Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: uem7tUwBQ/k9PHU2K48SFHS0vIVxqRiBAKT+KYCN1/I=
Subject key identifier: DE:AE:5F:AC:14:76:CD:C0:88:2D:E2:6C:B4:2A:D0:A5:7F:15:73:21
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 0194BCA96C9FD174A63CBF742158B091A92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 0D58
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: LF91sMqehS3yUni4gyebVsEN/RLwjr3gwV9as5pFOT8=)
2: so_dnSs4BnrVZYioQ2oy6VOroHk.roa (hash: EXJQLyqb51APlznWLoV0tXq0fpUDEu2dhVkLYk30HsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6c:9f:d1:74:a6:3c:bf:74:21:58:b0:91:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=deae5fac1476cdc0882de26cb42ad0a57f157321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:ee:f0:f5:57:ae:02:58:19:73:1e:ed:de:
50:f1:0e:b6:c7:53:37:95:24:fe:49:e2:e6:b7:35:
91:10:b6:95:ed:80:31:8a:de:04:b6:99:a6:38:ca:
af:5b:61:48:63:1f:ea:9b:63:cd:d1:28:ac:1f:49:
67:5c:7c:ff:79:31:97:f1:83:0a:fd:98:69:b7:91:
ad:1d:f6:d6:cd:8d:69:01:91:76:a0:a4:94:6d:d0:
58:74:d3:f7:17:ef:99:7e:25:08:cf:93:4c:2c:9d:
dc:e3:52:8e:cf:4d:09:18:48:91:be:b7:8d:ab:91:
55:63:38:ee:93:bb:15:6b:0f:34:8a:b5:c0:a9:71:
f6:21:19:80:02:42:6c:9c:97:59:d2:c5:cd:d8:41:
b8:0a:3f:89:ac:2d:e7:55:fc:73:4c:da:94:39:e1:
15:ba:ff:1d:04:16:24:32:bf:5e:69:66:bf:db:4e:
df:f5:6a:eb:05:d8:35:89:09:8d:be:d8:fd:1b:b3:
b4:f4:92:a3:8a:3d:4d:f1:ae:a5:96:12:51:d2:2f:
6a:72:03:9d:90:00:7b:06:b8:36:0b:04:9a:c1:fc:
7f:58:f5:c5:a4:ab:d1:13:4c:bb:f3:11:5f:a8:29:
b7:93:72:3b:a2:44:d6:61:c8:b1:ea:c9:6a:2b:9e:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AE:5F:AC:14:76:CD:C0:88:2D:E2:6C:B4:2A:D0:A5:7F:15:73:21
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:4b:d3:6f:d2:e2:3b:ef:f6:f8:6b:47:dd:a4:c4:4f:ab:
f5:72:98:97:dd:e8:df:40:89:e1:3b:9a:39:94:57:c0:14:ba:
c2:bb:fb:92:58:47:e6:8f:12:3e:52:2b:61:38:9d:c8:44:84:
a3:da:f1:9b:61:16:2f:18:a2:26:d4:d9:9f:dc:2c:9a:2c:d1:
ac:47:d6:87:50:ad:c4:c7:3a:2f:10:28:01:90:03:21:54:12:
c0:a2:39:0c:ed:7a:70:e8:86:b8:5e:6d:b9:13:d0:8e:08:d5:
e0:a6:19:fe:1d:d7:c3:e6:2e:bb:83:04:04:46:08:66:63:37:
5c:11:5a:19:d3:bc:44:56:44:cb:53:09:ca:f9:15:30:8b:9a:
79:8c:2d:bc:5b:11:04:93:ce:67:97:1e:67:93:6b:ae:cb:8c:
40:94:63:19:8b:aa:f4:e1:09:ea:25:61:af:88:03:b3:d3:e4:
fb:04:26:92:21:86:bb:9d:3f:76:e4:26:e6:02:fa:68:db:19:
cb:a6:40:76:50:b5:4a:4b:95:22:cc:84:27:84:75:a9:2a:07:
46:71:5f:42:f5:12:bf:1d:77:4f:72:4e:8c:69:e7:ee:36:fd:
f9:6e:1d:53:60:82:ce:96:e2:b2:9c:1b:fd:86:5c:69:8b:a2:
7b:3d:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:06 2025 by rpki-client