:ff:fd:b2:40:1a:c3:13:60:63:fc:04:43:fe:06:bb:7c:86:
3b:6e:df:5b:fa:67:4a:c5:66:0d:2a:c2:c7:cd:63:fe:82:20:
ab:56:d9:0b:b0:41:21:17:4f:e7:8f:74:d6:b9:bf:c0:5e:0c:
8a:72:b1:b2:af:05:e8:7b:a5:25:44:f8:06:d0:48:83:bb:35:
c5:1a:0b:5f:90:1c:15:4a:8f:bc:14:48:a2:ed:1e:76:86:63:
11:bc:39:ad:d7:ac:aa:aa:e7:ab:75:12:81:cd:f3:d4:c9:68:
2f:95:2b:aa:a0:77:26:09:4f:a1:29:9f:2a:f3:b5:a3:30:ca:
0d:7b:bc:27:bd:b6:0d:7c:fe:ce:b4:64:08:6b:7b:f3:4b:f0:
30:f0:58:31:2c:b4:2e:9a:01:04:ba:e4:08:98:57:51:8d:a1:
4b:a2:fd:69:a3:26:31:c9:f1:65:fd:7c:ac:22:99:62:7a:8e:
b3:85:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:20 2025 by rpki-client