Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
File: KUJPgsfIL8VJlTLlpmUadPYpxao.mft (raw, json)
Hash identifier: RJza/UiwEQ2C6XzS98SvC+gyfu3p/Hd0LbY9mPvwoRg=
Subject key identifier: A4:1A:BD:99:C0:14:A0:DA:89:38:38:60:DD:C3:10:21:F8:96:4A:39
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 0194BBCDC3E3389EC09412486D4C43F68C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
Manifest number: 0803
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa (hash: QknCCRzW2QumFMETOVNE4NTQsXWLabVtKWWfI6cIov4=)
2: KUJPgsfIL8VJlTLlpmUadPYpxao.crl (hash: SBaOF3JlWVo0CDMmP6qAGOfQi0oOKgAKEJWCUAmJ6tc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:e3:38:9e:c0:94:12:48:6d:4c:43:f6:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=a41abd99c014a0da89383860ddc31021f8964a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:c8:93:a6:82:dd:ca:27:8c:d8:cf:e8:27:
f9:a1:75:a6:30:a4:94:86:14:62:af:11:9d:d0:3c:
6e:36:7f:fa:a8:87:eb:67:c1:86:a2:24:cc:ec:94:
8c:6f:ec:55:12:3c:65:26:2f:84:69:5d:10:ad:2d:
2f:ab:bc:02:40:9d:98:77:90:37:56:8c:f8:37:7a:
5b:72:5c:41:77:06:61:67:08:cc:2c:4a:e3:e7:1f:
5f:7e:4b:bf:f8:8b:60:2a:d2:95:b1:31:4f:c6:e0:
c5:29:c2:78:43:cf:a6:6f:20:8e:55:41:d1:2d:ee:
2b:b9:a2:ce:6a:08:99:a9:ae:4f:b8:c7:b8:52:69:
65:5b:88:44:0f:60:0b:6e:fa:d0:1d:dd:ef:c0:64:
08:0f:7e:c2:59:bc:6e:2c:f5:47:57:79:db:b3:ab:
f3:f1:c7:ef:6a:23:e6:d1:13:9c:c7:cc:a0:2d:b0:
a4:e3:17:e2:1a:c1:e6:35:0f:25:e7:ad:ad:1e:6a:
51:24:08:c2:32:94:d2:dc:fc:15:31:ce:2c:e2:24:
d2:31:2b:7f:bf:18:08:6b:cd:7d:9b:70:9b:d0:68:
ee:b8:25:db:7d:a5:7e:a3:95:ca:64:33:a3:32:03:
23:30:10:01:f4:ef:af:0f:6f:81:ea:af:ab:57:ac:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:BD:99:C0:14:A0:DA:89:38:38:60:DD:C3:10:21:F8:96:4A:39
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b1:0b:0b:f7:3d:be:af:8d:38:a3:e7:f9:d8:2c:2d:54:cf:
99:41:f5:d3:24:d9:21:04:2d:91:e7:ba:f6:27:c2:14:7e:65:
3b:48:83:94:7a:27:26:90:a8:2f:0a:d1:56:0a:01:b2:46:bc:
4c:5c:8e:39:0d:cf:6b:97:a7:0e:ff:c5:6a:95:39:43:42:1c:
17:7f:35:cd:f7:49:4f:a6:11:93:dd:28:f1:a4:32:bf:09:a7:
60:c0:0d:64:4a:01:49:2c:cf:bf:a8:ab:da:2a:05:15:b1:bc:
72:fd:9e:2b:d4:94:dc:90:0e:a2:03:96:33:2b:6f:4b:76:58:
d0:f8:45:aa:f0:4b:84:d1:fb:17:41:65:2e:e3:9d:3e:c4:33:
a1:17:a5:5b:68:a7:00:38:a3:f5:a8:34:ea:82:70:27:e0:f0:
7b:f8:76:c5:f2:cb:29:95:58:05:c1:7a:47:98:6e:78:1b:18:
f9:49:f0:41:59:7d:0e:a6:11:26:fe:20:3a:cc:f8:97:ff:28:
5c:24:ad:4d:1e:1a:fa:8e:6d:d9:37:37:7f:7f:8e:a5:b0:ce:
d5:35:3d:c1:5a:b0:44:a8:cc:d2:48:f2:ec:16:e2:64:8a:30:
44:e6:83:8a:e4:f8:bc:0d:f4:df:a7:a8:b3:48:d2:0b:42:4c:
33:5d:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:20 2025 by rpki-client