Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: JNUHaTZ5E8MB3/22QdHbFY2ojMUXUI+8EPeEEujDFNA=
Subject key identifier: 1B:C5:B1:1D:A4:71:A4:D6:D0:F9:1E:DA:C1:81:83:44:18:EB:9B:0B
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 0194BD4E84FA7AAB48C7C7B57B10935C76BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 1176
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: ujqPWPJ1D28w5EtpYTKKieKQ7H5AdjDDWYKi2vGt3tI=)
4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:fa:7a:ab:48:c7:c7:b5:7b:10:93:5c:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=1bc5b11da471a4d6d0f91edac181834418eb9b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:b2:88:fe:b0:da:81:c2:5c:25:c2:f8:11:
25:be:71:19:d9:bb:c8:67:81:d2:89:c6:12:25:5d:
65:a7:c9:38:18:93:4f:e4:43:f4:b5:64:09:65:c1:
b2:d7:0f:0e:9b:d2:f5:dc:3c:ec:0d:b6:92:1b:8b:
71:3e:d3:f1:e5:e9:25:b2:9c:86:40:cd:09:56:10:
c6:5a:5a:a3:43:cc:40:a4:90:1f:8e:20:d6:69:db:
c3:80:13:e5:bc:85:52:91:05:56:af:65:73:75:5d:
1c:33:6d:10:ed:03:eb:78:bd:f2:b4:d3:a8:1b:29:
7a:83:36:2c:9b:be:81:4a:14:0f:ca:d4:60:61:f5:
86:f4:2f:68:90:74:ec:ef:d3:f5:42:1c:45:11:e0:
a1:a1:aa:4f:79:19:fe:d3:58:7e:bf:d0:54:ad:74:
57:4f:20:80:ed:6e:bd:6b:e2:bb:0a:0f:60:88:cd:
7f:68:ec:0b:4f:98:fe:4a:c7:89:64:6e:0b:5d:df:
e9:21:e2:12:32:9b:ea:d0:af:d8:66:a5:c3:98:1c:
3e:93:cb:81:16:44:37:59:d3:b7:a2:06:ad:9d:ac:
3f:35:49:ad:75:5c:d6:73:e9:be:4d:ae:28:07:a5:
c2:7d:d4:f9:5c:c2:fc:32:c2:87:d4:81:bc:e3:af:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:B1:1D:A4:71:A4:D6:D0:F9:1E:DA:C1:81:83:44:18:EB:9B:0B
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:08:21:6c:7f:ab:88:9d:c0:62:64:1c:d9:a8:12:6b:77:8c:
35:67:c4:74:94:2c:30:96:3f:4a:45:95:5a:ee:b2:b4:0e:fc:
1e:49:12:f9:2b:87:e4:35:5e:3d:40:77:48:62:d2:16:37:8b:
5d:5a:06:48:8f:f2:c2:eb:af:77:ab:b8:9d:f6:e7:45:c4:c6:
47:d6:a4:e4:f7:bd:64:fb:0b:a3:5c:9b:2d:52:b9:b8:c8:c1:
1b:a6:70:f3:c7:3a:6b:41:ed:12:2f:35:11:ea:a3:8e:3f:58:
b3:ed:6f:79:bf:6b:85:9a:19:eb:ba:ac:9c:f5:80:4d:fd:30:
ee:ab:5a:d1:2e:fa:b6:d6:c0:b6:35:41:f4:1b:1d:54:b3:3e:
33:6f:e7:f5:fd:8f:80:2a:b9:7b:c4:4f:1a:ad:41:41:fb:41:
a3:df:d4:51:19:ef:bb:b7:47:5b:c4:e3:33:bc:3b:b3:d5:59:
fd:ce:27:09:1e:fa:98:d1:dc:bf:a5:23:a8:c5:a3:e8:1b:5f:
66:bf:aa:28:80:7a:10:69:f4:47:ca:5a:1a:d2:3a:e9:c0:67:
61:62:7a:25:3a:fa:29:62:5d:a5:77:11:c9:9d:a0:b9:80:76:
c9:42:e7:8d:32:ec:ef:72:c7:ea:d3:86:88:f4:1e:13:66:a9:
de:26:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:05 2025 by rpki-client