Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: WJqelb830JiJOSM46/oUpMzXibWJOh5yIIEJegCoojQ=
Subject key identifier: 9A:68:EE:CC:BF:1A:C3:E9:76:C3:42:3E:7A:D1:BC:51:CA:46:B1:CB
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 0194BC3CA85D2264226BC03278612AA05C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1138
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: +jxaKKG6CDFSzm7Z+rjzPsatdE4BTVOL2x+dKSPfRI4=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a8:5d:22:64:22:6b:c0:32:78:61:2a:a0:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=9a68eeccbf1ac3e976c3423e7ad1bc51ca46b1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:ac:f3:56:b3:59:eb:79:f8:54:04:09:32:
4c:76:fe:7b:27:40:82:7f:6d:31:d3:34:86:78:88:
df:e8:c9:38:52:7f:b4:d6:4f:82:a6:46:d7:83:b0:
ec:04:82:1a:5f:95:19:fd:44:99:f5:ee:6e:fe:f5:
b0:a1:e5:37:31:22:6a:de:12:07:c1:ca:92:a6:95:
ac:f8:cf:e5:7d:e2:eb:a7:09:5a:ab:b2:5c:39:b1:
b2:9b:8e:b6:ed:36:69:42:b1:32:03:c1:67:f1:13:
81:ff:7b:17:8a:df:eb:82:76:14:51:28:2e:b5:d1:
12:76:db:0b:e7:00:ad:52:30:ca:25:c7:6c:db:5f:
14:1a:72:02:86:57:d8:03:81:33:e4:35:c5:6f:bf:
32:4a:c2:56:fa:ac:02:5f:0d:76:28:e2:9e:e3:4a:
19:c9:68:39:4e:d3:f4:a1:07:1b:43:66:01:c0:f6:
29:c9:f0:29:26:07:81:93:6b:71:d2:42:de:17:98:
b7:ea:52:66:19:15:c1:b9:36:3c:5c:90:50:be:f1:
89:4f:70:eb:5f:94:f4:03:41:af:13:69:c5:9f:6e:
80:96:dd:db:e0:f2:46:41:af:ce:a6:47:35:f8:fb:
c7:25:8d:99:7d:bd:5d:13:65:95:45:f0:2e:a0:a6:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:68:EE:CC:BF:1A:C3:E9:76:C3:42:3E:7A:D1:BC:51:CA:46:B1:CB
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2a:7c:b6:04:dd:c6:70:4c:8c:74:95:30:d0:84:76:a4:cd:
a2:93:9b:57:16:37:ad:7f:b1:ca:57:13:2f:ef:45:41:63:a2:
51:c7:ae:f4:d6:c3:5c:59:e0:05:8e:53:f3:d0:ba:63:34:a1:
8b:55:1f:d7:56:55:71:67:5a:86:81:bd:23:fc:78:fa:55:5d:
d8:0d:3d:3f:ac:f9:e3:b8:16:fb:aa:dc:9e:6a:a7:d1:e9:d7:
79:e1:86:f2:96:73:2a:17:14:0b:5e:3a:44:96:da:ad:ac:d6:
2b:2b:ee:99:5d:92:8d:51:6d:c4:4b:78:d3:83:fa:c9:b4:5f:
1e:87:9d:d5:9a:a1:fc:94:c6:e3:82:32:4f:03:27:cf:75:ee:
c4:a8:30:62:1a:b0:56:38:cf:51:67:a6:cd:24:f0:17:38:11:
65:fe:84:6d:55:66:a3:3a:8d:4f:e5:1c:da:1e:24:45:21:26:
b2:28:78:ec:56:59:49:59:46:76:ef:4d:c3:34:ce:7e:14:5a:
bf:3c:aa:f3:57:10:16:89:32:52:dc:0e:2e:84:1f:b0:2d:9d:
62:fe:bd:15:06:bd:f2:20:bd:30:09:09:8b:58:c3:d8:3d:05:
54:be:0f:ab:54:f2:0a:fb:d0:9b:3d:bf:92:c5:84:2f:8c:81:
30:11:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:38 2025 by rpki-client