Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
File: kNWCLTx7v3q1QE3aiP2dqSE43iE.mft (raw, json)
Hash identifier: MJ76/fhvIFArIBouczBK2MYf/ez4WVa6AGGyk1Lw/TY=
Subject key identifier: E6:BF:AE:8A:77:31:67:CC:21:9A:C8:3C:EA:BF:F3:B5:C3:65:44:DC
Authority key identifier: 90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
Certificate issuer: /CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Certificate serial: 0194BC3BC4244BDE41FB88B9D74079404168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
Manifest number: 04E7
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: kNWCLTx7v3q1QE3aiP2dqSE43iE.crl (hash: PXVB3VRSOiwo9BOXAMSULDoHblKUtZnnGzhyLWJRy4I=)
2: wd_UoJqlC6X8mKMfS7O-YEGVRuo.roa (hash: xFPdoUnkz2JIkzmQ5taq1hUGjTFKvPuKX93R37CXGQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:24:4b:de:41:fb:88:b9:d7:40:79:40:41:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=e6bfae8a773167cc219ac83ceabff3b5c36544dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:e3:d7:23:fe:7e:01:81:38:92:62:a1:48:
e1:3a:1d:29:b0:98:ab:5a:d7:21:e6:a3:4a:c0:ac:
cc:2c:ac:3a:cb:e0:a6:8e:c3:86:fe:60:75:a6:7f:
ea:45:de:5c:1c:58:b5:5f:5a:0e:44:0a:80:ed:08:
1f:68:5e:91:49:c9:c6:16:21:57:77:f9:7d:e2:9f:
2f:c6:b0:48:7a:27:4b:b9:73:6c:f5:37:ae:4d:4a:
df:18:cf:1e:cd:5d:85:07:1c:a2:e8:4c:f9:4c:01:
b9:84:72:fe:f6:0d:08:93:43:6c:c3:a8:65:1a:db:
79:2c:fb:6a:6d:77:c5:f0:d5:36:17:a2:30:3b:84:
c6:7c:f6:70:78:12:65:28:de:d8:2f:81:e7:79:0a:
b7:06:2a:43:77:ed:ee:5d:fa:88:37:4d:45:9c:4c:
09:5f:9e:9e:5b:c8:d3:cd:4d:e8:8a:27:ed:c3:8c:
44:18:be:29:13:86:26:58:65:1c:39:85:77:eb:26:
43:f7:d4:be:0a:b3:47:8e:46:a8:ec:0c:ef:d1:e2:
a0:9c:4d:58:4a:df:58:35:0a:86:c9:18:2d:d2:41:
30:12:2c:41:de:23:45:d5:c9:9b:90:36:69:20:9b:
ce:bf:47:e9:d8:21:83:ee:34:88:da:51:32:fb:9f:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BF:AE:8A:77:31:67:CC:21:9A:C8:3C:EA:BF:F3:B5:C3:65:44:DC
X509v3 Authority Key Identifier:
keyid:90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1f:01:4b:db:71:d9:23:76:c5:3c:54:03:3c:92:9a:e3:83:
cf:c8:29:62:1c:42:6f:9c:1f:96:12:b8:f9:75:1c:e5:e3:f7:
f7:f3:19:fd:10:7a:43:4c:de:dc:9c:ca:f5:c4:5c:24:9d:c2:
ca:b2:49:3e:69:5f:78:91:30:be:f6:06:ac:7c:c5:e5:c2:ec:
e7:86:59:1a:e7:46:3b:37:fa:29:23:e7:97:c7:e2:07:b0:ba:
77:8d:6f:db:cb:7d:55:9e:03:3c:fd:92:dd:05:fa:e9:3d:d2:
e4:d0:81:d6:3e:79:f2:b6:41:c0:dd:39:cc:65:cd:d7:1f:1a:
e8:d8:86:5d:b7:91:62:4b:e6:bb:c7:3f:1f:87:f5:94:02:f6:
c7:ee:fe:76:50:51:3c:91:04:cd:1b:93:9d:a0:00:4c:1c:a3:
ce:68:ca:2c:ad:74:c0:33:8a:04:78:9a:21:22:39:ef:b1:1f:
04:80:22:45:0f:da:2e:e1:6b:38:7c:a9:94:3a:5f:94:66:e4:
1a:a1:02:b2:43:ce:84:00:e2:83:4b:7d:e0:54:87:e2:2e:3d:
86:15:ba:10:0b:b7:a4:99:cb:e2:76:01:db:5e:52:7e:0f:e8:
66:bc:a7:b3:e9:55:3a:6e:9e:79:d5:f8:20:74:00:69:a6:87:
4c:72:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:02 2025 by rpki-client