Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier: ghN1L1nxEtmE3P38zBYG2JlfSaZA4L2hig8ujn4XrT4=
Subject key identifier: 36:86:B9:B8:EB:61:B3:AF:0A:69:21:B5:1D:DA:D5:A1:85:EB:73:60
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 0194BC3BD8B8DF99928E34CC22D2D54BF1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number: 0AAC
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: L/i1cSvdz9XPFkW5tR5VPFvFxndJphdWgYFlueW7x3I=)
2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:b8:df:99:92:8e:34:cc:22:d2:d5:4b:f1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=3686b9b8eb61b3af0a6921b51ddad5a185eb7360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:2b:c7:6c:cd:dd:89:33:6b:04:b8:5a:ad:
30:fa:66:ea:4d:6f:9c:09:a0:1d:6b:c1:26:3b:e5:
e5:ac:8e:40:ec:fb:94:7b:bd:02:bf:56:f1:12:84:
b6:ff:a7:5f:aa:65:ac:5c:db:86:ba:82:d3:d7:7f:
5a:6c:8a:71:c0:d3:93:38:c8:8f:ff:94:55:80:d7:
8e:0c:71:73:e5:0d:b0:80:92:81:bb:c6:ca:0a:f3:
cb:95:b6:93:28:99:fa:15:51:35:01:f0:90:6c:eb:
a6:ad:6b:55:31:43:7b:5f:9f:86:d5:b9:9e:07:79:
08:5d:b3:a1:11:9e:d5:e1:60:ec:22:49:50:74:26:
48:ca:02:4d:80:c2:d6:22:8c:e9:20:76:04:62:bb:
bd:29:dd:07:b7:e3:b9:8b:f4:af:1c:34:62:09:59:
94:ee:d3:a5:9a:6a:28:15:60:41:ac:ed:01:9d:84:
66:f1:b7:f5:7b:0b:97:d1:43:97:6e:4f:3d:2e:4d:
a2:96:18:4e:7e:2e:05:a6:96:75:2a:d9:ca:25:e9:
1b:02:06:1f:f3:87:b5:e9:28:4e:b8:1c:9a:13:de:
d5:6c:9a:7c:19:44:55:d9:b8:fd:d8:8e:bf:0c:7a:
07:d3:83:a6:91:61:e9:bb:c7:29:f0:c5:69:aa:d3:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:86:B9:B8:EB:61:B3:AF:0A:69:21:B5:1D:DA:D5:A1:85:EB:73:60
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a1:01:bf:dd:eb:4a:38:6a:7a:78:3d:2f:12:4b:29:2e:2f:
cf:a4:8d:4b:99:1e:c4:05:4c:09:64:e8:96:40:6c:28:13:fd:
68:00:57:a0:9e:14:99:1e:00:4d:ba:c9:5a:48:79:fb:e9:10:
6e:3b:72:b2:7b:85:cf:b9:08:54:ab:08:f9:a0:68:d9:fe:42:
4e:29:3f:e2:37:8b:0e:99:8f:3b:10:e6:4b:95:37:e0:91:f4:
e7:0f:d4:a1:ae:aa:d8:f5:a9:37:f4:87:37:2d:52:68:57:00:
33:10:81:e2:45:b4:06:2f:1f:f5:f9:c9:c2:23:13:5d:d6:b3:
6d:4e:fb:ac:96:8c:07:72:ef:52:ff:ea:5b:82:3e:1a:9c:d5:
31:f2:54:8c:ae:48:ec:22:10:43:a9:3c:b8:36:67:94:d1:b4:
2b:cf:04:ac:da:66:f4:e8:6b:1e:aa:34:3a:62:38:e2:b9:71:
02:0a:89:57:2d:ee:ad:23:e7:23:2a:b2:76:9e:70:81:6a:27:
85:b8:ec:f9:54:d8:0f:83:30:7e:16:0f:48:f7:8c:a0:ac:eb:
df:72:d5:36:ad:8a:e3:8c:e7:21:cb:2a:a9:58:5b:58:59:8f:
43:9e:70:7e:f6:a2:19:47:75:33:49:7d:1e:4d:a0:a2:9d:69:
90:d7:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:44 2025 by rpki-client