Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: rLLctzXaXHCTifwXySEYQd0/RjpVPR9CwBUxWr9BZBE=
Subject key identifier: 08:E4:A3:61:B8:FC:18:48:07:2A:88:FE:C0:A4:B9:BB:5A:41:58:D9
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0194BC050E748B46F5F08641BA2D47F4685C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 12AF
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: ASEYXVlqtHD1EDLmtq-yC9BOeCA.roa (hash: EjwRPmD+rHr0f+puV91C0/j6pDS/D+ErmmFfBSXrNls=)
2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: xSCkQm7s9Kn1gUjQWP3sQRt5rE10zH4e1imqYgaQeGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:74:8b:46:f5:f0:86:41:ba:2d:47:f4:68:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=08e4a361b8fc1848072a88fec0a4b9bb5a4158d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:57:ab:64:f3:b6:ed:24:a9:0e:be:65:b5:
bf:4d:ed:48:cd:52:ee:8e:e8:5a:99:ad:d6:06:13:
86:be:fc:f8:07:cb:47:7b:43:96:cf:66:9a:c1:11:
55:c1:65:f3:d7:f2:fa:c3:73:a4:b8:3f:c7:93:73:
e7:38:60:70:90:20:e3:c2:fd:14:6e:cb:45:7b:72:
bc:9c:72:2a:a2:5a:c4:f0:e5:a6:ac:bb:85:a9:4a:
14:ab:9a:60:0d:9b:b3:31:64:a5:f3:5a:b6:3b:28:
86:f5:77:1b:e6:6c:40:b2:2e:9d:c6:6f:12:4b:6b:
8e:75:49:71:38:f4:cb:3c:0d:40:63:9a:f2:89:fe:
6a:db:30:47:a7:18:a8:0e:2e:6d:c3:0d:6a:9a:90:
93:a5:14:43:9a:00:b9:2d:6a:cc:02:eb:69:a6:91:
08:21:76:eb:49:29:10:6a:01:69:4c:34:c9:f6:5c:
96:db:54:ed:c8:0c:4e:6c:29:ad:e0:bc:6c:71:29:
94:bb:3e:ac:83:04:7d:27:d3:ac:af:6c:fd:69:bc:
48:75:bc:d0:c6:b3:3f:2d:7c:37:f1:95:cf:7a:bb:
af:f8:5e:0c:79:a7:d3:f2:c9:d1:cc:b6:9d:ec:71:
85:34:67:b0:58:37:43:ad:1a:7b:0a:9b:c4:21:b5:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E4:A3:61:B8:FC:18:48:07:2A:88:FE:C0:A4:B9:BB:5A:41:58:D9
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b3:66:d9:8c:ff:97:60:89:bf:b6:db:b2:de:84:fa:ac:d9:
2a:64:6c:30:ff:e4:9e:7c:e4:5d:83:33:e1:a9:ba:5f:66:a3:
7c:d1:b7:88:fc:ee:da:4f:86:3f:3f:72:3d:64:0e:01:b6:2d:
30:6c:15:c3:64:b3:ce:5d:75:0f:f5:56:19:df:13:b9:e3:39:
56:19:c1:5f:a3:18:14:dc:e2:d6:e9:a8:4d:e3:e1:99:d4:1a:
9a:66:1a:38:69:9e:94:18:5c:ee:f1:7a:ad:2d:38:4d:71:9d:
de:93:de:82:1d:c6:39:bd:28:3e:c1:5a:e8:80:05:e2:16:1c:
9d:e5:3b:cf:2c:37:bd:99:ba:a0:42:2e:f0:04:b2:8e:a0:1f:
15:c1:15:e0:44:a3:85:86:d6:80:c7:8f:5a:17:54:8b:20:32:
87:e2:f6:6b:26:eb:57:df:fe:1e:a2:fa:bd:37:23:fb:75:34:
68:51:49:f4:ac:06:ab:f3:69:17:58:b6:d2:23:1a:68:96:3a:
57:25:a3:c2:47:ef:d8:26:e9:31:7d:86:a7:11:5f:2e:6f:1e:
75:df:85:ed:59:7b:60:bf:ee:46:90:ec:06:ff:7b:da:98:4f:
7f:29:16:f6:18:44:7a:30:45:e5:9e:7f:1d:82:5c:46:94:c2:
e5:39:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:01 2025 by rpki-client