Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: dWCsS8ZusCBNGoApUKwkV1s3ieUaHED53w2oGR5OIHo=
Subject key identifier: 4C:FC:B5:5A:6D:2C:6E:69:35:0E:4D:04:57:31:0C:F5:96:24:AC:67
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 0194BC050FFC9E0F03B301154308FEC38582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 0DFD
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: Z0gvPYlI96DTk6kTMtXKWAJg04vrDSxHBPMLw6PKk7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0f:fc:9e:0f:03:b3:01:15:43:08:fe:c3:85:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=4cfcb55a6d2c6e69350e4d0457310cf59624ac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:a6:0c:84:36:58:e5:83:48:75:d4:03:e3:
96:42:04:ad:c6:27:e0:2a:8d:7d:3b:d8:10:f5:32:
de:28:3c:24:65:da:02:22:b1:eb:c8:da:a5:74:0c:
29:6c:3a:85:a9:a1:ea:b2:32:b6:f6:50:66:09:ff:
ed:0d:fe:7f:56:91:f0:56:88:7e:61:28:4c:48:81:
bd:7d:48:e6:0e:b1:2b:f1:60:7b:bb:a9:8e:59:b7:
f1:9c:45:8f:b5:9e:0f:b0:8e:93:dc:b1:5e:ae:cd:
68:b3:e3:1d:4e:cb:76:fe:d7:40:16:65:28:cf:b8:
00:2e:8a:27:e5:06:59:f5:bd:d6:9c:a4:e2:bb:ff:
24:27:1e:f9:1d:70:9c:4b:dd:3a:3a:74:e3:f2:4c:
24:89:68:49:da:bb:32:47:6f:e9:50:a7:93:02:d3:
a8:6c:52:bd:ff:13:03:d2:01:79:01:68:ac:b1:51:
a2:60:cb:1c:f0:3c:e2:47:36:79:52:4e:33:4c:ca:
2c:a9:be:88:8b:bb:3d:c2:d1:67:d8:41:98:db:4c:
c7:e7:7a:10:45:e2:7e:a2:aa:65:3e:d3:f4:e7:4b:
e8:58:05:69:8f:d0:26:aa:1a:d9:c9:8d:17:95:9c:
21:19:81:ab:c9:71:e8:0e:48:71:eb:da:aa:1a:c4:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:B5:5A:6D:2C:6E:69:35:0E:4D:04:57:31:0C:F5:96:24:AC:67
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:ce:a2:92:fe:b5:51:1d:79:a6:e0:95:b7:7e:77:9b:32:
73:8d:8b:4a:59:4d:82:9b:8f:b3:f8:35:c1:04:2a:c7:e4:6f:
ca:20:60:90:92:54:ed:71:3c:fd:d9:52:4a:73:b1:8c:2d:5b:
d5:99:c3:fe:44:28:cc:6b:20:72:51:c5:9c:55:fa:2f:04:51:
55:43:5e:8d:81:32:d7:c9:5c:d6:cf:32:ae:7c:24:f0:b8:5d:
53:bb:d3:e4:c7:e7:da:8b:b5:a0:09:c7:f9:84:fb:d1:96:5c:
d5:1c:c2:b4:84:56:57:b4:e9:85:09:4a:2f:be:57:05:65:59:
0c:21:99:65:b7:70:35:cd:0b:61:4f:b9:81:d6:96:70:b5:7f:
81:0e:20:95:38:07:a0:8a:d1:89:e7:7a:4b:3f:a7:60:fd:cf:
87:bd:22:75:69:1a:14:85:99:bd:a8:0f:0b:de:99:87:d3:b7:
29:42:c7:80:c8:7d:46:4e:eb:f8:ee:b4:9b:d6:16:92:bb:3c:
33:0c:ff:fb:3c:4a:32:32:ae:d1:f6:11:68:79:ca:1c:95:52:
02:36:fb:a1:ce:61:03:20:4f:9b:c4:d8:0b:f9:47:59:c5:fa:
34:8a:c1:a9:0a:41:4f:26:34:e1:c6:b8:20:67:94:33:31:9b:
3d:8a:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:35 2025 by rpki-client