Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: rl/lhCyQ4vEhHfeizT2vkCK8QVKD/V/zy7ETbe+cuPA=
Subject key identifier: C9:55:F0:B1:51:5C:07:AD:85:28:06:04:59:74:B4:8F:E9:73:6D:24
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 0194BD179365D5147FE55D70902820F1A33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 04CB
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: BVPlv9+cx9zqOeQzaLZtOOPcHzGIPdTyD72SnbTEsGw=)
2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:93:65:d5:14:7f:e5:5d:70:90:28:20:f1:a3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=c955f0b1515c07ad852806045974b48fe9736d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:27:64:67:a4:59:72:74:9e:9c:f1:67:4c:
f0:61:e3:a5:e8:9a:09:eb:22:c0:7a:d3:14:28:dd:
80:2b:14:76:49:a3:1f:ee:7c:ab:ba:d6:cb:d2:84:
fb:7e:c4:16:83:a9:ac:84:4b:73:62:17:e4:b9:6d:
cf:4b:80:38:04:d3:b8:78:c2:78:d6:6a:9e:a8:86:
ff:79:4a:18:1f:e0:f5:47:00:fd:58:66:97:66:69:
58:e4:98:dc:d2:5c:21:54:1f:cc:d2:e2:68:ea:1c:
3c:ca:97:81:b3:98:75:0c:a5:50:2f:d3:d4:4b:c5:
58:da:3e:fc:0a:46:7a:36:e7:7b:1d:ad:1b:de:c5:
d7:8d:f6:27:25:f0:48:11:d4:a2:a1:42:4b:cd:03:
3d:be:e6:d8:22:53:8d:a5:92:f5:7f:d4:ad:08:e7:
53:99:64:3a:0b:4e:11:c2:cc:a9:48:48:25:e9:5c:
13:cc:4b:34:3e:31:ee:39:4e:0d:76:74:a9:ac:62:
ba:47:bf:78:16:55:06:eb:ae:96:c1:79:03:99:98:
17:98:01:75:6b:a2:46:7b:a8:86:f6:a9:12:91:ba:
14:ff:fe:cc:c7:52:f3:2b:26:4f:9c:46:7d:7b:52:
6e:3d:4e:45:c2:9e:60:76:e0:ec:2a:fc:fc:e6:af:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:F0:B1:51:5C:07:AD:85:28:06:04:59:74:B4:8F:E9:73:6D:24
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ad:87:e9:db:80:04:07:40:07:bd:bf:69:28:1f:30:51:0d:
f6:f3:da:65:bd:57:9a:29:11:e2:10:c3:0d:53:6a:70:33:03:
34:94:a4:05:a8:8f:c2:ea:72:98:a4:01:df:55:12:88:90:65:
90:d5:d6:0f:ec:e5:83:cd:c5:b4:c9:c9:82:69:a0:60:37:19:
9d:3c:b5:d9:3b:d9:6f:79:3f:51:83:d3:4e:18:a7:7d:6a:59:
2a:69:64:dc:8a:28:25:06:9f:8c:e0:14:e3:8d:3f:ee:14:4b:
2d:64:f8:3d:0a:e6:7a:44:86:00:f5:92:df:7e:ee:d0:2c:b8:
73:55:f1:61:b8:75:e4:50:ad:8c:c1:16:6e:43:9a:9d:74:d6:
a8:d6:a1:7e:09:5d:75:e3:64:1f:80:6d:b5:aa:ef:f9:a3:4d:
65:c5:a6:20:c6:04:22:24:01:0a:4e:be:f2:d2:81:46:27:51:
6b:3e:88:82:10:da:1b:81:3e:01:11:01:88:f5:e5:10:b6:16:
9d:61:c1:ec:da:28:56:ac:85:50:0a:a9:ce:11:b3:11:7b:cc:
8a:88:37:41:31:2f:14:d5:1c:a7:05:23:89:54:10:86:d5:7d:
79:56:c0:0a:d6:94:6c:39:6d:ab:80:2d:a2:8b:3a:f1:0e:80:
99:a5:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:27 2025 by rpki-client