Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier: 2nM79bKq6rj/17PTc/bzBukH/z05CnQ9dzv/QlSqVc4=
Subject key identifier: BD:D9:71:03:52:FF:CE:21:11:AE:FB:47:F1:44:3C:03:8B:6C:75:ED
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 0194BCA9CC252B3BF8969AED726F4514997B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number: 138E
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: yAAsg9iPaHvdvHcyJll+pobaWLhnx34b266fOb3wCQk=)
2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:25:2b:3b:f8:96:9a:ed:72:6f:45:14:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=bdd9710352ffce2111aefb47f1443c038b6c75ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:3e:ea:30:49:d2:e5:ec:4f:10:8c:3f:eb:
dc:73:bb:80:96:8b:12:98:84:04:c7:c7:0b:1a:91:
c0:ec:f6:db:11:1c:0e:42:d0:68:70:f4:e3:a7:f5:
fb:b8:77:a3:bc:92:d1:64:fd:d3:69:25:32:23:4a:
73:e1:d7:77:17:fe:f5:05:f6:6e:d1:69:07:34:a9:
a3:8e:36:e3:a6:82:29:f4:bf:7a:c2:7d:2f:55:96:
76:64:b3:b1:5c:ff:d1:82:9a:0d:1f:b1:67:97:4f:
56:aa:2d:94:4c:68:14:1e:f3:cb:7f:13:95:05:88:
a0:36:2d:c0:fd:e5:3f:60:eb:7a:5b:59:b0:4f:20:
9e:28:f4:86:83:9b:f0:37:1a:ac:00:c5:60:af:77:
ee:3e:62:83:68:b1:ed:07:7c:55:1b:83:0b:3b:d4:
ba:a5:e6:fc:b4:c0:83:1e:d4:2c:bd:98:40:31:0b:
1b:35:5d:c6:66:fe:35:ee:b3:49:7a:42:84:12:8b:
be:bc:dc:32:81:d3:ec:c7:d0:b4:66:cb:23:e3:d2:
04:c6:82:73:1a:77:83:95:62:4e:a1:a0:46:87:eb:
92:4c:f0:a4:b9:62:11:f7:e3:79:2b:80:18:98:18:
fc:a3:50:d6:a2:d7:6f:7e:00:36:dd:30:93:88:1c:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:71:03:52:FF:CE:21:11:AE:FB:47:F1:44:3C:03:8B:6C:75:ED
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:34:2a:ff:69:8d:cf:30:45:d2:5e:cb:41:26:67:45:12:5c:
60:c7:d9:52:3b:3b:a7:9c:09:f6:04:99:89:00:27:28:31:2f:
2f:93:19:41:ea:07:64:4c:c3:f7:59:20:a0:c7:ac:ca:26:e5:
21:18:7d:fe:f9:3e:93:a2:ba:45:4c:ab:68:c2:eb:72:0a:1b:
6f:01:39:e0:ef:19:67:98:02:4c:2d:ee:53:5b:5d:14:bf:8b:
46:89:a4:e8:a2:f6:e9:7d:0d:06:f4:b7:e3:24:47:d5:d6:2d:
19:1b:ba:a4:35:08:e0:9d:8d:00:d2:70:1f:64:85:ba:21:ef:
6c:8a:d0:01:3f:d7:5d:74:20:bf:05:1a:00:3f:74:08:26:29:
4c:1a:70:4b:46:44:65:55:cc:f7:22:ee:9a:3b:69:b0:15:7c:
df:60:23:f0:10:b4:59:ef:4f:09:3a:8b:cb:cf:47:d6:7a:43:
80:7a:3f:5c:72:9a:e0:dc:25:fc:e2:81:2a:b5:d1:11:9c:a6:
fc:7a:89:5b:25:2a:c8:31:59:19:c0:ed:9f:00:41:fd:d7:4a:
ee:a8:af:a9:00:f2:c9:95:4f:6a:12:e1:1e:f6:51:43:2a:40:
fc:70:14:1b:de:96:e3:0b:30:70:c8:a0:37:a1:e0:c5:45:95:
07:18:57:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:49:24 2025 by rpki-client