
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: HHdBqQ66RT+w5my70i0Bi4UPaeHp7VAksMfOmESblIE=
Subject key identifier: AD:EB:24:58:97:76:CC:32:C9:BE:3E:6D:5E:6B:2A:A9:E5:01:43:52
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 0194BCAA106A2FE0AC829BE28BF737B8D628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: +fpvFDT2TamOTDG/93uiztOyoF+rG5+H43VE8trJLCI=)
4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:6a:2f:e0:ac:82:9b:e2:8b:f7:37:b8:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=adeb24589776cc32c9be3e6d5e6b2aa9e5014352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:4b:c3:63:cb:8b:e6:68:18:fa:21:ad:4c:
a6:77:19:9e:25:c4:3e:fe:70:b4:8b:04:d6:e1:70:
9b:80:4d:cc:e7:5b:a2:cc:87:2d:e2:c2:0f:3b:b9:
c5:66:57:a1:a0:f8:25:3a:ef:ce:ef:49:95:e9:79:
c4:66:88:b0:00:a2:3e:76:ab:ab:b7:c2:0f:8a:16:
67:e8:e8:ad:8c:07:13:de:8b:e5:59:da:50:7a:ca:
1e:f8:6f:0d:9d:c8:6b:7d:3a:b8:35:74:81:35:16:
41:04:c3:16:f8:07:24:af:75:36:70:77:18:80:02:
fa:4c:b4:31:15:73:02:91:33:b6:86:5d:37:9a:95:
ae:f1:c8:46:f3:93:5b:e4:d5:76:89:67:fd:4f:b7:
f8:5a:86:c2:d5:69:8f:11:58:a2:e2:af:8a:78:d6:
73:ab:10:2f:be:a9:b1:1e:96:92:71:a5:84:16:ea:
11:d6:db:2e:30:00:31:3b:76:4c:46:08:a5:63:d1:
70:69:b4:4f:ae:06:c2:ff:40:a8:29:24:ef:83:d4:
37:74:e3:e0:58:a8:9d:55:f9:f0:d7:e0:c9:b0:4f:
0c:01:a8:d7:90:c3:78:93:84:ac:99:00:13:6b:35:
e6:33:99:0b:a1:d1:5d:ad:db:48:2a:10:ae:6f:2c:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:24:58:97:76:CC:32:C9:BE:3E:6D:5E:6B:2A:A9:E5:01:43:52
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f8:e2:b5:df:5c:45:1b:b8:55:aa:1a:97:59:28:39:38:00:
4d:cc:0e:3c:15:42:9d:1f:5e:12:88:ff:7d:23:3e:07:47:04:
f1:9b:52:0a:2b:82:14:b2:1e:87:c3:fe:92:f3:b5:b6:1d:83:
c0:55:6b:54:6b:3d:6b:cd:47:13:85:e7:d4:a0:b3:7f:35:e4:
06:cb:18:e3:a5:88:dd:0c:99:6c:70:df:99:33:ee:80:bb:a5:
3a:4f:40:b2:e4:5f:dc:da:1d:c5:4c:c2:15:f2:71:19:41:2f:
99:5d:4b:e4:cd:49:a3:56:f5:44:8d:30:73:a9:91:2e:c9:29:
c6:b6:22:9f:47:d0:56:fc:88:c2:23:c4:b6:87:54:c0:f7:86:
7e:26:97:da:55:28:6d:ff:7e:84:c2:5e:b6:3c:04:0a:8a:cd:
ac:ea:3c:05:d2:38:00:ee:60:b5:e4:58:2a:b8:1b:ee:d5:f7:
a1:59:02:fe:a4:9e:92:83:61:63:f2:c1:87:31:94:1a:a2:5b:
b6:de:bd:f1:19:9e:47:78:2a:de:e3:60:f1:19:5a:01:18:2d:
18:56:40:24:e0:19:e6:e1:9d:a3:98:f6:5e:cb:a1:f7:c3:82:
e1:eb:e1:2b:9a:1d:20:81:3c:89:09:e2:db:61:ba:03:0d:c6:
fb:99:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:14 2025 by rpki-client