Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: oRjwhBT/fb30csgI2WwMIgJTJ3sV7oc2AVqTrhPy5l0=
Subject key identifier: 31:30:9A:0D:D7:1A:55:98:C6:C2:D2:52:6F:EA:5C:1E:2E:C9:9F:03
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 0194BCE0887D22F94C12AC703168E8E49430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=)
2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: BmNsatYDIMJ7pGNquxHDsSu1i7WmKFI+8Szl5ZEEbnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:88:7d:22:f9:4c:12:ac:70:31:68:e8:e4:94:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=31309a0dd71a5598c6c2d2526fea5c1e2ec99f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:12:fd:e8:9e:c0:95:63:58:fb:12:83:28:
36:39:c9:c8:07:8c:47:13:9e:cd:f4:c8:89:55:aa:
7b:54:41:e0:b7:32:0d:56:9a:0d:d5:da:98:eb:fd:
5e:67:7e:7a:f6:f5:3c:a3:d5:cd:9b:60:d2:83:57:
4f:ee:20:2f:cd:c9:aa:03:3b:44:b7:92:42:88:91:
5f:d4:96:3a:70:26:a4:b1:3e:25:5a:48:23:18:98:
f7:68:8d:dd:f7:8d:ae:bc:b8:75:02:b2:72:6a:bf:
f6:53:99:cd:fd:f0:0e:5f:13:32:28:13:1c:db:96:
88:9b:4f:c1:4b:bc:c5:95:70:cd:46:51:6c:77:c3:
49:8c:a0:0b:ea:7d:0b:c5:0b:2c:df:a0:42:18:c4:
12:4d:83:ee:ad:f4:52:39:1b:e0:29:48:a6:36:4c:
8e:49:92:54:f5:7e:e3:84:30:40:bd:e0:b0:63:54:
e3:64:6e:77:a9:a2:4e:f5:43:48:21:d8:c9:8c:90:
25:b2:36:9b:f9:04:0d:20:75:34:84:00:e0:27:b4:
02:10:47:2c:f4:03:b8:bf:d4:5d:83:ac:ea:15:4f:
9e:e1:e2:17:f5:ae:12:e9:81:44:22:0a:2d:4e:2a:
dc:f4:03:52:df:0f:41:59:3c:66:de:4b:27:9a:ca:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:9A:0D:D7:1A:55:98:C6:C2:D2:52:6F:EA:5C:1E:2E:C9:9F:03
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8f:c0:6a:9e:c3:7d:86:05:5f:69:bd:6e:f3:53:5d:b1:e2:
02:cb:cb:8e:3a:75:62:86:f2:9e:70:fb:f5:82:e7:c2:3a:ff:
98:fe:23:9c:3d:b9:f1:d1:05:60:3d:b1:2f:32:06:f5:b2:eb:
eb:83:cb:4b:f8:e3:43:a5:95:de:c8:6a:15:a8:86:79:13:4f:
72:5d:55:9a:00:90:92:d5:3d:79:8c:52:5f:ec:bd:9d:6c:27:
7b:89:fe:4e:5d:7b:31:bd:cd:3e:83:d5:ca:9a:69:c1:17:c1:
98:5a:4b:5b:a5:46:1d:fb:89:7e:54:75:a9:24:33:82:b7:8e:
d1:26:6f:bf:12:ba:c4:95:96:c8:1c:fd:1f:58:3d:3a:8e:09:
cf:05:62:0a:fc:fb:f0:f8:74:d1:f1:28:3e:af:64:b5:e4:a4:
23:fe:1c:1b:de:4a:ca:83:8c:fc:f3:28:16:81:27:77:e9:91:
1e:7d:81:21:ec:2e:cf:23:04:8e:20:18:24:32:ce:99:8e:f5:
b2:fd:a7:ce:af:e9:06:a1:26:1e:a3:93:ad:ef:0c:8c:84:fc:
1b:aa:73:2f:3d:a1:ce:b8:64:af:2b:34:65:e2:e7:12:2b:ea:
42:5f:0a:62:ca:dc:e3:60:46:07:a8:a7:e8:41:7c:0e:22:12:
1f:5e:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:50:55 2025 by rpki-client