Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: guxW20fRRALIXJn02R51rAd4lksbAV4SkXawFsU7TsM=
Subject key identifier: FE:3D:C7:31:D5:2A:4C:36:7B:2E:C9:CF:D4:37:F6:1C:C0:37:80:18
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 0194BD17B73428728EEE32CB5FBC9711B24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: zQR717N3VJWbmstwJ9EO1F1/PzdwPLtrMddAq/A4j3E=)
2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:34:28:72:8e:ee:32:cb:5f:bc:97:11:b2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=fe3dc731d52a4c367b2ec9cfd437f61cc0378018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:d9:e9:8f:f0:ad:b6:32:cc:b7:4b:16:ce:
14:ff:fe:7f:8b:a2:47:c9:1d:25:3d:74:a7:b1:be:
a5:dc:5f:a5:4e:29:02:cc:e8:f2:ef:4b:62:05:75:
33:df:cd:78:43:6f:fc:89:26:7d:2b:c4:5f:e5:e7:
03:67:a9:e0:d7:4c:d3:cc:ff:c0:a8:46:79:86:f8:
10:28:49:9f:66:c5:1a:a6:1d:93:03:b3:5e:3b:d1:
9d:23:86:4e:50:4e:bb:19:8c:dd:c9:9c:84:f5:7a:
da:6b:39:3a:3f:d9:e5:20:47:9c:89:c3:79:f4:57:
b4:59:60:38:b7:61:b4:3e:a0:23:b2:45:9e:ad:a6:
cc:a7:c3:ef:fc:72:ac:7f:38:5f:3d:b6:89:8c:c8:
f4:44:8f:fa:51:60:7f:6d:e3:07:06:66:2b:4b:35:
ac:59:cf:42:48:d0:89:5a:9f:14:62:0f:7d:ba:49:
0f:b3:bb:b4:56:ba:1a:c7:ac:6b:8b:11:95:3d:8a:
15:c6:90:75:75:6e:0a:f9:e3:9f:d7:62:c6:56:18:
a9:29:ce:29:d6:80:92:e4:48:de:10:f5:96:c1:9f:
a1:c4:a2:a3:5d:13:8e:4c:ac:1e:89:71:21:d4:20:
1c:ae:71:2d:18:44:79:11:be:2d:08:62:91:df:76:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:C7:31:D5:2A:4C:36:7B:2E:C9:CF:D4:37:F6:1C:C0:37:80:18
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:e1:e3:c7:e3:87:61:87:c6:70:e3:74:05:6c:1b:29:a4:
eb:ac:9b:b7:89:e3:60:0b:a6:44:1d:88:b8:6f:96:25:97:8d:
09:a4:4a:cd:7b:f3:33:ee:83:72:c8:29:8f:dd:a8:80:7f:da:
ea:63:f0:0c:e1:ed:55:30:31:56:ad:16:82:c3:5a:79:8c:ab:
49:65:50:ed:6b:82:1a:f8:5d:ea:f6:bd:68:e7:54:e5:70:7e:
58:1c:94:da:01:d0:8f:89:b0:50:67:49:d1:60:23:7a:ff:21:
4f:cd:59:71:63:78:53:54:27:c7:04:f6:0a:27:82:b8:f4:87:
fe:ed:1e:07:30:f2:b5:91:43:b2:84:12:cc:0d:04:df:2a:fd:
e7:2b:c2:6d:78:32:b5:a0:94:b3:57:1a:35:81:88:f3:a7:e2:
74:3e:e4:62:79:5d:9f:00:96:7b:87:1f:dc:58:e3:e6:4f:f6:
ea:5f:df:63:11:d6:c5:69:4c:26:7f:1e:c8:3b:d6:95:0f:6c:
83:85:6b:8d:5a:2f:c6:06:ff:7b:3d:71:06:e5:3e:d3:1c:7b:
8d:3e:9c:be:f5:d0:2b:4d:71:ac:dd:61:a4:f1:cd:2d:f1:d3:
e8:b2:37:ae:2f:72:3d:99:5e:16:c0:9a:1b:91:96:c1:e5:ab:
69:8c:6e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:52 2025 by rpki-client