Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: qOLPeH8nhDUf28FOekjoPrX4bTUA0kLQN6+Fc9NTrEM=
Subject key identifier: 13:AB:97:08:4E:E2:1D:E1:C7:9E:1F:63:07:34:CE:34:F8:7E:91:0D
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 0194BBCE091E78CA756D832366EAA841A7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: PC/Bxww0tMK1Ikb0iXUdQnXz5s4QBB43oEq4jFXAE1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:1e:78:ca:75:6d:83:23:66:ea:a8:41:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=13ab97084ee21de1c79e1f630734ce34f87e910d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:91:ff:5f:d3:12:8b:6b:92:e1:7a:d5:c8:
24:3a:ae:12:e5:a5:0f:ed:98:04:67:07:c2:a4:0c:
7e:84:f1:51:fe:39:aa:07:8d:35:0d:14:c5:d0:c7:
dd:b6:b5:41:ec:67:27:cd:29:11:3e:47:58:61:2d:
72:91:40:4d:8c:9b:95:cc:1e:43:2b:9a:c1:e5:40:
73:a5:97:13:e7:85:66:ff:3a:67:4c:e8:37:e1:7b:
a2:62:31:b9:53:24:87:9b:7c:ac:7e:e4:d3:6e:11:
f1:6a:5e:66:a4:7f:4c:50:54:58:bc:fd:44:40:85:
01:2e:a9:e5:4b:fb:0f:24:56:e0:c2:22:6a:a1:d4:
5f:b6:82:18:1a:bb:ee:58:c1:bf:f1:0e:7b:3c:78:
6d:34:d1:a0:d2:dd:f1:20:23:27:69:58:d4:2d:de:
a1:c2:a3:71:6b:17:4c:5c:e3:44:85:99:33:4d:c8:
29:3c:f8:0a:4d:11:7c:4b:db:ad:07:dc:a9:c0:41:
18:2b:28:cb:ea:f7:1f:88:6b:e7:25:63:f6:7a:d0:
cc:94:a2:03:ed:57:f1:f8:bd:47:3b:62:f4:07:5c:
df:b9:42:38:b1:fd:eb:d8:dc:6e:ef:d9:0b:24:e2:
d6:64:c2:8d:3b:1f:69:a1:f8:5c:7e:f5:f1:88:c2:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:97:08:4E:E2:1D:E1:C7:9E:1F:63:07:34:CE:34:F8:7E:91:0D
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ac:1c:bf:89:99:04:ed:01:a2:b1:ac:76:d4:8f:18:ae:05:
45:cb:fd:bc:42:fc:f2:34:3b:47:15:e7:4c:81:5a:94:30:58:
88:95:de:ef:c0:bc:84:87:ca:0f:18:dc:f3:2c:50:1a:3a:4c:
58:55:88:5a:d9:3e:56:c4:56:a6:5d:3d:6d:9b:7d:c4:46:1e:
12:89:4e:d1:21:08:18:e5:0d:c7:9e:5c:26:7b:8a:31:43:7c:
62:17:68:75:42:a2:5d:4a:49:5b:22:ee:08:4a:c9:28:5d:1c:
09:e0:61:eb:b6:d8:c3:21:2e:05:5b:40:4f:40:df:b4:2f:be:
eb:d3:60:c1:e3:b4:71:67:4c:6b:32:88:d8:0f:7d:c7:5a:7c:
ae:d3:a3:db:ab:b6:b8:e7:6f:e2:1b:e2:2e:64:e8:7a:95:eb:
e8:41:54:85:15:38:8e:2e:6b:2f:16:d2:9c:33:ca:d9:61:91:
50:3b:75:e4:51:1e:c1:04:c3:cd:a5:91:e9:41:39:7b:ed:52:
0c:d9:34:37:bf:0a:91:18:5c:30:71:85:96:fd:75:13:82:6d:
35:68:0b:c9:c3:c7:1e:ec:31:9a:9f:f5:f8:98:e9:d2:99:02:
e1:c6:d3:c5:a8:ff:1d:b3:96:02:b7:4b:eb:22:33:f7:51:f7:
58:51:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:22 2025 by rpki-client