Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: g5bd3tSmEkOoBisxWi2UlS1w30/JjWmmI5/v3wksIr4=
Subject key identifier: 3D:B1:CB:32:E1:71:BB:8D:20:3B:9F:64:D1:5B:84:E2:BA:E5:DB:33
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 0194BC04FA2350E4A23A62BC10BE48FB6D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: HxP8VJwGEGvUNvbrptT4k9jMz/TG2Zz/DQX9S2ErouU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:23:50:e4:a2:3a:62:bc:10:be:48:fb:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=3db1cb32e171bb8d203b9f64d15b84e2bae5db33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:6e:8c:ac:c2:0b:76:83:8d:28:c4:72:67:
90:2b:eb:f5:f0:31:13:f0:b6:db:0c:1d:6f:0d:6f:
27:9a:17:4f:31:ea:4a:aa:00:eb:08:34:b1:09:08:
52:40:33:7c:ce:72:0c:92:4d:22:3e:3d:d5:21:a4:
e3:2f:61:15:18:9b:63:37:86:df:6a:9d:5a:a1:70:
30:53:69:d3:bb:e7:f1:ef:db:fc:0b:c8:4b:3d:1f:
a5:48:7e:c5:41:b1:cf:d9:e5:1f:4b:ee:19:08:e8:
f7:24:a3:11:b0:4d:47:7c:ee:61:b5:1b:88:2f:e1:
a2:fc:39:20:96:6f:26:53:97:b0:ee:89:44:34:71:
07:75:e0:b9:ac:a1:08:93:99:65:50:ec:35:83:6e:
8a:69:29:ee:4d:ff:98:8e:53:d6:ca:f4:45:08:70:
fe:7a:bb:6c:e4:64:f5:9e:7b:06:ce:24:30:ac:01:
ba:a9:8b:f0:c5:85:0e:6c:8a:69:4e:42:71:60:ea:
15:64:4e:c4:b2:f4:61:2e:34:9e:34:8d:2b:f3:dc:
12:23:a9:bf:1c:99:a2:59:27:0f:04:62:4a:fe:ee:
d8:60:81:93:b6:77:e1:98:46:1d:5a:49:3f:dd:14:
c9:79:ef:a8:5c:f3:a6:8f:7f:ff:f3:63:24:a5:df:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:CB:32:E1:71:BB:8D:20:3B:9F:64:D1:5B:84:E2:BA:E5:DB:33
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5f:89:79:4b:1b:26:7a:ff:f3:07:0e:5f:a3:32:70:1d:38:
14:ee:ef:09:65:be:52:19:0b:d1:a7:93:99:87:9c:03:5c:9e:
77:f7:9d:be:de:18:93:b2:f9:af:4c:38:b3:5b:7f:ce:6e:8f:
cb:6b:fb:30:0c:5a:b6:10:ff:2a:ce:3f:0e:00:f1:61:dd:1e:
62:81:da:6e:88:13:b6:73:32:9b:84:28:40:77:9f:f3:03:88:
f3:96:cb:96:6c:bb:18:95:e5:fb:4b:e9:66:5d:8e:54:bd:e3:
fb:95:f2:f1:22:17:b1:72:82:7c:06:99:72:c3:89:80:72:64:
80:5a:67:49:78:0b:d2:70:b2:57:60:0a:08:19:97:d0:a7:63:
48:f3:69:e6:93:03:bd:e4:1a:b1:39:ec:16:98:10:79:44:d7:
f0:3d:4d:0a:5f:9b:0a:21:74:81:4b:53:7a:94:ff:25:20:6d:
1c:b8:91:44:fe:59:79:cc:76:66:27:78:f6:b9:1f:55:29:d3:
5d:75:21:f9:8a:c0:84:00:d1:05:65:9e:ec:bb:24:e4:e6:20:
72:4a:69:db:47:43:ba:ec:5e:96:d8:41:af:86:dc:31:a3:a7:
4c:bc:20:f4:39:14:5d:be:2f:4f:e3:5c:3e:b5:8f:1a:49:69:
fc:04:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:46 2025 by rpki-client