Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: mSnZUpMjeKJHrJl9owe6NpggLEDJRvlTsee+UGtBl7c=
Subject key identifier: B7:F5:14:10:F3:99:41:17:88:5C:14:C7:17:D9:C5:82:40:5F:44:5F
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 0194BC04F1E4C220DE2513ED66EDB632D021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: PlMAhv3AqxN5uCuHVdXxyo0Ka9r5s3FXRMg5bFwnlKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f1:e4:c2:20:de:25:13:ed:66:ed:b6:32:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=b7f51410f3994117885c14c717d9c582405f445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:64:0d:2d:d3:47:b3:fe:b0:11:7b:16:75:
44:8e:92:ab:5e:33:6b:5a:c2:f1:cc:61:b7:b1:b8:
41:c7:48:b0:cc:8f:a8:5b:17:bb:6f:8f:ba:1b:c6:
ef:39:88:0c:3f:b6:9d:32:dd:dc:d4:a0:ac:83:17:
a4:24:6b:05:2e:a6:67:26:42:05:be:c2:1c:ee:86:
53:18:c7:d9:8d:9d:f5:8d:d6:b0:5c:ed:0c:31:7a:
e6:27:75:3c:0c:7b:b1:bc:8b:90:89:d9:f9:4b:9a:
d8:bf:0b:21:2c:14:3f:06:03:d5:05:d0:11:c2:21:
da:69:d6:9a:18:d5:21:98:eb:3b:f2:57:b9:41:82:
a2:9e:b0:26:1d:c1:50:f1:9f:0e:44:02:b0:85:11:
d1:3f:b3:06:37:f7:ef:4f:e8:a2:d4:13:d0:91:fa:
01:37:68:fb:be:0c:7b:bb:3d:c2:5a:23:06:bf:bc:
3c:ff:da:0e:1c:61:65:0f:05:c3:56:df:b4:10:06:
b1:3b:85:f7:53:56:d4:34:d9:f7:e0:54:a5:04:d1:
f3:d2:5b:1d:87:ed:fb:22:07:db:a7:f5:3a:77:54:
98:4b:51:42:a3:9b:da:0b:c9:67:58:0d:6c:66:90:
d6:db:e7:a9:47:f9:96:8d:65:bb:05:ea:24:e6:7b:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:14:10:F3:99:41:17:88:5C:14:C7:17:D9:C5:82:40:5F:44:5F
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:eb:dd:29:a9:ab:3a:eb:51:d5:83:70:0f:a8:8e:b0:dc:99:
60:72:80:1c:aa:24:e3:34:ab:7c:3f:a7:30:f3:6f:0f:f5:83:
02:0d:e9:79:5a:2b:34:d8:f4:9f:ed:d5:25:a3:83:55:bd:d5:
09:1d:29:bf:0c:87:72:16:6a:7f:be:84:e6:0c:e5:b8:b9:9a:
24:d1:3c:bf:16:82:94:10:42:f9:8c:5f:2f:c2:5e:38:05:66:
a3:cc:98:23:5b:f3:59:b6:17:56:15:cb:6f:75:99:eb:70:fe:
39:e4:d3:3d:2d:2c:b1:76:21:ed:b9:1e:fa:b2:5e:28:c7:67:
f2:96:d7:6e:a8:27:91:b5:88:87:44:3e:11:87:a2:06:7f:14:
10:78:ff:dd:a9:96:04:c8:8a:30:d5:d5:3b:d1:d5:f6:50:cc:
d6:a1:3b:a2:d5:a6:a1:06:79:8f:5c:37:e2:5a:22:6a:9c:23:
8b:8f:1a:a4:9e:ad:06:55:63:cc:6f:f4:c3:8b:82:d9:37:41:
50:d0:af:86:48:e3:e8:eb:c4:95:b1:bb:eb:91:ea:c7:63:6c:
d7:f1:b0:eb:cd:d8:14:99:c8:53:2a:24:89:ab:db:b7:23:3a:
67:47:ba:15:70:b0:e1:ac:4b:d3:c9:21:71:0b:8f:56:4a:18:
84:6a:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:39 2025 by rpki-client