Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: /PsBww9uO/CotVoLNRa4VrfmjHn5m56h3ZESOcqTfrg=
Subject key identifier: 11:5D:68:BD:67:85:6F:2D:2F:88:5B:3E:37:F1:45:C7:6F:98:71:57
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 0194BCA97B28548AC725F5F1C9198758D7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0C39
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: 3Xouk+VG+kjfQS6rTL7yU0xgWY9/YmhVxkx5yWdqQxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:28:54:8a:c7:25:f5:f1:c9:19:87:58:d7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=115d68bd67856f2d2f885b3e37f145c76f987157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:43:0d:20:53:35:01:51:7a:4d:3f:7f:bc:
d2:95:f7:7e:bf:bd:41:7f:f6:2d:c9:9e:ab:98:df:
91:e5:21:ac:cd:56:d2:b5:9f:4e:65:ca:fd:c6:42:
0c:19:a2:26:8e:99:65:98:61:a3:14:1f:fe:82:03:
5a:46:1c:34:76:4c:e6:70:ae:3d:2c:fb:c9:df:cc:
1e:fc:c5:32:a3:82:2c:8f:c6:ef:ac:f1:96:84:24:
05:cd:2b:ba:d3:8e:cb:e1:35:0f:cb:08:dc:a4:0c:
1d:b7:b1:b3:33:df:ec:95:a7:08:2a:8a:7e:48:fa:
c4:eb:6c:a1:1c:73:85:d0:c3:df:ce:0a:9f:8d:df:
d8:b5:3b:d1:90:68:6e:83:c5:0c:6e:c6:84:ef:c7:
89:e9:f1:34:63:18:04:d1:79:00:df:21:b5:ba:05:
9c:da:5a:80:3c:94:dd:61:fa:65:63:1f:04:f6:de:
99:a0:19:d6:c6:7a:e9:75:1b:d7:f8:f4:00:2c:52:
0c:a2:6a:a4:b9:00:83:89:ab:9d:3f:5d:39:53:4a:
58:90:52:8d:02:c8:ab:f3:43:78:29:32:11:7b:4e:
23:9b:43:73:da:ab:77:57:ff:7d:1b:58:7f:54:ca:
d2:65:1d:01:1b:30:c2:02:92:c3:c9:40:25:00:99:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5D:68:BD:67:85:6F:2D:2F:88:5B:3E:37:F1:45:C7:6F:98:71:57
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:bb:0f:38:59:39:6e:39:24:b9:2f:63:81:4b:cc:4e:24:
0a:c8:93:17:b0:d5:fa:11:9d:8b:01:0c:7f:d5:55:c6:25:90:
ca:61:ef:34:dd:30:86:91:e0:18:a1:14:6f:47:3a:0a:c2:53:
bc:bb:54:c0:70:84:21:a8:a3:29:e8:93:47:f9:b3:87:4a:d8:
8c:96:fa:72:a8:5e:89:e9:2b:88:37:88:3c:e4:a6:1b:5f:08:
34:54:4a:06:cb:2d:a5:ed:bc:e0:c9:0a:85:93:37:8b:c7:04:
f4:12:7a:43:2b:e9:37:b6:a8:88:08:fa:67:80:1a:a9:a2:16:
60:c5:98:c9:86:dc:df:d9:da:3e:75:00:c7:6e:bc:4c:53:b0:
b9:6f:af:f6:a7:2b:f9:b4:fd:67:b8:62:fe:d1:9e:de:5a:b0:
e7:d3:c4:ce:d1:6a:e2:b4:1c:28:1c:36:c1:ed:d8:8e:d2:46:
c1:f7:00:ad:23:8b:fe:4f:da:a0:25:93:d4:a6:c8:30:db:7c:
2f:82:c7:88:81:dc:3f:e2:3e:fc:7f:63:fe:12:df:4f:5c:2d:
32:13:36:96:d5:b4:56:4c:54:50:0d:db:e8:d7:2d:42:04:c1:
6d:49:88:91:54:1f:50:91:fd:41:a9:a6:69:26:e2:3a:ae:08:
ed:a6:1c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:45 2025 by rpki-client