Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: xAKJQkv17xNodo43AFZKZ4DidEmjQTixIUGDaU7WRmM=
Subject key identifier: FB:20:57:D1:06:8E:7E:7F:62:01:0A:F7:CA:A8:BE:B7:10:4D:60:A3
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0194BC3BE82CB48B5A57E9DD940E30CFB19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: sUElMs9GBEDYStb2JLCrwryLCKzUixZte13u7JUHN2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:2c:b4:8b:5a:57:e9:dd:94:0e:30:cf:b1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=fb2057d1068e7e7f62010af7caa8beb7104d60a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:87:d4:a1:44:ad:67:65:87:80:6a:22:dc:
0b:b3:8d:ec:c5:0f:67:2e:cf:2b:bd:62:7e:85:e5:
db:1a:f8:1b:65:32:41:c8:34:93:2b:cc:fa:65:a5:
3f:e1:19:07:44:ad:dc:c0:b7:6e:f4:5a:17:f9:7f:
06:26:f1:45:c4:aa:84:e0:04:73:6f:2d:9b:d6:07:
36:6d:fc:fa:40:c8:a3:82:12:eb:d7:d0:7e:b2:7c:
9b:98:db:a1:f9:25:59:ad:19:b9:59:85:56:d4:9f:
59:25:c1:20:1d:c5:b3:5e:45:c9:6e:83:81:1d:92:
68:76:dc:8c:ae:b1:ef:e5:a2:51:5d:71:e0:0a:56:
8a:a7:a9:15:3e:49:28:d1:38:f0:13:b6:b9:07:30:
e0:69:a2:71:81:3b:ea:46:0e:ed:90:5b:68:57:c1:
4a:9e:f8:3e:b8:eb:6f:ed:b9:2c:46:13:0a:2e:9e:
6e:78:12:c6:b2:9e:7f:6e:35:4d:3a:72:e6:0d:52:
51:6e:17:d9:9b:7b:c2:58:ec:78:49:bf:c9:cb:0d:
99:19:d1:65:4d:1c:86:83:a8:f5:6b:c7:b0:36:ae:
f3:60:5f:a3:ac:7c:b2:06:59:49:7c:db:c2:41:47:
6a:80:64:e6:ef:64:f7:d3:e6:5a:4f:f7:cc:01:ed:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:57:D1:06:8E:7E:7F:62:01:0A:F7:CA:A8:BE:B7:10:4D:60:A3
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a2:40:02:72:9b:ad:b9:9f:f7:cb:87:6d:8e:1f:2f:cd:3d:
ce:f6:c8:89:04:5b:53:8f:9d:f2:95:eb:b3:f7:30:cb:8e:8b:
99:24:03:39:dd:08:0a:71:d1:f8:e6:4f:fb:16:1c:ce:db:51:
0c:55:73:0d:8b:b2:09:ca:e4:a8:c3:73:be:4c:56:65:da:69:
6b:3c:5e:b1:6a:8f:97:02:b9:98:e2:ab:21:f0:01:ee:f4:9e:
7f:39:73:e8:bd:a7:24:6c:ad:0c:b7:81:a6:3b:8e:12:d3:df:
d9:80:09:53:17:16:ac:27:af:e5:05:7f:9c:35:4e:94:06:1d:
1c:6e:c3:cc:2b:a1:56:fb:5b:39:fe:e2:fa:1a:37:30:5d:87:
d9:3f:2b:6c:79:e7:dd:37:ea:27:3b:c4:d6:71:5f:7a:f8:4e:
cc:be:03:0f:95:0a:2d:12:30:b6:79:cc:6c:bd:20:49:3c:e4:
5b:24:61:65:ff:aa:cf:ce:f1:e4:c2:58:e0:f0:a1:02:55:67:
8b:26:c3:3f:bc:64:f3:03:fa:be:6d:b8:b0:1d:46:f0:f8:17:
06:dd:e1:d4:ea:62:48:94:d8:a6:2f:da:12:e3:f0:0b:45:9e:
47:ab:7e:04:b7:76:89:17:b7:aa:84:e9:6f:4b:24:f6:b7:0f:
83:ad:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:52 2025 by rpki-client