Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: iKmIe886wbGKLJYvIftvUAjuf7RZFmUvFOz6Bby2jYQ=
Subject key identifier: E2:AB:82:A1:BB:C6:58:E5:DD:19:EA:D4:E4:94:75:6C:CB:D4:83:AA
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 0194BCA9F12F3A8FBD302027715CD47CE4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 0447
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: ZiAte7ktl6+e6AN6R2nqgg/Raf6jOf/4YfQEOVNAjPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:2f:3a:8f:bd:30:20:27:71:5c:d4:7c:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=e2ab82a1bbc658e5dd19ead4e494756ccbd483aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:8c:12:0a:ea:9e:6f:3b:75:91:92:0c:d9:
83:f2:3d:02:92:51:c1:03:50:b0:32:5e:fe:22:e8:
f7:45:b8:38:2a:63:5d:fa:91:29:f6:a9:52:95:ae:
2f:7f:25:02:44:2d:0f:b1:ca:8a:b5:6f:94:90:68:
fb:e4:99:ed:5b:2c:72:0d:6c:72:94:21:ed:13:ec:
a4:24:08:3d:c0:71:5b:35:0e:49:88:13:d2:0d:8c:
0d:04:ed:bd:37:21:b0:3e:13:53:69:4b:e4:33:93:
8c:ed:9a:d1:4c:5e:a0:88:e7:96:05:fc:e2:06:ce:
77:10:0c:1f:cf:10:e4:f3:43:8a:4d:9a:db:ac:ae:
43:5f:28:81:ba:aa:4a:04:82:22:d5:57:25:94:cc:
ba:0e:b3:1b:79:22:97:21:85:5a:5a:c7:5f:83:9d:
00:e4:a4:a2:9f:70:16:38:b5:ff:fb:3e:c2:2d:a0:
e0:2c:3b:b3:f2:d9:95:a6:25:c7:0b:7d:be:c7:6e:
89:d0:29:c3:2e:e0:50:0a:d7:e1:5d:69:31:1c:f7:
50:7d:60:02:f6:1f:ad:21:8d:62:38:a2:cb:fa:f7:
3a:2a:5b:62:e2:6f:dc:0f:92:aa:2f:52:57:a7:ea:
59:b0:5c:e0:2a:de:87:1d:13:2b:ab:a2:53:d3:36:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AB:82:A1:BB:C6:58:E5:DD:19:EA:D4:E4:94:75:6C:CB:D4:83:AA
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ad:ce:75:2f:ff:4d:93:54:79:5a:69:31:06:46:b4:ae:a2:
b2:25:ed:f0:ed:b8:b1:82:b9:27:b2:ba:25:4c:5b:e5:b4:20:
90:89:cb:7b:44:79:67:a5:ce:34:9b:f8:05:85:08:af:65:36:
d6:14:e2:7f:0e:b6:4b:58:e4:4e:9d:38:90:69:bc:b1:38:74:
39:64:d5:b2:62:77:3b:ba:c3:fa:88:00:49:27:14:5c:87:41:
29:dc:9e:27:39:e1:38:ff:33:5c:96:53:8c:f1:df:3c:9f:18:
a3:6d:6d:01:b3:c9:6d:6b:25:16:12:88:36:2f:dc:4a:5a:0c:
de:2f:93:bd:18:71:7e:9f:8e:7d:a6:0e:0f:44:32:c6:5c:db:
a1:ff:33:c1:5e:0a:d6:73:49:70:b8:04:55:85:26:0d:8c:04:
ac:31:57:1d:29:90:bf:28:d7:f4:23:33:25:bb:29:9c:5a:b8:
f9:0f:5b:0a:42:83:f6:c7:8c:f2:cc:7c:94:69:97:6a:2b:e4:
49:48:db:2d:df:ee:a2:18:d0:93:a9:23:3f:a9:67:08:1d:94:
d9:c1:ff:51:33:8b:fa:2f:c3:78:15:79:35:65:2b:5f:53:a8:
83:57:7c:60:3a:e4:6b:cb:dd:bf:72:d8:e1:41:a7:e1:36:39:
7d:63:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:43 2025 by rpki-client