Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: qFXDbNR1NSgkIW2oTPdIdVPjegmAluSN74Qp/Jzg78U=
Subject key identifier: 61:14:C3:32:26:F7:73:3B:00:8C:FE:EA:FC:F7:65:3A:53:AF:BB:F7
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 0194BC3C62FF1EB84A9936EB1843AA5B6238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: bTzhaUzrWj9y4/UPuQRatvJDMjCSt/dqWP4R8KUx1hg=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:ff:1e:b8:4a:99:36:eb:18:43:aa:5b:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=6114c33226f7733b008cfeeafcf7653a53afbbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:d4:93:e2:22:88:31:6a:ea:7c:a5:68:f8:
93:f4:ca:2f:0b:27:34:c6:ca:98:b3:e4:da:34:ba:
3f:3d:45:29:b7:18:f5:3d:16:66:f5:3c:4c:c6:a4:
55:25:6a:c9:a0:38:45:b4:8f:58:53:01:8c:bb:99:
2a:60:3d:f6:ec:f4:a6:fc:b2:63:4f:4f:c6:e4:50:
69:8f:04:08:8f:c5:18:34:ba:4e:97:fa:3c:2b:2f:
81:de:67:0d:b6:2b:65:de:1a:b6:8f:e3:ae:8f:f2:
d2:d9:0c:41:b0:1d:6e:86:96:36:d2:b4:73:d7:d0:
92:f9:bd:4a:49:46:8f:91:ad:7e:8e:89:bc:7d:06:
f1:9e:a9:3b:2c:33:78:9e:44:6e:e0:d7:a0:73:39:
07:e9:6f:3b:f6:e4:12:cc:89:58:77:9b:14:45:5b:
79:c1:0d:0c:17:a4:be:00:6c:55:62:0e:0a:6e:86:
5a:00:db:ec:c6:28:a2:08:38:97:96:f9:a4:f6:b9:
0a:42:23:55:a6:7c:21:fd:f0:4b:be:50:1f:bb:02:
a0:09:d2:9a:38:b3:03:2e:c4:82:24:26:23:a8:b8:
dc:df:b4:3e:31:0b:1a:3e:32:8b:d2:0c:24:d2:19:
ee:c3:10:0b:61:51:4e:f7:e9:c4:f5:bd:8a:f2:6d:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:C3:32:26:F7:73:3B:00:8C:FE:EA:FC:F7:65:3A:53:AF:BB:F7
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0d:66:55:83:d5:71:b9:03:62:43:34:2e:d5:9e:a0:e5:70:
d7:4d:05:d9:3b:d0:8e:cc:89:7d:0f:6c:1f:91:fc:f3:b2:d6:
ba:29:10:e9:4d:7d:80:20:26:77:ee:43:eb:15:8a:7e:57:dd:
d4:09:9d:4e:34:0e:9b:a5:95:04:d2:20:c7:9d:6e:62:a4:e5:
98:4c:94:c6:76:54:68:4f:96:32:3e:b2:22:38:99:2f:01:3a:
33:c1:db:fa:06:34:af:83:93:e3:a2:5e:44:60:59:b8:4d:e8:
80:19:7f:05:8c:74:a2:18:70:be:f8:5b:59:df:3a:16:94:2d:
2a:c8:36:cb:97:bd:f7:9c:f8:79:f5:d5:83:80:ad:50:38:09:
d6:13:ae:ad:e8:2b:45:f4:ed:0b:02:4c:59:62:eb:c0:a3:72:
b8:39:e9:cf:f6:8e:af:97:b7:0a:c3:8c:a0:94:e3:5b:7d:81:
bd:fb:dc:26:2b:76:2d:c4:11:bc:3a:1c:30:cb:f6:1d:f4:dc:
6b:e9:58:e5:7b:1d:91:cc:ae:78:2d:ba:0b:5e:e2:6b:db:e2:
f9:0e:1d:b7:a1:1c:09:92:b6:f1:79:7e:86:6b:67:c0:ed:4e:
eb:ea:5e:f4:2c:62:1b:14:37:c5:28:f5:46:1f:22:9c:f3:0f:
40:7e:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:43 2025 by rpki-client