
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: dPemwedlFtW3uCON8ArhHc9uUfSWSAdnH6ZfWflQu4w=
Subject key identifier: C5:29:A6:F4:22:1A:B7:49:C0:A6:21:2D:13:B7:00:8F:FE:C7:B2:62
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 0194BD854CAB81DA28D2CC4E0FD6C1C33515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 0E4B
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: C7u1+XG5BdLRBYlftYQoNyU91YXuNLcuUC1FTNHFE4U=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:ab:81:da:28:d2:cc:4e:0f:d6:c1:c3:35:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=c529a6f4221ab749c0a6212d13b7008ffec7b262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:23:05:19:fd:7f:dc:9c:dc:51:8c:1b:3c:
d0:3f:4c:8d:99:76:70:63:0d:4c:c1:e3:43:6f:30:
11:22:b0:c6:36:91:7c:33:3d:ee:a4:35:8e:be:83:
82:c5:30:e1:61:91:44:91:81:bc:79:e2:3d:35:26:
d1:67:9d:9e:0c:f7:b4:74:1f:0c:f7:23:17:90:31:
4c:6a:40:bf:ff:db:81:a3:2b:df:85:bd:1d:e9:d2:
8d:19:86:1d:84:19:19:ec:f7:d3:96:a8:27:4c:53:
04:a8:7f:64:b2:a0:7a:e9:1b:e7:1d:38:9b:bd:b2:
8b:76:37:77:fe:77:d7:7a:5e:64:f6:98:28:e7:c2:
b3:ca:37:f8:88:c0:6c:f2:b5:fb:e3:81:a9:25:96:
12:66:f4:1b:09:d6:4a:57:b2:20:9a:1d:54:cb:62:
98:10:0f:b7:68:a4:5f:72:1d:20:4f:fe:5d:b8:83:
2c:a1:df:a2:53:d1:d6:1a:6d:4d:7b:b0:49:ee:16:
09:b6:47:40:ba:72:f1:2c:d7:6d:6a:84:dd:9f:a9:
e6:e3:d4:3b:15:8e:20:4a:d7:9c:98:9c:b5:5e:29:
f2:3a:c1:72:b9:b6:3b:9c:20:4b:4c:0d:7b:aa:ad:
f9:0e:24:51:14:28:51:25:a8:bc:53:4d:28:08:5d:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:A6:F4:22:1A:B7:49:C0:A6:21:2D:13:B7:00:8F:FE:C7:B2:62
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c5:91:5a:a8:89:60:e1:62:a0:8b:b0:8b:82:38:9b:1e:01:
86:e1:2e:da:c4:b8:37:3b:0f:df:d6:ea:d0:43:76:c0:ad:7e:
2a:7b:53:7a:d7:25:e1:a3:b7:bd:39:0e:be:ba:22:32:5b:1a:
5e:b2:87:ca:fa:aa:1e:71:04:22:2a:d8:ba:c9:44:e6:1a:9d:
50:f8:d3:e9:72:c8:f4:4e:66:f2:fc:a9:a5:19:26:48:53:fd:
d0:15:5c:35:59:9e:ff:b7:81:03:5d:dc:fd:96:4c:05:e2:07:
49:28:78:93:8d:79:9d:5f:8c:31:09:67:15:75:bc:b6:51:33:
25:37:b4:ac:95:47:20:36:11:c7:44:c3:01:d4:f6:df:99:8a:
15:e8:85:c6:04:72:d8:04:1f:b8:cd:b4:be:35:31:e5:b5:cb:
a3:70:c6:da:63:8d:8a:16:ff:c6:ad:2e:90:40:e0:ee:a4:02:
30:2c:c5:5b:e1:a3:91:30:c7:02:c2:da:0c:35:ec:12:07:9f:
04:df:ea:7c:99:33:d6:11:b1:d4:4d:fb:91:ae:3b:88:24:a7:
94:89:2e:b5:69:71:99:87:8a:87:fa:fc:cf:95:c8:16:41:70:
96:80:aa:2f:ed:28:3b:29:2e:9b:f6:0e:6f:8e:8b:01:f9:1a:
89:61:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:31 2025 by rpki-client