Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: AJlG+6s7VkaCmaUZFPpitFBkghnxrJqFIicAXITQFuI=
Subject key identifier: 12:AD:44:FF:06:06:8B:CC:15:8B:E5:47:36:C9:99:EE:37:B4:69:27
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 0194BC3C5C548ACF0CB7E7C3C6D2ADEF8A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: du_2ZQg8yAJTgrrcsRgGTQ2XG_8.roa (hash: N5/CsUBVJG9ccVWuK1sk9cFhzshfMejmNQXFk3ysFrU=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: hRL7pfsE9sFitXa/USfNaSZq0ABrmxdl295E7wjZiBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5c:54:8a:cf:0c:b7:e7:c3:c6:d2:ad:ef:8a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=12ad44ff06068bcc158be54736c999ee37b46927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:37:91:db:bc:be:b9:57:4d:62:ad:69:07:
80:8b:4a:21:ba:19:d0:68:dc:76:21:82:e3:00:9a:
2d:75:f2:5d:e4:f9:02:56:cb:05:53:9c:10:26:43:
bf:a0:f1:30:d7:b9:03:5b:eb:a6:d3:b9:7f:ad:73:
c0:a8:9c:ec:ce:d8:b2:0a:02:e0:37:b0:4a:8a:4a:
85:d4:2b:2f:98:5d:e7:a4:cb:21:cb:fb:f3:4e:e4:
7d:30:35:c8:3c:f3:58:15:3e:70:0d:c8:6b:b6:be:
09:76:9f:03:93:11:4c:68:11:8e:c0:03:07:73:89:
84:cd:a0:22:46:68:62:20:eb:5e:90:7e:d9:30:97:
b2:a4:29:37:86:6b:9e:5a:87:b6:f0:6c:e9:d8:0a:
c1:18:21:86:a9:a4:84:2b:83:23:50:56:cb:c4:df:
0a:60:b5:e3:84:92:6c:0f:ba:2e:ad:ab:8e:20:c5:
d4:7f:04:dc:b8:ac:2a:ca:dc:b6:00:03:71:f6:82:
e4:92:ff:45:50:f7:ee:ec:9b:c6:0e:61:cb:fa:47:
62:e1:e0:38:85:ee:79:52:27:d5:6a:21:6f:f3:bf:
a4:71:9e:2b:4c:08:5a:c9:ab:15:a7:30:4f:cc:74:
61:4d:f2:ea:66:ff:c2:af:ed:46:c6:00:4a:15:b3:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AD:44:FF:06:06:8B:CC:15:8B:E5:47:36:C9:99:EE:37:B4:69:27
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d6:f0:06:13:ea:af:68:c5:00:29:ce:b8:9e:62:04:1b:3c:
c8:73:2a:e1:af:14:22:1f:cf:c5:70:a7:65:00:eb:88:95:05:
93:32:a8:12:bc:d2:9a:ba:e8:27:5d:5c:3e:09:cc:f8:93:70:
a0:b7:9c:65:e6:12:57:fb:57:9f:85:7b:0d:cd:34:02:b8:61:
ee:99:e4:ae:84:9f:76:63:4b:86:18:00:d8:a5:c4:64:05:1f:
0b:34:1f:44:fd:63:f5:dd:ca:59:09:85:06:fe:11:47:cf:18:
9b:c8:0e:75:51:65:21:54:c0:34:9f:be:ee:85:70:77:ca:0a:
3f:7f:ca:19:af:1f:e5:25:87:9c:99:06:7f:44:e5:97:43:17:
d1:1a:1f:60:16:ab:2b:cd:a8:42:20:7c:fa:8a:eb:71:e5:2d:
d7:c4:d2:94:7d:8e:b8:a2:93:57:d7:1a:e8:08:c6:94:5e:0d:
e8:b9:a7:f2:14:ab:3a:23:10:46:a5:22:01:f3:f3:7c:75:3b:
8f:a7:c4:46:d4:f9:38:f7:e7:2f:c2:6f:58:21:57:6a:49:de:
61:60:d9:ab:76:80:26:9d:54:75:9d:9d:bb:af:b3:01:ea:f0:
ee:d5:12:6b:93:c1:aa:a7:17:b5:cb:cf:7e:06:36:bf:e2:61:
3e:f7:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:28 2025 by rpki-client