Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: 2kWe8P5T/WX/FUji2aZzbSJxedH9xbNNfJOmccohT+A=
Subject key identifier: 2E:21:B4:D1:C5:BF:FA:BF:43:54:89:42:EE:BF:71:93:05:12:88:14
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 0194BCE08D778BAA541204ABAA761A6A139F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0842
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: rGymfQ3cIMHkRKC+V1TvY5cvEnpPpwBFlijsYWiGHBI=)
3: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
4: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8d:77:8b:aa:54:12:04:ab:aa:76:1a:6a:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=2e21b4d1c5bffabf43548942eebf719305128814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:e8:45:da:52:35:2d:d7:df:98:8b:5e:31:
cc:d3:8a:ba:e8:8d:4d:8a:41:79:96:70:a3:89:65:
0b:14:c2:ae:9d:0b:1d:a7:73:04:97:2d:b1:07:9e:
4a:a3:ac:b0:31:07:44:80:53:2e:cd:be:57:d6:92:
9f:4d:6d:f0:42:8d:db:61:98:1f:47:54:2a:56:91:
1b:a3:ce:17:4e:33:91:19:e8:19:2a:03:5a:fa:08:
d7:4c:3a:e3:80:de:8b:65:1d:4d:61:bb:23:5d:81:
a9:21:ba:ae:8e:af:cc:41:b4:bd:6a:64:b2:4e:46:
f2:36:ae:bc:e5:1c:5c:9c:14:c1:f3:0f:1a:6c:71:
b1:9b:05:68:ad:ef:32:f5:b6:f7:9a:bd:5c:d6:64:
86:50:6a:65:d2:d6:cc:5e:7b:fe:c8:c2:88:c1:a6:
7a:58:58:20:07:66:e6:47:d0:83:47:7b:63:eb:65:
05:1e:ab:1e:6e:2f:42:b0:97:89:d6:d8:a2:b2:26:
05:a7:e3:ea:7f:ef:3b:b3:50:f4:03:74:3b:b4:04:
21:61:6f:3e:ce:f1:17:31:e4:27:f9:9b:01:fb:fe:
d2:16:b2:8c:08:63:f0:66:43:30:3a:eb:76:16:64:
9c:00:ad:6b:c9:6e:5d:c3:59:e4:42:b6:d6:6d:e2:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:B4:D1:C5:BF:FA:BF:43:54:89:42:EE:BF:71:93:05:12:88:14
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7e:cc:75:0b:c1:cc:34:9b:dc:e0:b6:73:43:79:37:9e:fe:
c0:b8:48:2c:e3:0c:e1:76:96:b0:ae:f0:3f:91:22:6a:3f:9c:
40:b2:29:cf:9a:f2:6b:58:06:58:7a:8a:40:7c:57:1b:74:5b:
83:d1:dd:70:ec:d4:0f:ab:ba:fc:08:ae:da:34:f1:75:47:2b:
86:d1:80:cd:6f:0f:ef:34:2e:4e:40:f6:f6:d3:9f:79:37:2b:
15:af:d8:e7:34:92:5c:ff:de:9a:04:51:dd:6a:d0:db:9d:78:
97:f7:bf:75:f4:4f:11:61:26:59:67:3f:91:d6:74:aa:58:48:
25:63:83:0d:d8:af:cd:24:12:9a:e6:da:fd:9b:1f:18:68:d5:
a3:65:16:9f:1a:f6:a0:22:f4:46:61:85:87:d5:16:42:eb:a8:
2a:b7:58:17:c7:fe:90:c9:a9:e2:d6:b8:8b:6c:21:7d:a1:ee:
97:b1:65:6e:c7:6e:6c:e4:33:4c:e8:3a:2e:7a:05:35:fb:2d:
38:d4:c8:99:c6:23:f7:31:7f:2b:36:84:d9:2e:b8:0e:03:1e:
eb:1a:07:12:cc:55:cb:ae:a0:41:57:e3:85:67:26:f5:3c:80:
07:2d:f3:8b:57:ab:b7:82:a3:e6:02:e4:6b:96:5f:71:a8:2d:
d5:49:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:54 2025 by rpki-client