Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: 1YHlJU24EBYmHffcm8gMaKBrJyl5LMVyKFDKaKjKKrg=
Subject key identifier: 1D:EA:A0:74:4C:CB:17:AF:2D:AB:4F:DF:46:63:B0:A0:A9:16:88:F9
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 0194BD857A530CA03F23DD6A98A657B0C9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0720
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: GFziGnmlMKb60P1B4H8OYZzQ7SCMK/o2nrj9QnYmgAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:53:0c:a0:3f:23:dd:6a:98:a6:57:b0:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=1deaa0744ccb17af2dab4fdf4663b0a0a91688f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:3b:8c:2b:d9:fa:82:d8:09:ab:81:a1:e8:
1c:dc:d3:6f:23:44:09:5c:02:89:72:74:66:5d:b6:
3d:7c:be:b4:df:0a:5b:97:c4:ba:89:94:c1:14:e5:
d6:28:af:c2:17:fb:35:4e:d0:f7:dd:50:22:34:5d:
5a:ee:00:84:55:c9:78:bc:67:a8:15:84:f4:6e:18:
3b:72:e4:fd:0e:0d:54:dc:7a:c3:a5:a3:d1:a8:0a:
d7:53:0f:1f:85:fa:99:f5:b4:86:50:af:24:b4:9d:
0b:8e:27:c7:d6:78:8d:e8:02:7e:7f:24:e3:2d:86:
5a:e9:b7:c9:04:4c:72:16:b3:cf:a7:99:8f:7d:e0:
23:ad:fb:e2:98:8d:ed:c8:74:00:e4:07:76:0e:3c:
47:e4:8f:7e:bd:f2:15:0e:83:34:7a:cf:03:0c:61:
0f:1d:6b:4c:79:c8:6b:cf:1a:6d:90:1a:f0:76:19:
59:00:a0:eb:92:c5:5b:e9:03:10:09:6f:76:a4:13:
a5:cf:26:b1:30:22:eb:df:b1:a4:79:71:f4:e9:c5:
43:7d:2a:0b:24:d5:ea:53:c7:6f:1f:89:c8:0f:15:
3b:51:ad:cf:3c:e8:0b:48:2a:ed:4d:56:99:92:9b:
c8:96:1d:aa:5e:88:66:c3:6a:d7:bd:48:05:02:b1:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:A0:74:4C:CB:17:AF:2D:AB:4F:DF:46:63:B0:A0:A9:16:88:F9
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f4:13:93:30:da:bb:fc:08:af:72:cc:fb:36:1f:b4:1a:a2:
3b:15:7c:93:4d:88:17:15:8b:64:5f:d5:03:c2:8c:dd:96:81:
48:72:4f:a4:99:5d:9e:53:1b:36:d6:3a:8f:fa:b5:53:ba:4f:
33:d8:78:7d:f9:71:c0:ac:9e:07:1a:98:c4:9d:11:8a:a7:e7:
44:7d:ec:66:c7:63:3d:10:32:5a:42:f7:1b:e0:e9:96:8b:27:
eb:8f:69:f4:4e:b5:cf:38:9a:f7:1c:54:f8:42:2c:35:05:3e:
b6:a2:aa:b2:27:62:ab:55:a4:73:75:e1:e9:69:10:ff:fa:f4:
ba:a3:50:ae:f1:4a:15:a9:60:da:22:fa:07:50:f9:1f:9b:85:
87:b9:60:8a:5c:f8:38:f8:b4:39:b8:3c:5e:c5:03:af:c5:ee:
f2:27:19:ba:5c:15:da:2a:01:31:c8:60:96:8c:ea:49:3a:6c:
26:5d:c8:ce:a4:82:a7:00:2b:b8:55:7e:2f:1f:2f:e6:99:bb:
a0:0b:5a:b0:a9:43:c9:cc:36:8b:2a:3e:22:db:50:f9:a5:9e:
80:a4:d6:23:94:36:5a:5d:98:5c:d7:b4:0c:9d:f2:90:01:3c:
92:b0:c5:2b:a3:ec:42:64:d1:a2:ce:15:16:d9:d3:20:ef:63:
b6:b8:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:52 2025 by rpki-client