Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
File: KiZGBSRa8gGcKTw3KPal4lXYnyU.mft (raw, json)
Hash identifier: CQpoP4CyT0wscIlRsX+FcBDHsgvQBU+0nE8zbYZAL6M=
Subject key identifier: 69:49:D2:63:F7:8E:88:01:BF:6E:15:4B:6E:EE:64:8D:81:07:19:93
Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
Certificate issuer: /CN=2a264605245af2019c293c3728f6a5e255d89f25
Certificate serial: 0194BCA9A07D0A5AB6C9D059DCB2EB33EEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: 3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa (hash: iHgOduhUsida+9pHg8iFsStpH/s/1dREHiJkoJW0aww=)
2: KiZGBSRa8gGcKTw3KPal4lXYnyU.crl (hash: FZ62nL57kKh98bz3rSBI6d1b2ut13n0c7IBZfMZBJ6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a0:7d:0a:5a:b6:c9:d0:59:dc:b2:eb:33:ee:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=6949d263f78e8801bf6e154b6eee648d81071993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ca:a4:96:1e:13:60:04:58:11:64:ff:b1:29:
40:be:c9:4e:4c:c0:ae:54:5b:f0:a7:bf:44:41:5f:
be:65:af:69:48:87:0d:f1:a6:ce:5d:b3:42:1a:01:
f7:07:f2:88:aa:bb:29:ab:18:a8:98:3a:a6:bd:45:
60:51:32:a1:99:3c:7f:48:36:00:4b:bd:9b:95:26:
ae:8b:15:2b:d2:12:0c:de:bd:58:3f:6d:4e:28:e6:
7e:52:8c:47:ec:70:ca:1b:48:c1:d0:11:bd:ec:78:
d1:a8:8e:42:16:d0:3d:c0:2d:d3:db:ed:ea:5f:38:
cc:18:4e:b3:44:9a:98:e5:54:d3:94:6d:57:73:d7:
5e:9e:aa:b4:9b:77:69:9b:3f:69:39:1e:b6:a2:c5:
be:4d:f1:14:14:37:78:87:af:12:15:73:ea:ee:b3:
80:6d:b4:3b:e5:4a:de:32:dc:ee:7d:51:0a:48:5b:
ef:4d:45:17:89:fd:b3:4f:1f:03:2b:21:50:58:d7:
d4:ba:aa:e3:aa:c5:3c:3f:31:3e:d8:c0:7d:b9:3a:
4f:1c:34:a8:13:3c:c4:be:71:2a:8a:94:89:d6:20:
eb:6d:c5:b0:70:1d:22:9b:3c:8c:e0:9f:42:09:77:
e0:0d:67:25:95:01:f3:f8:0c:27:1f:2a:7a:1f:c7:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:D2:63:F7:8E:88:01:BF:6E:15:4B:6E:EE:64:8D:81:07:19:93
X509v3 Authority Key Identifier:
keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ab:18:7f:a7:77:b2:bf:09:7d:5f:99:9f:88:23:bf:5b:10:
93:d9:ff:db:79:17:83:61:91:cb:d5:93:c6:f0:54:e9:ea:58:
f2:ec:e1:d9:86:8b:5b:39:f0:ac:a3:83:df:c9:84:8e:b7:43:
44:62:af:92:5e:93:04:ca:8e:3e:3d:06:54:b4:6b:09:fe:26:
eb:ec:08:8d:df:30:7c:17:a6:a7:c5:d8:42:91:81:70:9c:42:
97:9b:d6:3b:fb:28:bc:cc:3f:0e:b3:40:32:e6:b6:5e:4b:b9:
db:c4:e2:5c:4a:37:c5:13:fb:29:fe:77:ac:13:5a:74:0f:ff:
d6:7f:31:b4:47:b0:24:97:0d:3d:8e:76:36:b8:5e:4f:80:2a:
79:58:a4:49:64:4a:d5:03:01:83:6b:98:7a:4e:4d:8c:2b:66:
3c:fa:e6:1e:36:b8:b4:55:8f:2d:c8:62:d3:2d:37:a4:d8:37:
6e:63:c9:7a:fb:19:55:15:a2:6c:1a:b6:93:92:3d:17:75:e8:
81:71:ab:3d:e5:e1:69:76:1a:1c:a8:b6:61:c6:a7:5e:e0:bf:
3b:a5:12:ac:29:44:1a:89:85:ce:33:3f:f8:23:56:46:06:9e:
6f:68:e5:7c:30:f3:71:18:7a:69:18:53:c7:5e:15:5a:28:01:
2b:c9:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:48 2025 by rpki-client