Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: pHPN3lpPRKRd7rrOXcNnbS4JdRO5bp33JZwa85kH3eA=
Subject key identifier: 38:26:D4:65:7A:F5:13:A7:0A:EE:E5:06:29:9D:0D:A2:6E:FD:CE:05
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 0194BD4E868DFD462F90A3632CE1159DF123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: rcRr1SxNDdq/UQwN1CzfPVxm62HMsEcgH2D3TaQ6si0=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:86:8d:fd:46:2f:90:a3:63:2c:e1:15:9d:f1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=3826d4657af513a70aeee506299d0da26efdce05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:0a:59:e8:24:21:e1:21:18:d4:e8:23:7a:
a9:55:d0:35:b1:e0:0f:58:64:dd:0e:84:9b:04:e3:
02:00:87:88:57:2d:54:38:af:58:ff:03:92:1b:a0:
35:ea:9d:c5:65:b3:9a:67:58:20:ac:7a:11:c1:1e:
f1:63:9e:34:1e:cb:20:61:50:a2:f5:df:eb:13:7c:
58:7f:47:b6:58:6a:89:65:76:c2:00:23:a2:f2:0b:
3c:03:5a:cf:3b:f4:6a:bb:ec:0b:6c:66:2c:13:0e:
95:bc:02:93:e6:b0:b8:70:64:eb:80:2c:1a:18:78:
dc:2a:ca:8a:e4:7a:24:a8:93:fb:e5:16:d6:12:60:
57:93:66:52:75:a3:5d:83:d5:e4:39:f2:21:c5:a1:
45:2a:df:8f:60:84:4d:17:d9:f7:51:6d:41:ca:23:
2e:23:34:d3:32:8c:7b:2b:06:cb:4f:0c:5d:05:ed:
a4:46:21:1e:90:4d:ab:3b:77:39:b9:74:62:65:b5:
8c:95:b9:0c:aa:cb:2f:26:e3:df:ee:ad:14:20:3a:
20:5e:7a:11:76:f0:10:e0:78:0a:c3:7c:32:22:2d:
a7:e7:27:52:79:4a:dd:a5:93:a5:65:7e:23:8f:e7:
49:74:fb:95:82:3e:a3:29:99:de:93:a1:a6:b8:b5:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:26:D4:65:7A:F5:13:A7:0A:EE:E5:06:29:9D:0D:A2:6E:FD:CE:05
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b9:bf:7b:17:e7:b3:44:47:8c:36:87:59:53:eb:49:c3:71:
bb:af:27:f6:85:06:a4:d8:76:28:be:6d:f7:23:25:fd:cc:53:
8b:3d:28:0c:4b:b6:5c:2a:7a:40:16:e6:ba:9a:f1:d1:ef:18:
5d:cd:e9:e6:e7:60:8a:50:ac:46:87:45:c8:8e:2b:61:aa:97:
0b:2a:89:d4:56:ba:57:6b:c6:5b:a0:25:ce:27:f0:0f:f6:aa:
07:e0:93:b1:75:14:21:f9:7f:e2:e6:3b:f2:04:7b:20:37:40:
84:0f:3a:6e:be:81:90:76:de:b1:46:12:44:77:0c:ea:0f:4c:
03:1f:be:b2:bc:7f:e8:35:a7:38:d0:19:33:46:fa:aa:5b:83:
da:c6:72:9b:d5:64:52:1a:89:8e:03:de:49:9e:c1:94:0d:94:
c3:4c:dc:47:0a:96:f8:3d:44:b1:94:e9:07:46:83:9b:f4:0a:
0a:f5:1b:95:7c:36:1e:e0:90:b5:63:55:b2:b0:22:4e:f3:0a:
c6:39:3f:fb:ec:86:e5:d4:1f:20:78:0e:fd:f5:7d:51:8e:7d:
5e:d9:e1:16:62:4e:5b:e2:bf:33:96:43:04:15:02:10:ad:5a:
39:09:f6:c9:8f:f9:df:a8:71:77:e4:2b:af:55:70:37:2f:06:
c7:b4:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:51 2025 by rpki-client