Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File: KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier: G3pLsWNAGRFHKJMdBElAYTgGRzkakBnEde5TSqNSOVE=
Subject key identifier: 8E:85:30:D7:8F:83:34:40:E0:7C:2C:77:93:19:B2:80:4C:56:50:9E
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 0194BD852EDCE266787D01DD18B2986C47B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number: 0AC4
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: tgOTei9rcUcin1JG/rfPOCMoQ/AeKRXgmt+WoS1jpPo=)
2: MEaSq7qzsvPxYFefW_5rpR6YcOI.roa (hash: dE3454MgWcstxWm9JTV3P70lF/Suj78coMKIuR/Uln0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2e:dc:e2:66:78:7d:01:dd:18:b2:98:6c:47:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=8e8530d78f833440e07c2c779319b2804c56509e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:83:97:68:5c:1c:b8:1c:da:e2:f6:6e:4c:
6f:67:a5:2f:e0:cc:5f:de:ee:3d:0e:2e:10:f4:60:
d1:7f:d7:97:bc:91:2f:6f:25:f4:ef:d2:64:fc:f7:
38:79:f1:99:46:4a:9f:ac:f8:10:f7:34:31:b5:55:
1c:2a:b9:d2:53:33:24:b8:36:17:f3:f7:dc:10:63:
35:1e:85:24:6a:55:39:e7:13:1a:8a:7c:a4:e0:d1:
01:5d:2c:8e:61:e7:cf:e2:18:c7:60:46:bc:81:35:
5f:e0:e7:a9:99:b7:c8:db:fe:6f:33:92:ea:93:44:
66:81:f7:83:f6:08:9a:70:43:4c:d6:f6:ee:9b:d0:
e5:f4:7b:af:ef:36:ae:56:f8:f8:ce:3f:71:e3:54:
7d:23:ee:95:58:0c:2f:c0:84:48:c2:88:3e:b4:98:
a6:bf:45:0c:9c:9f:43:42:5b:47:a1:b6:c3:4d:5c:
83:18:74:3d:0f:1b:f5:f5:80:52:08:ff:79:cf:ff:
04:9a:df:13:cd:8c:4e:5b:2d:60:4b:46:f8:2f:27:
e0:bb:11:aa:53:48:85:80:c2:4b:56:7f:4b:d2:62:
1a:ca:20:b6:3b:c7:bd:59:64:74:a2:6d:65:50:fb:
8a:d9:be:26:ea:a6:fa:91:5c:98:dc:73:3d:bd:16:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:30:D7:8F:83:34:40:E0:7C:2C:77:93:19:B2:80:4C:56:50:9E
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:68:40:75:24:e8:8b:80:02:20:3d:56:0c:93:21:60:a1:4b:
1a:9f:16:e6:ea:77:02:51:b7:50:a7:a6:cc:e6:37:d3:90:47:
9f:be:21:7f:c2:63:57:ea:a5:d2:cf:1a:e3:05:0a:56:4a:5e:
eb:54:0a:b7:67:0e:57:3f:55:f7:df:37:75:34:78:95:ca:f8:
82:c8:c5:e0:a3:dd:9f:7a:11:28:9a:72:78:91:de:62:f0:dc:
3a:b5:b4:6f:0d:aa:bb:d3:ef:08:13:00:6f:a1:da:67:cd:0d:
a1:6c:0d:f8:fa:43:e7:c9:ea:76:d6:f9:5a:17:00:e2:9e:62:
ef:e6:f1:fe:81:7c:1a:4d:ae:d4:ce:44:fd:8b:66:93:82:fe:
91:10:23:c2:3c:f5:c9:02:14:c8:2d:67:fb:8f:13:25:a9:be:
3e:4d:0c:46:dd:96:02:fb:ca:7c:28:20:21:7e:7f:d3:cb:27:
f6:ec:7f:2c:6d:61:68:45:76:e3:9a:a6:95:e0:54:2f:ff:3d:
00:fe:b0:16:6e:53:53:3c:90:fd:51:bd:7b:d4:fd:f1:42:d3:
78:b3:34:8f:0c:b3:2f:82:68:96:e9:0e:51:2d:44:3b:e5:cd:
32:b4:87:97:75:83:b8:b3:85:07:c4:72:1c:f5:9c:5c:b5:88:
b4:af:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:48 2025 by rpki-client