Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: Mxk5AQr0+zPY9qGAEqdz83zVjuW3eQEo5G8uUp0EBoc=
Subject key identifier: EF:79:69:FA:44:80:6E:C4:FC:F8:A6:F7:94:92:5D:50:CF:27:68:E0
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0194BCE06F132FC31C0123DE95A9FD589E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 02F3
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: EjRAiql/17PS1hlsyrqzHWfiU4zEwWKlT1e5paQBelI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6f:13:2f:c3:1c:01:23:de:95:a9:fd:58:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=ef7969fa44806ec4fcf8a6f794925d50cf2768e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:e5:60:2d:0f:2b:0d:90:fa:1c:9f:10:f9:
15:52:41:5d:49:36:ed:75:83:32:95:8a:28:6f:a4:
a4:2d:86:dd:91:ad:de:ec:ab:3f:a9:58:62:03:4f:
d8:a6:48:b7:12:9f:b7:95:71:f4:d5:9c:e2:24:f0:
36:18:d6:c3:b3:b3:92:35:a3:46:c0:0e:be:75:fb:
a2:9e:52:e8:b7:45:ac:40:29:55:a1:a9:0b:5f:f7:
71:1f:bd:9c:f4:87:60:ed:db:a0:37:03:ef:bd:29:
2e:b5:28:61:3f:0a:1e:05:72:84:db:3b:f9:0d:9e:
13:b6:8c:b4:b1:d7:9c:8d:5f:66:54:9a:a3:16:17:
56:f3:17:4d:4b:5e:8d:6d:59:67:54:8c:3d:a7:c1:
38:b2:ee:bf:72:31:f9:91:4b:45:54:37:56:1c:d6:
e0:5c:c5:27:ed:db:4e:e8:02:8d:e2:9c:26:66:05:
fd:6f:37:a7:62:e1:09:8a:2e:dc:b7:74:6a:41:7b:
cf:60:4f:dd:f1:4e:ba:22:14:03:8d:cb:da:d0:c2:
81:36:17:16:81:5e:28:d1:39:94:eb:f6:86:6b:5a:
dd:34:5b:bb:7b:fa:ca:cf:cc:b0:db:29:cb:df:00:
59:31:78:49:93:2d:3b:e5:52:31:c7:99:18:10:ea:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:69:FA:44:80:6E:C4:FC:F8:A6:F7:94:92:5D:50:CF:27:68:E0
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:43:dc:5a:65:e1:d6:88:47:2b:fc:c6:8a:cb:55:08:d5:
0a:4e:bf:17:34:d0:12:b1:07:70:d1:4f:dc:4d:14:31:0f:3e:
a2:7b:0b:71:7e:f8:fa:90:28:e0:30:53:7e:f1:1f:c7:74:a8:
66:5b:91:79:7d:2c:c2:6d:e3:04:9e:f1:b6:10:21:86:88:96:
1a:56:82:f0:54:be:06:c5:68:3f:c2:69:34:e5:c4:4c:27:47:
4a:30:6c:bb:c1:1d:5a:5e:3a:97:ef:7c:5a:e1:01:4e:cc:38:
fc:5c:20:2f:05:87:7b:bb:9f:c8:72:69:0c:92:94:b3:de:9a:
18:96:e1:ef:8a:ac:58:d1:7a:73:b2:5c:32:a3:15:d2:84:ab:
01:8a:1a:1e:a1:e7:62:fe:24:56:85:52:b4:0d:1a:ce:fb:66:
c5:a5:48:63:db:42:4c:08:a2:5f:c5:38:6a:2c:6b:a0:6c:32:
6d:45:79:e0:85:22:c5:ad:5b:66:80:2d:27:1c:23:c9:36:d9:
fb:5a:1a:ed:8b:bf:a0:68:1e:38:bc:78:d2:11:51:1f:9b:7b:
ae:76:9c:76:26:1a:40:b3:ce:70:da:8f:2e:fa:d8:35:03:1b:
4a:12:61:f7:3c:0c:6c:e8:8d:ac:6d:26:9c:47:ed:b4:63:73:
9b:43:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:47 2025 by rpki-client