Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: yQVF3I1PzuQ82xeMfKZKgL9vi80sgIhSIrv2Uf2ISGc=
Subject key identifier: 4E:DE:D2:70:07:51:AE:F6:5D:98:43:29:8E:86:3E:64:41:93:CE:59
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 0194BD4E8AEC947C5FD7253FCB180A079467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: KhodM/Bf4/Huo4Y+dl0tOq24fLY7AqTfVauYjO9QbL0=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:ec:94:7c:5f:d7:25:3f:cb:18:0a:07:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=4eded2700751aef65d9843298e863e644193ce59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:a3:ed:0e:b3:14:23:e7:11:43:da:76:5e:
09:c1:a9:07:72:63:8a:b7:d1:67:8e:ef:59:0a:22:
11:31:a0:73:e3:36:86:92:dd:7b:59:f1:80:1b:29:
bd:ab:7b:d5:85:e8:99:d7:c0:94:9f:56:47:cd:35:
1f:bf:8a:da:b3:ea:a1:8a:71:b9:22:9b:bc:b4:cc:
60:fd:e3:8f:75:d0:a3:55:dc:a3:4b:e8:75:ee:a2:
c8:d0:67:7c:73:8a:bc:1a:44:a6:ea:48:5e:b6:e7:
97:e0:20:69:6a:3a:07:e9:5d:49:a9:d5:32:71:47:
49:6d:97:b3:f7:e9:30:ee:5c:49:23:6f:1d:11:bb:
32:de:b4:fa:a1:a3:46:83:63:81:e6:56:60:a5:da:
23:65:a6:da:9c:65:dd:78:5a:e2:da:c1:26:12:a9:
77:26:27:6c:d7:88:57:3d:43:5f:1c:0d:5e:17:ad:
37:fb:46:08:36:dc:da:c4:b1:c7:6c:3a:4b:2f:78:
ce:b4:2b:c7:d4:a3:ef:cd:fe:a0:a1:bc:41:2a:38:
31:44:a7:16:79:92:fe:02:54:fe:5a:d6:13:14:6c:
37:86:0b:a2:73:de:b6:1b:b6:40:85:6b:a2:1c:66:
58:00:8a:01:43:85:4b:1a:ab:d3:df:7d:73:92:52:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:D2:70:07:51:AE:F6:5D:98:43:29:8E:86:3E:64:41:93:CE:59
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3a:fb:fd:13:d2:99:b5:71:d2:c3:5f:97:57:ae:41:af:14:
42:cf:8f:2c:80:72:10:b4:8d:8b:61:2e:ed:32:e0:bb:a1:83:
43:df:6e:34:c5:68:db:b8:cd:17:a0:0c:17:1a:54:50:8d:22:
43:0f:06:18:b2:45:3a:87:c9:c7:4d:6e:57:50:ec:d7:5e:9e:
17:c0:03:f3:04:a8:7f:12:41:42:30:f5:57:ee:0e:a3:e4:23:
46:9d:ed:fc:5b:51:54:2a:c5:06:16:63:8f:f6:82:0b:81:23:
52:8b:47:34:3c:ed:41:4e:d4:f3:00:6f:8e:17:a2:37:9f:9b:
99:b9:5d:d8:ce:0c:0a:1f:0d:cd:86:fd:ec:5c:32:6b:75:f8:
66:d0:f0:77:21:18:39:d6:1a:81:27:42:ce:f7:13:49:ec:01:
08:6c:34:e3:ea:44:af:c7:d1:a9:38:7f:4a:0c:2d:ae:f8:eb:
3e:dd:a9:0f:42:75:1a:55:d3:7d:bf:5c:59:ad:68:96:77:86:
ec:a0:48:43:6a:8a:98:b8:c0:93:f9:a2:b3:6e:15:53:93:07:
97:2c:66:6d:f3:73:63:24:a1:57:95:41:7c:95:14:c6:a4:6f:
6b:b3:95:f5:da:1e:d4:f9:e8:ac:d6:15:19:2e:64:a6:15:91:
18:cc:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:59:27 2025 by rpki-client