Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: BSWXPLeWPX0GwNysI5YS3/8iJ2FqDbgqttqy3JdEHdc=
Subject key identifier: 09:F3:D1:5B:1A:24:A4:8C:08:69:81:64:AD:46:D3:FC:19:87:37:AC
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 0194BD85B946B1CC4173704C84D4C0508CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: n5g33ZCFc80m3AQgJ/xZxJBzbwVKZHAcqD/symIE3QU=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:46:b1:cc:41:73:70:4c:84:d4:c0:50:8c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=09f3d15b1a24a48c08698164ad46d3fc198737ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:63:9b:69:a2:5a:20:44:f5:09:c9:b1:e9:
98:55:d0:b3:74:db:0d:38:dc:fc:21:b8:e2:7c:e2:
e0:39:15:30:9e:3f:df:dc:e4:9a:a7:39:19:88:1c:
1c:88:30:c1:ac:1e:cd:3c:69:b0:76:fb:66:63:f2:
2a:55:00:12:77:4e:90:87:dc:71:7e:72:28:80:5f:
34:c8:69:5e:a1:5f:54:49:d6:8a:d7:56:e5:84:e1:
82:ac:3c:8c:8f:16:cb:98:e7:ba:08:1f:e3:96:a9:
dc:08:10:68:6c:a8:e4:8b:b1:95:7f:f3:dc:fb:93:
86:e9:b7:16:13:fb:af:5c:fd:97:c5:e8:22:6d:bd:
ad:ec:3a:64:d4:6a:fa:db:8d:2f:07:02:9f:01:7d:
85:79:d6:85:4d:94:5a:ba:1b:6c:aa:4d:ca:aa:bd:
b7:0c:c9:0f:0b:93:68:67:77:9f:7f:71:8f:81:46:
4b:f5:10:d8:d1:4a:76:23:ea:cb:c8:79:f0:5c:f5:
e5:5f:c5:7c:36:e0:20:c7:3a:90:08:38:9f:93:70:
4f:1b:c3:1f:fd:df:f7:c2:7a:3d:94:3e:a0:f3:9a:
6e:18:6d:f2:26:37:31:80:bf:89:2c:55:68:66:26:
da:75:24:7a:36:23:8f:be:22:fd:39:a4:d7:1a:c2:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:D1:5B:1A:24:A4:8C:08:69:81:64:AD:46:D3:FC:19:87:37:AC
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:5c:d7:3e:b8:72:39:dc:86:40:9f:b5:7e:1b:ba:2a:bb:
2d:9c:92:ef:83:87:e2:c3:88:77:69:f0:86:29:a5:45:41:b2:
aa:c1:5f:6e:f7:61:0b:a4:2f:15:a1:aa:6e:07:80:57:a9:5e:
a3:c1:fc:c9:df:ef:1b:05:10:98:ee:43:57:38:8c:54:e1:85:
ab:05:7e:ac:23:5b:59:0c:2e:bb:58:7b:5a:9f:f2:03:d6:08:
6b:86:c9:68:19:94:a3:05:91:0a:5d:ef:5c:1f:0f:32:7c:0a:
35:a5:28:98:fc:eb:fb:dc:d4:5c:6c:79:1d:fe:94:dd:a9:4d:
98:b1:8c:e6:d9:3c:94:1d:c2:30:b4:7a:6f:31:2b:0a:07:40:
65:a9:3f:8f:b2:1a:22:06:3f:fe:05:5d:10:f3:11:31:4b:97:
c2:a7:44:22:c1:bb:c7:05:39:73:15:ee:af:1e:b6:ec:51:65:
d5:c4:17:17:82:5c:d1:31:e6:68:b9:e0:17:a4:db:58:c8:53:
11:af:9f:d5:9e:30:98:63:2a:30:58:f3:c8:4d:df:1a:84:66:
0a:5d:6d:5b:97:4b:0e:85:9a:77:fb:12:92:ff:5d:16:3e:20:
9e:90:3b:f2:24:2d:87:fd:1c:d9:0b:f0:7c:a3:ec:cd:0a:97:
6f:b2:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:17 2025 by rpki-client