Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: St/qeq/pH5HqjV9lzuvwNl+03VW5TZu3eJ3VzLpcykg=
Subject key identifier: F7:96:BC:8F:5F:BA:48:A5:9A:D5:6A:C6:01:F9:FA:C3:38:7F:70:B2
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 0194BC04DFBC8E9D6EFF77C506789CF1123B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 0132
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: xbJ7zy0rwXmu/BYYqKfSNwZTbG5Fc0GFJP8qgHi5rH8=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:bc:8e:9d:6e:ff:77:c5:06:78:9c:f1:12:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=f796bc8f5fba48a59ad56ac601f9fac3387f70b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:c2:e3:26:66:1e:68:aa:69:54:31:81:75:
d3:85:60:3d:92:bd:d6:03:a1:88:74:de:e1:cc:01:
db:33:3d:03:57:c5:2e:ce:94:54:1b:d3:7f:5f:59:
77:14:fc:de:d2:2d:74:ad:4e:e9:b9:92:3a:b2:cc:
9f:eb:29:2b:7e:72:6b:b1:75:e4:7f:8c:8d:94:af:
71:54:e6:b3:47:06:ec:91:0d:f3:92:be:8a:e7:f0:
b6:df:38:d2:6a:b8:83:d5:88:19:a8:1f:84:91:df:
a3:4a:ce:75:bb:bd:54:94:88:49:3e:66:21:37:3a:
e3:29:da:cc:5c:8f:96:31:84:91:44:65:01:43:73:
0c:4f:91:a2:53:78:09:04:6d:9c:16:cf:0b:e5:36:
6f:50:fb:fd:bf:c6:91:93:1d:07:28:0f:bb:7f:b2:
24:3f:fe:5f:fb:46:9f:84:3e:2c:bc:24:03:f0:9f:
6f:bb:a1:44:75:e8:39:46:59:db:4a:59:dc:7f:ae:
87:0c:8e:0e:02:61:16:0a:48:fb:97:30:0d:a2:1f:
00:d0:b8:9d:98:bd:a0:93:66:2f:78:ab:05:38:9e:
fe:20:85:a1:9c:96:55:56:d9:ae:ce:08:bc:02:3a:
e2:95:25:f5:ae:d8:4c:a2:ce:39:64:54:4a:97:11:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:BC:8F:5F:BA:48:A5:9A:D5:6A:C6:01:F9:FA:C3:38:7F:70:B2
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:af:e2:5c:5f:56:b5:3f:f4:3b:28:8a:cf:df:af:f9:58:5d:
24:19:ff:3f:50:05:54:82:48:9f:7b:45:a2:93:f0:36:d7:22:
fb:cf:70:01:79:b3:8f:49:e0:66:f1:52:4d:29:69:0b:19:1f:
f7:06:d8:88:90:9c:10:85:d7:cf:d5:dd:01:cf:02:f3:47:51:
3b:5e:dc:de:bd:b7:26:36:ca:e8:3d:88:04:d0:4c:20:3a:64:
84:a6:6e:29:15:d6:fe:b3:07:4a:57:ba:f0:53:7c:f3:e6:ba:
60:de:74:73:a0:a3:78:27:91:5b:6f:00:65:32:27:9f:b6:c8:
9e:43:e9:c4:30:37:16:0d:a5:7d:c1:c8:ce:7f:f3:f4:02:80:
c3:f0:5f:18:fa:ea:db:c6:41:8e:e4:9f:b4:0f:18:d9:f2:14:
dd:ac:6b:4c:eb:76:62:4a:b3:88:de:83:fc:1e:1c:5e:06:a4:
f9:60:e5:e1:7e:8e:59:fb:51:b4:97:75:6d:d5:0a:a0:45:d3:
c5:3e:57:45:45:96:be:09:53:88:7b:94:a9:a4:01:e1:1c:09:
5b:4d:f8:50:8e:8f:e2:a0:ad:04:b3:ec:2f:63:98:bf:14:b5:
39:76:33:f6:de:ee:f0:c7:59:bd:67:43:90:e1:13:10:13:96:
cc:69:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:35 2025 by rpki-client