Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: sFuqbZH0a3WfEksSwiym7XOxY16ZnFbEBVuKyWBkeUQ=
Subject key identifier: 87:E2:27:C1:09:50:0C:45:21:95:43:15:97:0B:96:B2:5B:2E:27:A2
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 0194BBCEBD7619372C44C36F12F2574EFACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: 3kuTKoD956x07YjJvtagOeDuHFLExrCNyBiK19tl2oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:76:19:37:2c:44:c3:6f:12:f2:57:4e:fa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=87e227c109500c4521954315970b96b25b2e27a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:83:51:d6:6d:f4:d6:6d:f3:d9:db:b1:ec:
af:21:fe:ed:e4:d8:79:0d:08:f1:77:0e:40:6d:dc:
a8:06:a6:21:a7:83:d9:ab:d2:e3:d3:d2:9c:56:1d:
26:ea:db:09:99:14:f3:26:8c:af:cf:77:e7:9a:c0:
40:f0:64:93:c3:9d:f6:6a:68:d4:ca:3d:b1:45:c8:
03:c4:51:a6:02:91:d2:16:da:71:76:6f:86:37:8a:
6d:24:84:10:7e:72:aa:58:c8:30:d7:d0:3d:41:94:
c9:19:36:34:24:bf:4f:0d:b0:88:25:6c:dc:ed:71:
7b:c1:62:14:4d:fa:e4:31:50:eb:19:49:44:19:4b:
56:78:be:2c:07:a4:7e:67:5c:1a:2d:9f:73:ec:ce:
df:f4:09:29:12:6f:6e:c9:3d:a4:a4:51:3e:b0:c9:
50:2b:53:f8:61:2a:9e:d3:d9:52:bb:a8:7b:7d:50:
14:78:62:c8:7f:cc:e6:73:3c:46:69:df:5a:3a:7f:
db:1e:aa:59:f1:bf:a1:09:65:4a:ec:34:02:5c:e0:
65:15:b2:8a:de:e8:28:2d:2f:10:43:83:c2:23:05:
b5:de:8b:ff:eb:c0:10:a6:24:c1:3c:ef:37:1d:f4:
5b:32:78:d8:0e:d3:df:92:a9:07:a8:7f:19:84:db:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:27:C1:09:50:0C:45:21:95:43:15:97:0B:96:B2:5B:2E:27:A2
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:22:76:27:42:30:0b:7d:a0:16:89:4d:d6:d4:54:54:5e:
58:e6:1d:e8:88:8e:f6:b6:9d:0e:d2:c6:1d:aa:8b:85:5a:45:
83:a0:39:a4:02:18:04:46:2e:88:fc:47:a5:a1:a1:a4:1c:20:
55:b3:e7:40:a5:e6:31:52:d2:42:47:07:aa:55:d6:d0:99:64:
40:31:1a:d0:86:7f:7a:83:d3:ce:b6:da:0d:c7:12:d6:22:5d:
f6:be:2a:89:31:78:cc:87:4f:d7:27:49:4d:dd:b2:e4:b7:f0:
ff:d1:47:08:80:09:7f:c7:a6:49:13:7b:e4:0e:e7:56:f3:ee:
7e:d8:6a:16:00:ec:b2:14:e0:c9:3f:5c:b3:ae:c6:6c:94:af:
1a:a7:d9:b5:56:32:c9:40:13:0c:ca:15:2d:d0:95:7a:5e:53:
f9:8b:52:33:ce:1b:7a:03:5a:c7:2c:5e:4a:24:af:08:da:c8:
5a:b2:21:d5:b8:bf:03:7f:de:5a:a6:11:b7:33:49:50:88:c4:
8a:1c:f3:1f:3f:05:9a:1b:8d:23:ab:e5:ea:1d:b3:5e:ed:4f:
ff:45:90:ec:31:d4:f2:f2:ab:4c:dd:ec:4e:8b:a3:a2:43:4f:
b2:c3:cb:77:4f:2b:da:6a:e5:bc:e5:66:16:5a:19:ce:7c:27:
cf:b3:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:31 2025 by rpki-client