Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: DieVg1dbT6y5vax1U6tmkNIlLsNw7Zh49l+mSZn2ZJk=
Subject key identifier: D7:30:C4:41:11:87:C1:B6:B8:EB:1F:CA:58:7D:C0:2E:73:35:24:9F
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0194BCA99EF17424C23B60F99DA8D821A574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: r7EBP1cXKqyF4FK1xION+23FFVkRjeQFnJq2Ppwuakc=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:f1:74:24:c2:3b:60:f9:9d:a8:d8:21:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=d730c4411187c1b6b8eb1fca587dc02e7335249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:25:9d:f7:2c:8e:e8:9d:aa:c1:46:5e:15:
7a:f8:2b:57:12:39:0c:4e:64:1e:d8:f1:c2:1b:65:
23:ab:a1:5a:68:a6:53:b8:71:31:0e:62:e6:fb:12:
23:b1:81:6a:f9:99:4c:13:6c:58:72:b0:6c:a6:34:
11:6e:c8:af:8d:de:45:ef:63:da:01:3e:07:8c:e7:
77:a2:64:16:af:08:f8:13:ca:77:09:fb:08:46:8d:
2c:67:f3:be:21:09:8c:d2:0e:07:bd:d6:43:ad:29:
24:d1:e9:83:45:3b:ed:12:45:0f:7d:7e:cc:ee:e2:
70:24:7b:cf:7c:3a:fd:dd:59:69:0c:7d:25:96:99:
63:96:24:21:fe:04:98:4b:dd:31:e3:1b:d8:da:79:
9b:6e:4a:49:b6:45:3e:ab:e4:54:74:97:c5:56:dc:
c0:f8:90:b9:b4:6b:1d:83:38:48:71:b2:8d:e0:d9:
f7:16:c4:e5:34:ea:91:66:17:a4:c7:a5:fc:55:c0:
4b:b2:fa:ac:5d:74:81:ed:c8:5c:bf:cc:12:05:ef:
74:d2:74:92:91:02:e2:25:0c:e7:71:74:4e:1b:40:
c1:0d:42:70:8e:02:d4:11:e8:8c:83:22:e6:00:cd:
0f:da:36:20:32:8f:a6:c6:3f:73:2f:00:f2:b6:0c:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:C4:41:11:87:C1:B6:B8:EB:1F:CA:58:7D:C0:2E:73:35:24:9F
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:00:94:b5:bc:74:c3:d0:f0:94:71:52:5e:32:16:32:34:41:
b1:51:ad:94:4b:21:80:b2:da:91:11:39:78:be:a0:f5:9c:03:
4f:f5:b0:40:43:6d:8b:67:2a:28:7b:46:78:e1:bc:a7:80:4c:
c5:f2:66:6d:a1:e7:fa:87:6b:35:03:0f:c4:22:1f:a7:74:9b:
75:48:af:52:f5:c3:73:04:40:f7:ec:98:0e:88:19:a1:99:08:
82:7b:f5:6a:0d:0d:a3:80:c2:e3:06:21:88:8a:d7:f8:0d:d0:
c2:e8:79:e8:48:10:68:56:38:3f:ac:5f:be:ea:54:6f:33:b8:
df:35:ef:71:b6:cc:56:36:6e:09:4f:81:1c:ba:ac:f8:56:da:
47:7a:01:53:ca:49:dd:b2:61:1b:0e:9e:89:45:dc:52:47:07:
df:ff:55:4b:5b:cf:89:02:3a:a9:b0:b5:44:d5:d8:c1:56:12:
4d:70:4e:01:45:df:fc:f7:58:d8:7d:67:f0:30:72:49:d3:bc:
5b:95:57:b1:8d:b7:c7:f6:bd:ac:35:f5:7b:56:4a:d6:d2:6a:
1c:09:78:d1:81:8c:6d:53:aa:5e:3a:2a:b8:37:23:d7:71:aa:
2e:c4:28:c3:a7:da:32:54:c3:2d:0b:d7:0e:d0:f7:a0:b6:49:
a6:fe:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:33 2025 by rpki-client