Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json)
Hash identifier: B8BTUKsL74EFGKLm53DMcC2oLlvWBBm7mGPjDztC0/M=
Subject key identifier: 40:68:85:CA:52:8F:7E:8C:DC:C6:91:A7:FF:5D:81:69:DD:C9:7B:DC
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial: 0194BC3BF41DAA771DEE34A40F394C950957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
Manifest number: 02D3
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 9BLDEYYfsffNxOST_G3WnWk3RLA.roa (hash: MbxghGhOd7fIdjWxFjFEtI5ZuPSJHWi+9N5XupuxNmk=)
2: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: 1TQQP7Qhp/QvmGO7cC4pSQqu6U799ZZlVw+F/NxBE30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:1d:aa:77:1d:ee:34:a4:0f:39:4c:95:09:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=406885ca528f7e8cdcc691a7ff5d8169ddc97bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:fb:66:8f:05:98:fe:02:f1:b5:3f:e8:c7:
ae:8a:1b:da:bc:f6:ee:ff:7a:e8:91:1c:51:9e:5e:
38:18:83:c0:7b:44:3f:db:22:9d:49:2b:10:0d:c5:
0e:3d:d8:fc:b9:3e:d6:2b:90:de:3a:83:51:b9:80:
96:ba:dd:f1:c7:76:b5:5a:70:e2:2d:6a:d2:f7:e2:
d5:a8:e0:ce:e2:2e:63:e4:00:d2:70:f7:07:6d:3c:
89:95:55:6a:ae:ce:b7:a8:b2:05:7f:ac:41:02:70:
a6:9b:1d:d7:16:91:81:c0:00:bf:85:78:8d:77:fb:
10:eb:25:40:a7:5f:6d:39:98:e2:27:c5:87:2e:6f:
df:43:c8:1d:c4:e3:83:76:f2:65:23:f0:d7:a3:60:
bc:19:9b:e6:3b:2b:c4:10:9b:9c:6a:98:e9:85:11:
66:21:26:1d:36:08:46:e3:32:33:d9:94:14:72:c0:
24:86:54:b8:e1:7a:48:d6:7d:5a:34:ff:a7:28:04:
20:10:68:7a:9e:58:bd:1c:c4:b3:52:83:67:dc:68:
46:ea:42:e7:ca:d3:30:6e:76:2d:06:f9:55:df:be:
c1:96:93:5f:e8:cf:6a:db:db:99:2f:3f:84:34:fc:
11:0a:63:6c:03:ca:71:81:f2:98:29:54:80:59:f5:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:85:CA:52:8F:7E:8C:DC:C6:91:A7:FF:5D:81:69:DD:C9:7B:DC
X509v3 Authority Key Identifier:
keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:46:96:14:f9:c7:8d:02:70:c5:7b:b0:78:a4:1e:dd:7b:d0:
10:84:4c:76:9e:72:24:c3:a4:3e:26:8c:93:ee:54:01:cf:db:
2b:37:72:b8:f0:e5:7b:44:cc:e2:04:8b:0d:d5:d4:f4:18:ca:
dd:0c:68:24:30:23:db:02:0b:ce:94:fd:46:6e:cb:90:b3:2c:
f0:30:fa:be:8d:33:45:db:07:78:b7:31:07:bf:21:51:5f:6d:
97:9b:de:1a:50:51:73:4f:b5:a5:16:c5:99:8c:e5:22:42:af:
49:d3:96:89:6f:1e:cb:b4:51:ba:70:fa:9b:b1:db:29:02:0c:
a4:4e:2c:9a:1c:61:1a:ed:9c:d7:a8:1d:17:d6:b0:5e:7b:e5:
e6:5b:19:2e:8e:e7:dd:d6:bc:fb:b1:ef:ec:c3:a6:9d:c0:f8:
d4:c1:2c:fd:43:bd:48:4a:8e:d7:4e:16:cd:4c:82:79:c5:32:
a1:2d:d3:e7:f1:61:1e:52:f8:77:44:1a:a6:ae:eb:94:c2:ec:
9f:b4:8f:2c:ac:48:d4:1b:be:2f:fa:03:ed:71:58:86:c0:f5:
69:59:0d:f2:8e:a8:28:6e:20:28:29:86:7c:1e:93:71:3f:55:
dd:29:56:63:ed:38:fc:27:c0:c9:52:21:dc:f0:19:b1:3c:19:
f4:de:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:37 2025 by rpki-client