Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: yrSQCN/PMxUPRJIba5ur+TFmInB3A86khQlrIekovI8=
Subject key identifier: B2:E8:12:72:67:FD:6D:36:EF:AD:58:E1:2D:54:DF:5B:46:62:F2:51
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 0194BCE0D5D8014C5CD82115D9D704B98A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 3nqGhkLV9lVUPlFFGoMeuG1mXiA.roa (hash: XcfY9Hmln8PmxUq94JhUMZLnl3Q3LCi2mdpPddFOCD0=)
2: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: 7G4cKmWIN8FcJuDQ+0zeIpeq69lAuG9xi8TPEvvfyks=)
3: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (hash: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d5:d8:01:4c:5c:d8:21:15:d9:d7:04:b9:8a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=b2e8127267fd6d36efad58e12d54df5b4662f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:3c:e0:22:28:46:37:dc:51:e7:d8:3c:34:
46:bf:63:42:27:08:02:23:48:70:bc:7f:f3:b7:9b:
78:eb:8a:91:9b:f1:8a:cf:54:3c:3a:a6:94:2a:9a:
a0:b1:b1:9c:4c:03:f9:fa:2b:71:ba:0a:57:94:e0:
05:43:fd:1b:fa:33:71:e0:24:56:a9:7e:ec:48:ce:
ee:f8:4f:ae:c4:9a:94:c9:d1:8a:a5:2a:5b:2e:d6:
e3:77:4a:3d:74:21:37:5e:61:dc:b1:45:14:1d:52:
a3:58:bb:24:5c:1c:5c:f2:bc:64:97:58:59:9f:ac:
51:6d:64:3b:d1:fe:1d:32:3a:2d:22:18:0a:3e:86:
ca:77:44:f8:f5:2d:fb:dd:eb:3e:be:37:c9:77:99:
56:fd:23:53:cd:92:ba:cd:47:93:96:e2:88:e4:87:
2f:84:fc:da:93:b0:43:25:ae:eb:45:e3:ac:ca:d4:
5e:c0:30:13:ce:aa:10:f3:02:fe:4e:71:e1:ee:c0:
29:78:f4:bd:6d:b9:99:b7:00:a7:f2:ab:0d:49:c9:
a8:51:18:08:7d:1f:3d:8b:f6:4f:c3:22:e9:f4:e7:
98:32:7f:4c:5c:41:96:c6:3a:2d:84:c8:7f:c9:e1:
9d:c8:f4:ee:e1:42:2e:76:24:64:88:7b:7b:19:a7:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E8:12:72:67:FD:6D:36:EF:AD:58:E1:2D:54:DF:5B:46:62:F2:51
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a0:c2:bd:8b:68:c6:f0:26:14:24:97:f6:3c:cb:bf:3b:70:
47:3a:bb:ae:9d:40:6e:8f:e0:4a:f9:94:4d:87:5d:48:c8:55:
d9:f8:de:3f:d1:ac:bc:48:aa:2a:fe:e5:eb:34:c8:d8:10:14:
74:3a:8f:e1:43:5d:37:eb:a6:c6:77:0c:79:bf:34:9d:82:54:
41:fb:7a:4e:68:99:bc:95:87:51:b9:bd:2a:e4:0f:cf:15:e5:
47:ec:79:a8:d5:ef:6d:39:1a:4f:9c:b7:a2:74:56:fd:e5:cd:
a3:44:a2:ef:6f:8d:26:13:ea:a7:24:6c:ca:67:c1:ac:8c:f1:
15:33:d4:cd:e0:28:c8:8a:99:05:a5:40:dd:bc:b8:19:4d:2f:
b6:f2:44:06:eb:da:db:4a:c6:dd:94:97:89:5a:c0:40:37:eb:
8f:e9:42:3c:2e:b7:63:ef:99:8a:0f:1c:3e:24:0e:62:4f:aa:
85:42:9c:d5:f6:18:1b:77:14:a9:1a:45:92:40:e6:35:ca:70:
ff:0e:12:ca:6a:ff:39:a8:cf:70:2c:19:fd:0f:93:89:1c:f9:
f8:b7:f4:23:04:1b:98:84:ee:48:6d:25:b9:52:d9:8c:7e:64:
f2:6f:93:8b:05:bf:dc:77:44:41:ba:0f:85:ce:f7:e5:1c:89:
fc:7d:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:51 2025 by rpki-client