Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: MAnh2kmsnTvPe99WkcTXoNJeXWs5sA1gIGbXkXaHwlc=
Subject key identifier: A3:CB:30:C5:16:DF:A0:0A:27:D2:FC:96:78:E6:14:6F:BA:22:EF:EC
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 0194BCE0692A9714E043809E2EAFB9AC9713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 0FAD
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: UjIdlFy299YXm49s1TakqSxpim1WVrXl4FmRRoKOsng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:69:2a:97:14:e0:43:80:9e:2e:af:b9:ac:97:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=a3cb30c516dfa00a27d2fc9678e6146fba22efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:9d:04:ce:97:28:db:3c:3c:8f:14:d0:8e:
8b:b2:53:ec:b9:e7:b1:46:31:87:f0:5c:3a:6b:cc:
7a:fa:79:2a:fa:79:b3:5e:8a:f2:21:86:aa:a6:12:
87:38:63:ff:32:bc:d5:95:d2:02:d3:80:2e:1c:79:
86:0c:e7:f8:48:82:3d:ca:7d:b5:8f:81:ff:c8:65:
16:eb:21:89:b5:8c:9a:dc:49:e5:7f:b8:61:dc:25:
f2:30:d8:0c:f7:18:0e:50:c4:5d:bb:43:ad:49:7f:
ff:f9:92:36:fd:22:a9:7d:76:db:59:35:72:f4:81:
f6:ee:15:a8:6b:d7:e5:29:39:42:9f:09:bb:a9:2d:
ad:b6:6e:5f:0a:5f:ae:b1:3f:ea:58:38:1d:bd:52:
f6:f0:26:97:67:af:3d:ee:17:98:3e:7d:85:c2:85:
db:a3:fa:dc:80:ea:1d:e2:a8:48:34:c7:42:91:f6:
23:71:ac:73:0b:68:b4:82:bd:38:5a:f0:a2:91:9b:
93:26:3b:23:ad:cf:70:58:81:ba:f5:90:56:39:06:
84:19:02:bd:eb:0b:fe:8d:b6:0e:f3:99:fb:e0:d4:
f5:87:14:9a:da:19:73:f9:dd:63:fe:80:8e:01:6a:
a7:b8:66:92:85:34:8b:62:16:d7:80:d4:78:4d:16:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:30:C5:16:DF:A0:0A:27:D2:FC:96:78:E6:14:6F:BA:22:EF:EC
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:af:53:67:1d:69:54:f2:99:ba:af:f1:b4:a2:2a:9f:7d:30:
df:2f:4a:4e:54:1b:76:86:82:ad:35:95:d7:65:c3:1a:f8:16:
88:ca:ce:82:b4:57:ef:b8:13:86:a0:b3:ec:71:57:a2:bc:f7:
26:9d:f0:a9:74:4a:67:42:5d:a2:7d:71:a5:3b:68:8c:29:d4:
78:bc:a4:69:cd:6e:cc:0c:49:11:20:be:60:f1:7b:50:a0:0d:
a9:67:1f:6d:74:a9:84:a6:7e:23:4d:1c:6b:30:7a:a8:70:cf:
54:bb:5e:60:0d:cd:65:86:b6:2b:29:18:5f:2b:65:b3:09:ac:
22:a4:08:73:37:a6:97:5a:c8:c1:95:88:0d:23:e1:a5:58:8c:
0e:ee:60:cf:65:4c:05:e4:98:18:b4:7f:e4:df:de:b3:e1:c1:
a3:c2:2e:9e:88:e6:0c:ee:c6:7c:32:98:64:96:82:35:b2:51:
51:5b:2c:74:4f:11:99:24:77:e5:0d:4a:6f:f7:19:5b:44:f1:
db:17:7b:7c:e5:6e:5b:d0:03:fe:ae:fb:c6:da:d8:38:58:21:
20:42:c5:68:01:b4:fd:be:97:df:d3:5c:aa:c7:26:f0:33:a4:
5f:bf:a4:cd:07:ff:3c:c4:17:96:4a:6a:33:d6:31:6e:cd:e4:
66:d9:aa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:56 2025 by rpki-client