Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier: 3JtKBRTM24MrVpcthUWD+ieYHwalzhIUntKpqIVbXms=
Subject key identifier: DC:77:CC:2B:98:3E:57:1E:6B:5B:C1:7D:79:18:30:BC:E1:27:7B:A0
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial: 0194BC3BE98309266B191B73FD0126E780D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number: 1018
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: ptS5PfZaxWrWRs/Tsbosiy5XqFEwkc/l86i2LCnCsYw=)
2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e9:83:09:26:6b:19:1b:73:fd:01:26:e7:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=dc77cc2b983e571e6b5bc17d791830bce1277ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:8e:6e:d5:27:36:85:c8:35:ac:f8:89:e4:
4b:f4:bf:79:a9:46:d4:85:2c:b1:a7:8b:c0:94:3c:
84:7f:0f:7b:5d:f5:2c:4a:2d:73:73:ab:d5:da:b2:
95:c1:1f:6a:44:7d:2c:8f:22:20:f1:ec:b8:a4:58:
42:55:15:b2:a0:43:a2:fe:37:2b:62:a5:62:db:40:
82:10:5a:71:a4:73:bc:fb:61:d4:4f:b5:fb:29:d7:
2b:2c:e0:92:ae:4c:b9:50:76:54:47:31:16:fb:00:
70:9c:97:bd:d7:46:8f:d3:0b:cd:53:99:0c:13:2e:
62:e6:0c:54:05:2c:89:f9:0a:71:3c:4b:4f:80:8b:
d9:d8:0d:a5:40:64:c8:0f:2f:61:b6:d7:01:af:4a:
01:30:e9:97:5b:88:6e:ec:77:97:b9:f9:94:17:4c:
27:b1:19:f8:64:b8:8f:ea:8a:f1:84:ea:ec:6e:39:
05:54:b8:72:0b:e5:a1:33:0a:07:e6:cc:66:01:fe:
af:a9:27:5b:28:5f:df:f8:80:90:5d:ac:25:d5:af:
db:d5:cb:c5:70:a3:ce:8d:21:bd:0b:c0:3f:dd:7b:
23:d4:56:b9:5d:ad:61:11:ad:92:14:f5:0e:ee:9b:
bc:09:f9:e2:9b:24:23:d3:a1:d8:67:ef:27:5e:75:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:77:CC:2B:98:3E:57:1E:6B:5B:C1:7D:79:18:30:BC:E1:27:7B:A0
X509v3 Authority Key Identifier:
keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e0:a6:c0:fc:74:10:13:84:97:8d:31:3a:ad:04:54:fb:4a:
f8:00:74:66:e0:78:82:c1:cd:71:3e:5b:bb:dc:68:b8:c7:24:
10:23:97:30:68:07:9d:bb:2c:8d:9b:3d:00:7c:77:3a:f3:59:
b4:5d:aa:ed:66:91:0d:b7:7f:57:22:9d:55:17:8c:a0:83:50:
b1:af:45:c5:5b:05:5b:1b:67:13:d4:c3:e2:7a:d1:45:25:3a:
b9:be:86:57:62:b7:bd:e4:f2:92:d3:9d:16:38:86:f8:0e:bf:
a0:aa:b7:01:0e:0e:cf:11:78:4b:48:69:c8:f8:22:04:eb:c2:
52:d3:22:19:7a:eb:8f:23:8f:f5:2a:9a:3c:7f:cf:e2:f7:fd:
69:16:b5:4c:45:e7:d9:97:02:78:56:23:5e:75:a6:a4:7c:fd:
1b:57:52:0a:f7:1b:af:80:80:a4:53:e5:6c:a0:10:0d:e7:51:
d2:09:79:16:e4:d0:6f:6a:6e:3b:40:c0:aa:3e:41:4b:51:fc:
02:c7:6a:f7:a9:50:3c:e0:34:98:ec:fa:4f:a2:1a:7d:15:d1:
a1:3e:17:ae:6e:ce:9e:3f:0e:1b:23:63:ad:0a:7f:19:2e:15:
f7:69:20:73:70:a2:39:48:e7:34:46:a8:bc:b2:7f:ca:67:d0:
70:04:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:51 2025 by rpki-client