Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File: kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier: aRNBiyvNhopd/NulWikAXoSPZwM0Yje44v3kY15XEmk=
Subject key identifier: 2B:12:26:8E:D8:A8:03:7D:65:B7:0E:A2:80:1C:B8:F8:F4:B1:9D:65
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 0194BCA9E62E8CB053D6D7414203843C28B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: GDngKunQly0rXAZJTM9K6ouZldE.roa (hash: srWtclzCrCIl56nGBNOU8VqqYjtRTWRgnKIo2g1oYz4=)
2: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: C3tfo02B2erK900czQl9Y4Pr188UaoPVA436pN/yewI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e6:2e:8c:b0:53:d6:d7:41:42:03:84:3c:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=2b12268ed8a8037d65b70ea2801cb8f8f4b19d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:3c:95:c7:3f:fe:05:6f:23:27:90:78:2f:
98:39:73:94:85:ed:d8:66:87:6e:d8:23:35:1d:d2:
7d:b2:ba:c5:11:40:87:f6:da:fa:f0:77:01:8d:10:
17:c3:bd:3f:c1:a1:92:e8:99:19:b9:e8:ff:94:97:
90:7c:4a:72:da:f6:59:de:0c:aa:e2:f9:32:54:5b:
4e:7b:76:96:75:ac:f1:e1:85:be:cc:d7:5e:8d:9e:
fa:4c:9a:bc:0d:fd:d4:f2:b5:d2:5f:82:10:81:64:
e5:ab:33:09:8e:f9:3c:ab:82:ff:8a:ea:f6:ef:54:
02:d8:c5:e7:12:7d:cd:09:fb:fa:6b:66:95:f6:89:
e9:77:ee:b5:1c:a1:6f:65:d8:58:e5:11:57:94:ee:
91:4e:4c:4d:e5:c2:6b:06:b6:b7:76:2a:a0:cb:86:
bc:16:fb:54:43:fe:25:69:05:87:e9:b0:73:77:72:
20:08:14:8f:38:89:55:d6:d9:77:0d:04:e6:b2:aa:
85:97:13:51:cf:f7:ad:be:58:99:d6:bf:55:1f:f5:
f5:09:f8:ce:c6:75:6e:0c:1b:02:b4:22:5c:ed:a1:
a9:8e:f2:4b:a5:0b:a3:97:57:41:ce:d2:03:6c:2c:
d2:ff:c8:ee:75:d8:a9:0d:16:e7:6d:46:c0:3b:57:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:12:26:8E:D8:A8:03:7D:65:B7:0E:A2:80:1C:B8:F8:F4:B1:9D:65
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:04:46:37:00:33:af:7e:02:26:52:eb:ee:2f:84:3f:09:b9:
52:8d:5e:b2:7a:1d:39:0a:44:88:73:b2:72:8e:99:0f:c9:55:
18:cf:ed:28:55:45:2a:0c:2f:f2:27:d5:52:52:16:0c:30:29:
43:5f:0c:79:5e:4c:be:2e:fe:72:e1:10:b2:26:9e:da:39:77:
17:d1:48:d0:1e:bd:ae:d7:8c:d5:7a:6f:81:ab:65:5c:dc:c9:
b9:6d:54:f8:19:4a:fe:ee:fe:53:9b:10:42:e1:72:96:48:0b:
bb:d6:1f:a1:17:e5:37:05:db:df:82:ca:4f:39:11:35:77:c1:
92:26:90:3e:dc:1b:06:cf:78:d7:c4:87:b0:3f:35:51:b6:e6:
c3:39:0e:a4:1b:26:ba:92:db:67:f0:5c:44:b4:b6:7e:3b:d1:
46:91:d3:d4:68:e4:59:49:89:c2:35:50:44:24:27:0f:d9:14:
fe:6c:da:07:59:bc:24:14:c4:8d:ef:a3:2d:fc:74:77:6d:cd:
eb:48:72:3a:c8:ed:3a:52:54:48:34:7a:16:ca:81:11:ad:4b:
24:45:bf:63:1a:df:f8:76:34:1d:2f:54:e7:4f:62:81:ac:21:
3a:11:27:3b:06:98:8e:e1:19:f5:ad:e4:03:e3:32:5b:ba:58:
d4:cf:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:53 2025 by rpki-client