Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: KZJZGPdMHpjPZavu4u08ZCRUBI5GpmAcrMEglxDrU7o=
Subject key identifier: 53:CB:AD:97:27:22:69:CC:D9:FC:48:D1:FF:57:6F:F5:CE:6B:4B:1E
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 0194BCA9FE3FD6AD2AA0A3CD671840DF0A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: id+cXq426lb90zzAVfqt65SSiLfPppV+Kxac6EhvEms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fe:3f:d6:ad:2a:a0:a3:cd:67:18:40:df:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=53cbad97272269ccd9fc48d1ff576ff5ce6b4b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:fa:22:f0:56:20:43:e1:53:24:c5:71:9b:
02:73:eb:48:e8:62:65:af:0d:29:09:3d:68:22:81:
0a:53:2e:9c:09:3b:4a:bc:92:29:dd:c7:b7:93:55:
7c:d0:41:10:bd:8a:b2:13:f8:fe:ac:f4:93:a6:a3:
82:10:e8:1f:1e:68:0b:44:0e:83:d3:1a:09:6c:2b:
6a:88:ca:b9:17:a2:88:52:be:05:df:49:95:47:1e:
1c:9f:7a:27:4f:a3:0a:52:f8:a8:86:0a:51:43:49:
1e:76:b9:4b:45:42:52:9b:59:d9:bc:34:da:a0:75:
d2:ca:35:cb:8a:93:cf:2d:91:2e:ad:70:e4:58:f7:
6c:ef:31:14:ad:dc:38:e0:a2:a3:67:fa:fd:9a:b7:
63:7e:a6:45:bc:91:74:49:b4:88:ba:e7:72:47:83:
75:4e:3f:6a:e6:ca:b2:43:65:25:fa:02:f3:e8:36:
e6:be:dc:39:02:bc:25:9c:c1:ac:76:1a:1e:4b:5d:
6e:0b:68:66:a7:ca:11:7c:73:06:c9:f3:75:2e:b1:
ec:0d:4b:5a:51:f9:0b:05:ee:67:81:dc:b8:5e:a4:
d3:97:97:9d:42:73:ed:bc:49:de:67:f3:80:d4:7f:
d3:6b:62:16:cc:3d:3f:df:88:aa:d9:2b:bd:f1:1c:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CB:AD:97:27:22:69:CC:D9:FC:48:D1:FF:57:6F:F5:CE:6B:4B:1E
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:da:50:0b:35:0c:c3:cf:16:cc:8c:cd:f4:2d:b3:1d:10:d8:
5f:d2:05:90:60:5f:36:d4:60:15:6f:20:6a:db:c5:f5:d4:b5:
4a:95:f4:ac:77:f5:ff:57:96:7c:15:68:6c:90:b8:88:11:16:
97:66:87:8e:20:2d:95:6e:19:03:65:5a:ad:88:48:db:8f:c8:
ad:df:4b:ba:00:bb:b1:2d:05:a7:04:e4:a4:92:f0:ae:e3:90:
00:c2:f8:69:e0:c6:7e:9b:f6:d9:bb:82:fb:de:cc:b7:fb:9c:
a8:fe:92:9a:7a:95:d9:1d:ed:9c:f8:cd:87:f5:da:db:39:bc:
98:1f:1f:bc:1e:dc:0f:9f:f2:24:33:8a:d7:98:b4:0b:4c:11:
f7:8d:a4:1c:fc:fa:d3:32:55:e9:03:5a:ae:da:82:9c:c8:8f:
cb:4f:0c:66:c2:8b:3b:8a:2a:f8:b0:9d:79:cd:c6:22:d8:f0:
06:d1:43:5a:54:2f:1a:8f:d3:fc:26:09:b4:6a:c5:25:a1:36:
10:45:bb:04:15:d3:60:a7:66:a7:4b:89:a8:56:8c:44:04:f0:
9f:37:b9:7f:85:6f:dc:72:c4:5a:2f:48:d7:e2:9e:8d:04:5a:
10:c3:f0:74:c7:15:20:78:a9:85:4c:a9:79:6c:65:68:51:28:
87:61:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:26 2025 by rpki-client