Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: hcRPAurXZhIF/i91XvD3LQoUK6BdvutAHoIfWsxjUrE=
Subject key identifier: 46:EE:5F:A7:50:27:F6:A2:90:CC:CA:D1:12:76:A8:A2:D5:E4:D6:11
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 0194BCA9C03E6FA406D2FAB00D2B41401C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 38
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: 3zEzK2i+fbUtHM5LuABC0IHYVWMwVK5DxY57+HpjDtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c0:3e:6f:a4:06:d2:fa:b0:0d:2b:41:40:1c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=46ee5fa75027f6a290cccad11276a8a2d5e4d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:7b:a5:f5:8c:db:24:c7:ac:3c:7d:be:3c:
26:ab:b8:e3:04:39:7f:33:45:67:c7:7e:7a:17:f3:
b3:ab:7b:3f:4d:cf:67:7f:3a:3c:32:01:36:80:2e:
56:4f:f3:a3:a3:c4:19:73:9e:40:2f:14:02:f6:fe:
63:8f:07:dd:a4:e2:59:41:4b:fd:35:87:54:d8:1b:
0c:6d:f9:84:6f:9a:6a:17:26:20:b0:97:e1:8e:21:
85:2c:6e:a0:31:d2:02:65:d8:94:d4:c3:94:1f:08:
9b:dc:29:95:a7:96:b5:ac:87:2b:97:c8:c7:f2:14:
be:3b:2b:8f:a7:e2:e3:1b:1d:7d:19:f9:57:94:4b:
04:59:e4:ed:68:37:1a:6c:ae:b2:d9:5e:27:73:d5:
88:e5:13:f4:04:82:3b:83:be:40:5e:22:a3:14:63:
24:88:a0:2c:4d:cc:41:2c:0b:86:79:2d:c1:1b:99:
16:d4:54:94:ea:f5:81:6f:81:df:dd:67:e0:c3:58:
83:58:3b:9c:ff:f3:65:f2:4b:fe:fa:92:e8:69:d2:
07:cb:3c:28:d0:82:21:ac:ef:72:10:b4:78:27:e7:
43:23:9e:57:33:0b:32:ce:ff:df:5e:3d:9d:02:7a:
44:97:1f:8b:d1:24:1f:f2:12:ae:db:76:ab:71:b5:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EE:5F:A7:50:27:F6:A2:90:CC:CA:D1:12:76:A8:A2:D5:E4:D6:11
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:be:aa:23:73:ba:8d:f0:de:c4:d6:30:48:a8:df:c9:fe:95:
59:03:a7:4b:de:47:08:bc:a6:59:35:4e:5c:88:a8:a4:3b:c5:
a2:41:7b:80:88:03:2e:94:38:48:2d:a4:d0:18:47:db:f0:91:
a2:9c:51:e5:61:79:94:96:01:a5:ff:e9:d0:a6:0a:e3:81:2f:
02:50:7c:19:a3:58:d2:b4:fd:0b:71:36:c4:97:f5:04:86:6e:
7a:35:41:39:3e:ae:ff:a3:d9:1e:67:16:0a:a5:83:ea:ca:5f:
d0:b5:6c:66:e2:e3:86:a9:fe:bb:7b:58:ff:17:0f:7b:66:35:
f7:12:9a:09:4e:1e:02:8a:6d:ba:0f:96:39:e2:b4:08:0d:2c:
1f:77:d6:5b:c9:f3:fa:17:1e:9c:c0:f6:14:bf:27:c7:35:b0:
b2:ae:21:78:5d:4d:e7:95:f3:5f:21:32:68:df:d5:92:21:54:
08:e8:28:27:a7:e3:aa:a7:0f:dd:f8:86:42:a2:bd:f3:53:22:
3b:89:de:fa:40:44:5c:0c:8a:e4:92:d5:04:79:0f:74:fa:de:
ea:62:5f:76:b9:e6:27:75:b9:57:68:c3:0f:47:3c:0c:30:8b:
c5:7c:fb:c0:73:72:fb:0f:99:93:29:93:a8:a6:41:0d:09:db:
75:b1:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:09 2025 by rpki-client