Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: RIGVQRUiVl53HExC5blZzaHQMfAk0ecM00XQti2PPY4=
Subject key identifier: 4E:71:67:58:27:AB:F7:D9:FB:E9:91:EF:02:21:5A:03:2B:DC:48:64
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 0194BBCE39B5561515436C0C404C21BFBBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 0DBA
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa (hash: ql/wdfFz1qsER0EkZDThbVWptAlBg9mw+jziuKWlZyc=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: yUHfQZ0/OISeWqkYvXOD3sJpHitt83JZRltSp5jWCY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:b5:56:15:15:43:6c:0c:40:4c:21:bf:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=4e71675827abf7d9fbe991ef02215a032bdc4864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:99:44:7b:f8:ee:9f:9c:6e:78:51:c4:32:
19:b2:f7:60:fe:23:ce:a7:67:7d:de:c7:85:46:49:
d3:4b:a1:46:c7:84:a8:09:bb:0b:52:30:d7:eb:07:
45:89:ec:16:83:67:b1:0b:b8:bf:a0:53:1e:3f:60:
d3:35:59:1c:bd:f3:92:90:df:b4:0d:4d:74:60:e1:
6f:13:3c:09:6e:fe:92:7f:1c:b9:ab:73:15:ff:bd:
2a:6c:75:5c:56:91:cc:2e:90:fd:e7:45:7b:62:eb:
37:41:80:29:cf:f7:27:5a:1f:44:70:f6:8d:e0:ab:
2b:65:42:da:99:82:17:ff:f8:ac:17:2b:b1:4c:c9:
0e:d5:1e:c8:3a:25:1b:fa:c6:73:a8:a6:9c:77:4e:
00:0f:3c:82:0f:5e:41:1d:fb:ed:6d:39:2f:73:2c:
c4:88:64:d9:e7:ee:ea:79:ea:d8:ff:16:ce:51:3b:
0e:2f:f2:27:c1:de:99:ab:f9:a8:a1:a1:06:55:cc:
17:02:3c:53:d1:27:e0:8e:db:d1:33:0d:27:19:c2:
21:2b:c6:4d:95:ea:66:c8:15:10:0f:70:c8:1a:3e:
38:94:87:da:2a:0d:60:06:6d:d9:73:54:da:4a:2d:
66:fa:13:47:23:69:99:25:e9:c2:17:25:ef:5b:9e:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:67:58:27:AB:F7:D9:FB:E9:91:EF:02:21:5A:03:2B:DC:48:64
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:65:c7:6a:81:bd:33:33:de:83:b3:96:59:04:f3:b1:52:6d:
7e:e0:59:dc:92:fe:77:e4:91:c0:65:84:88:6a:07:62:9b:ee:
a4:82:7f:26:0b:a1:f5:aa:dd:57:af:88:08:cc:c1:c2:a0:ab:
aa:71:a7:bb:39:f0:c1:19:96:af:9d:4a:e5:94:b1:2d:fc:8c:
ca:d2:3a:d2:f2:85:2f:b6:5d:7a:ad:56:2a:31:70:c3:11:60:
b0:6b:bf:4e:8b:52:f0:7d:fb:44:68:78:6e:1d:04:b9:cc:be:
f3:4c:27:2b:85:3e:a9:c7:46:ad:1b:49:25:61:e7:3c:51:59:
d1:7f:da:84:95:93:6a:de:21:c0:98:82:22:7c:a4:25:95:e2:
7a:72:20:24:2b:94:44:b9:2e:96:47:fc:24:94:4f:51:61:e6:
61:f8:38:03:51:da:cd:2d:7f:b6:09:bf:f5:8b:a7:f3:e6:f5:
c9:cc:14:54:7e:98:b6:0b:4a:b7:91:3d:14:71:f0:de:90:d9:
b5:c9:3b:f0:92:e8:e9:63:e5:8b:a8:cd:4e:0d:90:e9:c0:8c:
91:00:e0:5b:09:97:3c:e5:88:96:81:d6:09:91:10:56:2b:90:
34:ff:e7:f1:ed:5d:da:cf:7a:d0:c2:3e:bc:ef:62:d0:a0:64:
d7:1d:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:26 2025 by rpki-client