Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: oHyw7+Out+5gIfHDl+VGi65qiGJCl3b2EieFUh0mesE=
Subject key identifier: A4:2D:58:CD:2F:AF:3F:AC:74:D7:83:7F:32:0C:17:46:7F:4B:3A:C5
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 0194BBCE2DCA3ABD7F9F3DEA5FCC08C5C872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: vvp9rj6Q3SAZUm5f8r0svnaR3b0DokETlF/dp6RMGpM=)
2: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2d:ca:3a:bd:7f:9f:3d:ea:5f:cc:08:c5:c8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=a42d58cd2faf3fac74d7837f320c17467f4b3ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:7a:9b:ee:51:58:44:35:79:a3:d6:d1:b7:
51:f7:f9:7e:1a:97:0f:13:1f:ed:6a:d8:43:8c:98:
ae:57:97:e7:10:41:a3:76:d3:9d:9e:8a:ab:01:88:
65:a5:c2:10:f5:39:99:b8:05:db:55:06:33:23:3a:
a6:cf:fe:4f:c3:e1:f6:37:af:99:5e:6b:c7:09:87:
37:cc:4a:c3:46:0d:4d:39:dd:0b:5c:8d:21:59:a0:
55:f8:f7:21:dd:1f:96:41:40:df:16:b1:1b:fa:75:
67:fc:bb:8b:5c:51:c9:e2:fe:8a:df:2a:01:2b:2e:
66:62:bc:c1:06:c3:97:ec:f8:85:b6:1b:65:20:15:
7d:ab:45:0e:93:fd:52:51:04:3f:ab:be:6c:e4:96:
6b:b3:04:80:28:2c:3e:40:f3:cc:74:be:57:c7:31:
61:2f:77:fe:36:cb:f4:9a:c5:bf:e3:d6:0f:ae:68:
10:0e:d3:b8:6c:76:f1:62:ab:99:9c:48:c7:c3:6e:
af:a6:b8:cd:41:ad:8f:35:65:f4:75:2a:1d:80:71:
e7:b3:d6:78:f1:de:84:bd:06:93:4f:10:a0:6a:68:
29:c6:c1:66:0d:67:83:4b:c5:54:98:27:04:9e:8e:
9f:81:4e:63:7f:07:aa:32:3b:f4:60:2a:c0:7c:6c:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2D:58:CD:2F:AF:3F:AC:74:D7:83:7F:32:0C:17:46:7F:4B:3A:C5
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:2b:cf:b3:f2:03:3a:e4:a4:f4:7a:ab:67:2d:cd:67:dc:
9e:96:42:19:65:60:5c:99:bd:e6:f0:7d:75:7b:bf:e2:65:eb:
27:9a:ba:07:3f:9a:72:f8:de:e4:26:02:bf:73:55:80:dd:6c:
1e:96:26:21:12:b5:b0:b9:e0:b0:c3:bd:06:47:c8:fc:55:4b:
69:ad:80:82:f0:0f:26:f1:90:e3:81:f1:8e:de:17:4f:f6:d3:
9c:4f:d5:a9:06:28:19:86:11:10:f2:05:3b:21:9c:bb:af:bf:
3e:83:16:8e:e6:a1:bb:ef:83:65:58:53:89:7b:0e:1d:36:e2:
40:12:ce:1f:54:df:cc:e1:4b:dc:bc:b0:84:ef:59:4f:11:62:
0c:65:0a:03:8d:6a:c0:09:51:0a:53:af:fd:3d:ec:73:15:9e:
f0:0f:ec:dc:b4:69:74:dc:e3:14:29:45:b7:a2:3c:62:87:f8:
a9:4f:25:7b:2d:87:ee:95:08:98:d7:54:25:ea:f3:3f:e0:d9:
f7:5c:c6:0d:9b:5d:fd:cb:e1:ee:8d:4b:01:74:56:21:a5:d6:
9f:6e:ab:a6:34:6a:58:2d:21:37:37:c3:4f:5c:14:14:25:f9:
b5:54:24:d9:16:44:af:2b:64:c4:f5:fa:80:12:a1:93:6e:fe:
2c:61:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:18 2025 by rpki-client