Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: IdVqaU9aLwyOrG+D9eG/Ci4wjQ/JLZ5k/J9Y+mqLkPo=
Subject key identifier: 76:1D:1E:ED:35:C1:61:63:98:93:3D:8D:29:58:63:10:0B:D9:91:DE
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 0194BD858BAE76E492BE4A782BB1B08726F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: XbqlpmnCPuUTanaqiUCQjoeUFMnlW5LnvTliMLw4AnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:ae:76:e4:92:be:4a:78:2b:b1:b0:87:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=761d1eed35c1616398933d8d295863100bd991de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:b5:47:c2:93:24:c5:f2:9f:41:c0:4a:e5:
08:aa:4c:3c:12:34:49:56:82:8a:d2:3f:32:f0:40:
59:75:68:6d:71:34:61:f5:91:dd:fb:5c:6d:d8:ba:
48:d3:72:b2:ce:ab:88:71:1f:f1:60:d1:58:7d:01:
fb:b9:1b:aa:a9:75:7c:e3:c7:93:13:a8:35:4b:99:
81:1a:28:29:d7:69:53:27:77:5f:12:8b:6b:a2:31:
a9:2a:cd:16:90:2f:cf:2f:82:1b:36:be:23:eb:6e:
cd:b1:a4:fc:9e:3c:4b:44:ab:a3:64:53:60:3a:3c:
5d:43:79:6e:0b:09:bf:17:13:c8:7e:0f:76:93:8f:
25:5a:97:b6:be:b7:ef:b8:0e:81:8f:77:10:7a:0a:
ce:59:46:90:48:9e:52:56:25:13:a6:01:19:b8:4c:
e7:e4:63:20:37:03:68:6f:09:44:60:68:59:cf:bf:
c6:f1:21:7e:94:d8:5b:d1:0b:e3:21:f2:40:6f:0f:
06:4d:27:aa:0d:6f:c3:3b:9b:90:40:7b:c6:3b:b6:
25:d6:f8:92:90:7b:cf:68:3f:a0:0a:07:61:3e:5b:
a3:7f:55:b4:48:1c:5a:07:0a:73:87:7c:c4:8f:86:
bf:f6:fd:fb:c6:8a:e4:80:3e:24:1f:fa:87:fd:41:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1D:1E:ED:35:C1:61:63:98:93:3D:8D:29:58:63:10:0B:D9:91:DE
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:17:e6:f9:c9:64:e1:29:d5:5a:c4:dc:56:cc:39:3e:65:99:
11:26:c0:0c:6c:a5:13:be:46:29:d3:5f:cc:ea:87:22:16:7d:
b9:70:ea:f3:a8:95:2e:48:b2:ec:bd:71:ef:af:15:7f:59:11:
e3:43:51:78:a8:67:90:ae:36:4a:bd:ac:ea:b6:e9:8d:87:fa:
e4:32:44:34:64:14:cb:b7:b9:39:f6:40:9d:4a:71:0e:ea:13:
06:a7:84:d8:7a:9a:64:67:d8:c3:10:c6:1e:c3:df:e9:b8:26:
6b:8c:d6:f7:4c:36:02:2b:b2:74:0d:5d:6e:eb:d1:a6:57:8a:
fd:9d:30:52:a6:bb:f1:8e:ea:b4:39:70:40:0d:da:fb:ef:79:
30:fe:83:64:9e:a1:94:d5:b7:46:7e:12:6b:9b:0b:95:e4:d9:
42:28:37:15:a9:c1:2f:89:86:b5:e7:7f:8c:b5:cb:13:29:7b:
1e:8b:03:c1:ab:08:61:91:83:c2:b4:8a:84:6c:2f:12:20:3f:
df:1a:e5:f6:ad:16:5c:4a:95:0a:1f:5d:43:66:8a:26:8f:79:
a6:d2:cd:8f:a0:ce:f3:23:80:d6:a2:d3:6f:e2:d8:84:4f:9d:
b2:05:b7:1c:62:59:07:c5:1e:2c:97:d3:49:f8:6a:cb:a3:e2:
5b:97:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:34 2025 by rpki-client