Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: s1IsqwYpAjqYz9RymH9GaLMyn4ksRdBpKWTw5UZaaBk=
Subject key identifier: 2D:7D:3C:02:DE:86:F8:BD:3F:C9:3E:04:E1:57:26:FA:98:78:E4:41
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 0194BBCE265617900F99FC910F19EC96EEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: W/hAitr6hBnfEExLbNjnlpcMrQkQVpKVuvfnwbicvDY=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:56:17:90:0f:99:fc:91:0f:19:ec:96:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=2d7d3c02de86f8bd3fc93e04e15726fa9878e441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:98:d2:51:76:b6:0b:18:67:2a:0f:56:c0:
c8:3b:bc:ee:a2:24:57:da:38:76:03:de:d9:93:c0:
71:f8:7c:73:3e:25:9c:2c:c5:ad:e9:46:1a:bd:3f:
8b:69:bc:f3:d0:65:4e:e6:f6:ad:9b:a1:ae:ce:46:
18:cf:07:49:06:78:e4:34:b4:c1:82:fd:37:ed:0e:
38:c0:e5:e7:c6:64:e6:0e:80:f1:47:85:90:20:51:
5f:ac:da:a0:84:1e:fd:0d:a3:03:e7:04:fa:b8:e7:
61:7d:a5:ab:16:b1:11:de:18:dc:e9:3b:89:90:e5:
5b:16:36:fd:36:7f:1f:f5:4f:39:cd:3b:cb:24:0a:
7a:61:87:b2:fb:a0:c4:b5:a8:e5:af:58:d1:40:f4:
a3:78:a8:24:e8:a5:15:67:36:37:24:42:38:77:83:
ae:44:f2:eb:f1:db:5a:ea:4e:1b:88:5e:31:61:96:
d3:87:bf:81:f9:d7:23:ca:85:d0:c9:86:1d:1b:da:
06:b3:53:4a:05:48:14:7d:75:4f:90:73:5b:25:88:
a4:e0:c0:99:0d:1d:2c:19:ee:a2:0b:35:10:45:57:
fb:c0:96:36:5b:1f:fd:d1:b9:af:2e:b0:37:81:ce:
70:41:db:86:02:08:37:18:d6:49:97:92:95:5e:17:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7D:3C:02:DE:86:F8:BD:3F:C9:3E:04:E1:57:26:FA:98:78:E4:41
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e1:15:9d:80:bf:30:a3:83:a6:e5:7b:43:cf:8d:01:eb:6b:
8d:85:47:7b:c2:d2:c2:d1:6e:31:b7:1b:e6:1a:b5:02:34:25:
2b:e7:37:16:8f:87:57:0e:87:f1:78:99:35:99:46:0d:c6:ca:
69:b3:a0:78:6d:25:9a:95:5e:b5:40:80:5f:d3:f5:87:c1:03:
c2:6a:30:53:9b:ba:3c:2f:70:22:cb:67:78:e5:51:e6:39:4a:
ee:fc:86:44:01:cd:c9:5f:e8:99:70:7f:84:74:a9:a8:b9:14:
a7:dc:52:b6:7e:ea:f0:f8:0b:ba:76:ac:be:94:e9:f3:2a:2b:
55:77:65:3e:5f:75:bf:54:a0:db:3f:aa:db:1f:9c:fc:2b:e4:
a3:72:5a:1c:c6:18:e3:db:79:b8:68:0a:4f:e7:f8:ba:f7:a2:
1b:c4:a3:fb:d6:42:70:15:e6:7e:68:8d:1e:b8:2e:ac:ca:11:
2d:bf:47:00:a0:09:3b:fb:75:3d:e8:82:b6:c1:40:4b:4e:13:
e7:be:d0:3c:5f:39:fa:71:66:99:b3:4e:4f:7e:64:bd:e1:b5:
0c:fd:6d:6b:cc:1b:86:7b:14:8b:f6:aa:eb:1e:f6:4c:76:c6:
5f:c6:49:bf:39:91:1a:ba:61:35:e3:a0:2f:dd:29:4b:c7:23:
55:86:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:11 2025 by rpki-client