Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: rD+kBa1kPAKY6rR+Zg13JDU8WVMCGMqdYLSXkYqLN88=
Subject key identifier: 3F:32:6D:7D:71:96:FB:7C:A6:9A:4F:F6:9C:0D:5D:85:4C:B3:94:B7
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 0194BC3C6539EB5EEB1ADAE0CA6B9C77AC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 044F
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: mKJCkusQ6Zrc9T35AU3bp/GW2IDRECCZGbgr5G9pzWw=)
3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:65:39:eb:5e:eb:1a:da:e0:ca:6b:9c:77:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=3f326d7d7196fb7ca69a4ff69c0d5d854cb394b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:8b:12:72:6c:4e:19:e1:77:f6:a6:7a:f5:
d5:20:e6:f6:61:f9:f0:96:7e:f2:3d:56:b1:0b:8f:
10:6d:91:92:82:68:73:eb:61:0e:0d:1b:6a:bf:54:
80:39:18:18:c6:a8:93:03:e0:ff:38:42:17:57:70:
d7:0e:9b:dc:c8:5a:fb:f1:49:72:7d:97:94:bd:8c:
16:7b:6a:92:88:85:43:b3:f6:42:2d:9f:c1:a5:db:
cc:fb:f6:bf:98:53:1b:97:33:d8:41:59:c3:9e:10:
4c:ac:99:0b:70:e0:40:f5:d5:14:cd:7d:c0:eb:b7:
c3:03:21:b7:97:b4:42:09:f0:8e:60:29:66:fe:b4:
4c:c6:7c:09:38:04:10:1b:76:2f:00:7d:d2:f8:fb:
52:98:67:85:c7:f3:b2:50:9f:f2:07:d7:a3:62:6c:
f4:3f:e2:90:7e:c2:7c:ce:7c:cf:90:10:35:4d:54:
cb:25:ac:33:46:ac:34:2a:a1:14:30:99:41:9b:33:
80:76:56:43:f6:30:1d:f3:8d:35:4e:3e:dc:56:3e:
e1:12:10:ae:35:05:8f:b9:a2:a0:c4:36:6a:ca:2d:
a8:dc:3d:3c:53:7e:48:c2:26:62:5c:50:06:26:ed:
65:04:c0:15:da:80:12:c4:8e:4b:1a:e0:2e:da:cf:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:32:6D:7D:71:96:FB:7C:A6:9A:4F:F6:9C:0D:5D:85:4C:B3:94:B7
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a3:60:47:5a:f8:dc:eb:1a:dd:13:18:51:14:27:d1:95:a8:
ee:4c:36:26:05:e8:9a:7a:fe:6d:4c:2b:ff:27:bd:0a:e9:bc:
5c:9b:49:4a:af:7d:1b:75:c2:d1:9b:dc:38:24:1b:41:bc:27:
98:89:00:57:c7:7d:11:d7:a6:b1:8c:27:2e:10:ed:5c:6f:fe:
c9:34:4f:50:39:65:81:78:52:ce:c5:3f:51:af:7e:a0:c7:58:
3f:57:72:f6:c1:04:57:32:d4:b0:30:ca:9b:4d:1c:ad:db:08:
08:cf:fc:ca:98:da:ed:e4:e8:53:a6:4e:fa:82:fe:0f:77:fa:
c5:b5:9c:91:83:68:1c:ed:70:a0:16:75:16:f4:7f:70:6c:c6:
4d:91:3a:9f:21:0c:a9:6a:ee:8f:9d:17:1d:23:68:e4:bf:dd:
d6:ae:73:6e:75:d8:64:e0:31:ec:22:f8:9c:23:66:18:ff:50:
81:d9:37:57:fa:0b:c3:3e:3c:64:0f:84:09:37:76:b6:de:99:
1a:f6:90:8b:5f:0b:26:32:b8:f0:39:48:1b:28:58:97:cf:a7:
07:a7:48:22:19:c7:61:78:84:6e:4e:9f:40:b4:63:a8:4c:25:
0b:07:0a:1d:7f:fb:5c:34:ac:dc:d0:26:c3:ce:08:58:01:95:
a8:b7:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:36:01 2025 by rpki-client