Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: LS4Tggi4SWPu6S1O3nAoFmvzvEKfuwNYDCHUXoYtjCY=
Subject key identifier: 19:02:A6:78:AB:16:B5:FF:41:58:1A:7B:FF:BA:5E:34:8C:7E:7B:D3
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 0194BC3BCF4095AB46D97792198625D7A08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: Oy0uQxoebCB9QHg2BgAawEAwNF1xP4LfLjClWGS6tdA=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:40:95:ab:46:d9:77:92:19:86:25:d7:a0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=1902a678ab16b5ff41581a7bffba5e348c7e7bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:63:d9:05:c0:23:6e:60:05:f6:6d:d3:50:
45:1f:b0:bf:d7:45:fd:9f:ea:ab:4a:ac:ff:7e:00:
cb:5a:be:91:ed:a8:24:29:ab:27:10:43:7f:0f:9e:
22:cd:84:12:e5:c8:b9:60:e2:50:11:8e:80:6c:a9:
eb:fb:ec:ec:98:7f:a1:be:75:13:26:8b:37:9c:4f:
a5:96:95:6c:c3:7e:ab:dc:59:38:0e:47:25:ca:4b:
99:7d:c5:37:5f:c1:82:31:79:a6:2c:fd:e0:7b:05:
8c:d7:9d:7e:71:63:14:3d:8a:c2:b7:fb:00:24:9a:
e4:6d:bc:ae:73:9b:20:a4:48:6a:35:91:7c:79:93:
24:b3:4f:8c:4c:b2:6c:f4:d4:90:6f:24:d7:86:c0:
c2:c5:43:0d:13:3c:61:ec:e1:fc:e0:ca:7f:bd:77:
16:a9:6c:02:68:c7:97:6f:f0:2d:1f:56:8a:c5:6b:
cb:03:b9:f0:89:e0:93:4f:0f:5a:09:ca:e1:62:7c:
65:c0:98:19:7c:ce:d5:40:80:b0:ba:96:ba:89:0c:
77:e8:0a:2b:bd:12:1f:f4:ec:06:6e:3b:a4:8d:47:
26:76:17:ab:fb:d7:c5:99:69:c4:80:3e:55:e5:72:
a6:9e:96:bf:4c:9d:9b:35:87:d5:88:62:44:f1:bd:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:02:A6:78:AB:16:B5:FF:41:58:1A:7B:FF:BA:5E:34:8C:7E:7B:D3
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4b:3d:3f:58:bc:93:ae:27:a0:fa:ee:2f:2f:b9:42:bb:f4:
f5:58:84:00:fb:ce:12:24:9c:35:fa:91:4d:26:2c:b2:a9:5b:
f0:2a:94:ba:eb:1d:35:ed:8a:f4:6b:b1:3d:23:4a:19:bb:c0:
9c:f5:93:6f:e7:9b:30:89:1a:e3:fd:98:ec:c4:67:0c:a6:3a:
65:fe:c5:04:e8:b9:eb:82:88:11:76:f0:a9:63:ad:2e:ab:41:
29:e1:48:f6:22:bb:01:55:fc:c7:c0:07:97:67:95:74:88:29:
97:85:61:5c:53:fd:7d:a3:98:ba:89:e7:4b:20:44:2f:2e:c7:
ae:46:7a:a7:7d:1d:41:d5:3b:e1:f6:93:31:5a:09:77:a2:9f:
10:4b:09:dc:d5:58:91:af:2b:47:1e:1e:8c:14:4b:48:0b:11:
f9:bf:01:96:b2:53:d6:8a:4f:f4:16:92:14:4c:77:13:ea:65:
3a:80:b2:3e:6f:f2:4a:47:8d:75:89:c8:2b:b1:3b:ff:84:d8:
27:4a:f2:c8:e5:ea:ab:ce:8b:7a:ec:3a:b2:f7:64:74:59:c0:
cc:45:c7:71:c3:28:3b:a9:75:c4:16:23:03:04:e0:63:0b:a2:
70:df:52:46:f2:23:5a:dc:1a:7f:4c:ba:fa:0c:0b:90:b1:18:
3b:91:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:04 2025 by rpki-client