Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: WeFK0K0IGpo25Q5mZxzlKWmZFitHl0MDh6IcMurTMFI=
Subject key identifier: EA:42:FE:A4:65:EC:9C:74:4B:3E:9E:55:DE:4D:91:84:9A:4C:C4:08
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 0194BC04F37AEC010D331ABE6135C34F8688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: 8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa (hash: 27BFHjr8J4UtWYs76eZEJg2mPxJknmE0rT/irucN/h0=)
2: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: m8QqK0fnLorK0TtF35Jxb+aKYELa9niBOSmbBH69kPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f3:7a:ec:01:0d:33:1a:be:61:35:c3:4f:86:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=ea42fea465ec9c744b3e9e55de4d91849a4cc408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:df:d9:50:14:ce:cd:97:a4:b4:a0:60:01:
ae:f3:c3:c9:07:80:1c:02:8e:4d:fd:95:5d:63:14:
45:98:2e:9d:b5:c7:79:20:2b:8b:64:f1:01:79:47:
76:fa:f0:f0:00:45:69:bd:a3:99:01:73:b0:b4:d9:
1a:98:dc:88:5a:f8:11:ea:bc:95:6a:d6:fc:2d:02:
be:c6:91:86:14:6a:76:f7:0a:d2:fc:fe:9c:1b:c3:
f9:ad:27:aa:5a:e8:35:dc:67:22:ab:f9:da:b6:98:
25:74:08:44:a5:5e:1a:a5:93:7e:53:fe:15:2b:92:
e1:82:1e:c2:ee:26:4a:aa:75:a6:2a:83:e2:c7:99:
2a:c5:68:95:62:46:7f:1f:2e:a5:a6:f1:b5:b3:27:
c6:28:1f:1a:f1:cc:76:88:cf:07:38:6e:0b:ea:22:
2b:d7:b9:9a:85:9d:23:c6:0f:c5:b4:b7:38:54:99:
d8:98:c5:0f:ce:29:d0:73:80:d6:13:b2:3a:da:37:
d0:e2:f9:e6:e5:ef:cd:2a:09:d5:7e:7d:5d:16:0b:
b3:6d:c5:bc:38:77:21:54:64:5f:49:be:16:6c:0e:
d7:f2:da:ce:9a:60:f6:26:20:7c:66:7e:64:d7:24:
cc:cd:ea:51:0d:07:13:c0:44:82:8c:c2:eb:46:d1:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:FE:A4:65:EC:9C:74:4B:3E:9E:55:DE:4D:91:84:9A:4C:C4:08
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:86:83:10:c8:82:2b:4d:7d:65:df:36:1e:b9:77:2a:1f:97:
bb:23:a7:91:32:94:74:bf:9e:16:39:90:eb:31:ee:b7:52:85:
f8:be:16:32:2d:d8:a4:20:b0:c1:3f:80:04:1f:33:0b:8e:79:
d5:bc:c2:7d:2c:57:89:6c:a2:1e:f3:fc:d8:02:7f:b4:ec:4f:
5d:c5:38:76:a2:ac:8e:85:44:cc:78:fd:56:a5:7a:5e:61:00:
00:e0:a3:50:38:41:d3:ac:8a:1b:35:57:b5:c9:4d:ab:02:b1:
43:3c:1d:d8:78:7a:be:88:de:ae:97:2e:de:bd:9e:3c:97:be:
ff:12:64:c4:cf:91:de:22:42:3f:5b:1b:8c:e0:1f:ca:f7:97:
16:29:f4:e5:cf:e8:5c:15:df:72:cc:25:05:06:34:9a:1f:95:
5f:0b:42:ac:f5:f7:9a:7a:71:87:76:bb:8b:16:26:50:2d:ed:
5f:48:c7:a9:a7:ac:1e:fd:a4:fd:50:3c:e6:e2:83:cd:c2:1e:
53:b4:fe:4b:67:e0:bc:5e:e6:2b:94:a7:aa:be:0f:6a:fc:b7:
94:f3:f7:32:98:ca:61:10:a9:c0:82:f6:27:22:df:e8:ef:76:
6b:af:56:f1:16:b0:30:19:01:c3:86:39:d6:db:c5:94:cf:50:
a9:d1:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:58 2025 by rpki-client