Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: 1Gte73iAAz+ivuGLUsx16d1I68SEa1ulee3CX9oXF1U=
Subject key identifier: B3:18:82:69:54:D7:EC:31:0D:CD:B1:FD:9F:60:FE:28:34:9F:4B:ED
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 0194BD4E779F8EE7D171CB3860D8261A8E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 0181
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: uXPEm+1Koe3Uf94pqXxI4uITbbvSbUiXK1B+3JZoxKU=)
2: OsS2avf_SCsvTL1pRqTL_5n-su8.roa (hash: q2VY8Sbvggao2o4h3H+VtLne6bMzXujw9hwcUuBVuOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:9f:8e:e7:d1:71:cb:38:60:d8:26:1a:8e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=b318826954d7ec310dcdb1fd9f60fe28349f4bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:af:9b:18:44:50:71:62:56:cd:78:b6:43:
67:bc:8c:81:76:5e:9f:24:cc:26:45:5a:11:61:0e:
b0:09:91:37:29:0a:8d:25:f4:20:9d:f7:27:01:7c:
44:4e:cf:ee:00:71:80:eb:a0:c9:56:42:fc:9c:48:
b2:d2:ac:9f:f3:ce:be:67:de:46:9d:da:b9:44:94:
93:05:eb:fa:40:1f:59:d0:d1:44:18:f3:3c:0f:c8:
71:d7:01:98:10:fe:b2:2e:d6:9f:af:18:11:af:38:
20:61:6d:21:b0:35:83:c9:b1:ef:7c:8b:c7:34:07:
51:26:2f:76:e0:ef:8e:5a:d0:86:38:48:f3:02:f6:
44:43:51:6d:8c:64:a3:68:02:ea:04:6e:c4:14:3e:
e1:b0:b0:5d:91:26:7c:b1:7c:74:61:ed:ab:8a:df:
e2:91:bc:b6:a1:60:76:8c:b4:54:60:89:93:bb:80:
1e:ce:4f:71:9d:ee:11:c8:2b:6a:42:a6:f7:66:8e:
df:54:75:0b:81:f5:04:ac:2f:c9:9f:15:a3:1c:f0:
e9:e4:c0:00:70:51:fa:38:9b:b6:1d:b9:0c:00:23:
2f:de:4c:5e:2b:a5:37:ff:e7:75:29:24:d1:a0:cf:
9a:7f:91:7e:f5:ab:a2:f3:9c:2e:12:08:1b:a3:75:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:18:82:69:54:D7:EC:31:0D:CD:B1:FD:9F:60:FE:28:34:9F:4B:ED
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7f:1d:a9:41:16:73:e9:d1:ee:56:73:1c:c1:4b:68:2f:1e:
2b:3d:93:90:d1:d9:c6:ff:1f:d9:39:e1:00:bd:37:ec:bd:cc:
a6:a2:15:e7:4c:a7:c8:c4:bc:a0:e8:01:cf:0f:0d:7e:c5:0f:
b4:f6:74:76:02:a2:85:4e:91:61:e1:e5:1d:fb:ba:be:f3:ff:
c8:9c:a3:25:0a:ee:57:b5:86:6f:6c:e9:91:aa:57:02:11:83:
74:2b:40:8e:1d:b8:01:db:9b:ce:a9:86:78:1a:49:ae:4b:ac:
15:a2:dc:67:a8:03:7e:57:16:d3:fc:b5:28:c1:34:e2:f4:78:
93:13:e1:39:82:c7:96:88:3d:dd:ae:0c:a7:c0:91:7c:16:c3:
c5:45:06:ec:c2:bd:4b:66:69:06:27:1d:dd:38:cb:c3:aa:f2:
94:57:cc:6f:2c:3c:b8:9a:51:19:8c:d9:bb:66:5a:58:26:d8:
85:ae:87:d6:78:b2:55:08:c4:7b:cc:52:28:9e:cb:6c:d9:35:
3e:d0:ff:a0:b1:27:43:4b:41:63:fc:ef:95:8b:b0:0a:53:3b:
2a:6b:dd:5d:d6:db:27:81:a2:1c:c4:6d:16:7b:78:6c:36:26:
68:94:60:22:16:1f:38:e4:88:df:18:1b:10:72:d6:88:82:95:
80:a0:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:49 2025 by rpki-client