Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: QShL1vw42+0QPwouQviFaMc5ng4te4ohqfuHVkQasXU=
Subject key identifier: 1A:FE:28:50:E4:44:5A:DA:EE:F5:E5:60:F1:62:85:72:43:25:E7:C7
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 0194BBCDB87C7156AB730E475C333BBDA970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1350
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: vLMzbG2aN49eGE58pGILoJ2VIHB3fyJvmwtrgoXTfsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b8:7c:71:56:ab:73:0e:47:5c:33:3b:bd:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=1afe2850e4445adaeef5e560f16285724325e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:1c:2e:a1:b5:31:98:80:88:81:51:5b:bd:
62:7a:7e:27:f8:28:3c:5f:7c:c5:78:03:21:55:f3:
b5:eb:b2:ac:4e:c6:72:98:9b:36:d9:75:56:c8:8a:
6f:1d:b0:74:c2:94:07:58:a2:6b:9b:16:57:01:6d:
9f:74:0b:9a:a9:5c:5e:fa:30:0a:a3:61:18:45:74:
b5:ef:13:bd:d8:05:e7:35:f8:0d:10:40:9d:49:e4:
24:72:a4:9e:1f:3e:83:18:b4:ba:52:a1:47:40:91:
4e:e1:61:60:91:ea:15:9b:f7:66:cf:80:97:32:48:
5d:23:3a:6e:31:fa:23:5c:d9:a5:e3:d2:e8:30:fc:
71:40:fa:d7:e6:57:fb:b3:9a:b2:06:03:cd:3a:9a:
d8:82:99:e3:de:47:be:de:b2:d8:81:ce:b0:e2:f1:
f1:4b:93:61:ab:f0:c9:4f:c6:fd:b5:09:79:44:40:
63:19:86:5e:f0:28:f5:d4:8f:54:33:c7:a9:8f:22:
c0:5e:42:e0:3b:24:f0:8f:b6:bb:ff:86:dc:52:0e:
e4:a6:99:2c:50:e0:54:8d:bc:ba:8c:66:5b:10:01:
8d:5a:ad:66:99:0f:b6:18:18:11:33:18:fd:e6:32:
b4:05:31:a9:60:9a:43:a7:3e:b9:99:26:ca:51:89:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:28:50:E4:44:5A:DA:EE:F5:E5:60:F1:62:85:72:43:25:E7:C7
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ea:11:5c:2f:c8:0f:9e:27:0a:45:57:b0:b3:3f:bb:d2:e7:
5e:7b:ec:07:66:cc:b9:cc:56:9d:4c:09:97:51:19:9b:68:dd:
e9:82:01:73:70:d3:f6:af:65:ab:8c:04:fd:e6:29:f2:ef:09:
b0:21:e0:34:e8:10:88:f4:2b:23:3f:0a:15:41:1b:37:47:af:
72:9c:01:ec:d4:09:95:fa:11:48:cf:84:d0:a1:c3:1b:fa:69:
62:71:6f:46:e6:37:91:98:d0:38:6c:a1:84:28:5d:c3:e4:14:
a6:49:12:36:0f:e8:3f:28:66:e1:41:75:79:ea:71:28:49:6e:
22:4e:09:9a:55:e6:a8:75:c4:16:54:66:88:d1:f5:ac:3b:bb:
35:12:64:9d:a0:21:ce:21:66:6b:da:9f:7c:91:ed:ca:77:df:
83:a5:bb:0f:e0:1f:66:94:7a:b5:4c:e9:2e:b6:38:b3:b9:50:
a7:38:d7:6c:03:51:2c:6a:c4:28:2f:a4:57:4d:b1:bb:4d:99:
8c:ef:de:40:5b:df:22:72:6c:68:ec:d8:0f:db:70:f9:a0:cc:
66:ed:32:06:fe:4c:87:41:73:50:a4:6a:b4:49:7f:3c:18:7c:
38:98:c6:47:e8:b0:ff:0f:e8:91:61:af:b4:d2:77:ba:5c:18:
8c:f2:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:14 2025 by rpki-client