Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: 4WHNvBaGcSznsRRutiJAfj9dwLLw8diH5PTmu/hcqO4=
Subject key identifier: 77:07:01:23:0C:A7:CA:23:41:16:63:6F:EC:2C:02:86:6C:69:7F:52
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 0194BD857454E97A41AF7DB948D887171C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: VqWEeGtZoSlXRweuiB1glO7QrjHqrl3Dmkw4WVfj6SE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:54:e9:7a:41:af:7d:b9:48:d8:87:17:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=770701230ca7ca234116636fec2c02866c697f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:ad:d2:c8:b2:30:70:e1:91:f9:ab:b2:bd:
3f:a4:e9:37:a7:f0:46:b9:1f:8d:9d:84:94:e5:fb:
5d:e4:12:21:96:87:42:b2:c2:22:31:a1:62:9b:11:
c5:5f:aa:2a:43:a1:4e:9e:03:ee:d0:65:74:ba:ba:
93:fc:e8:bd:48:4d:75:12:ce:dc:4f:15:74:e8:32:
07:b7:44:30:8a:98:11:de:19:45:76:a9:53:0d:92:
62:ae:56:10:4b:df:f3:1c:04:44:d9:8d:74:2a:87:
74:40:14:8d:51:6c:17:99:76:89:19:2d:15:fe:bf:
a0:4d:d9:fb:9e:71:37:74:d2:da:7b:3c:bf:7c:92:
a0:b6:13:97:dd:62:85:18:5e:96:7e:4c:46:76:14:
7d:d0:13:72:9b:ac:ba:3d:37:46:3e:77:c1:d4:b3:
72:bc:a3:f6:9f:d3:19:8b:55:6b:55:97:49:46:39:
8f:bd:37:d2:e9:d4:b8:89:65:28:04:72:a5:96:a7:
fb:f0:d8:7e:a1:75:8d:cc:32:b0:2a:42:65:6e:7c:
a8:ae:63:d2:77:ce:7d:42:d3:d7:d4:7d:bf:81:f7:
d1:88:b8:fb:0a:89:61:e0:51:0b:a6:47:08:0b:c1:
51:1b:a0:b1:ff:29:f2:a1:c9:5d:25:b4:46:68:ee:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:07:01:23:0C:A7:CA:23:41:16:63:6F:EC:2C:02:86:6C:69:7F:52
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:9a:ee:a7:8b:ce:09:73:69:1f:95:bd:81:e3:1d:05:5e:
69:59:fc:01:0b:e9:39:8d:f6:01:e6:ef:8e:0c:20:d9:98:3f:
3b:b0:a4:c0:2a:0f:72:4f:b6:3f:33:69:19:9c:4c:c8:50:37:
72:ce:87:1d:7a:39:4d:5a:e9:95:e0:22:1f:9e:7c:bf:36:ec:
0c:ca:e9:d7:68:ee:d6:d3:f5:80:58:06:00:66:65:1e:75:e4:
e8:73:8b:26:05:22:d9:51:59:8a:13:f4:aa:5f:de:7d:e8:59:
91:9b:ba:63:03:a2:e1:b6:68:a0:7b:f5:8f:77:ad:e9:bf:b7:
96:82:29:26:89:28:8a:94:cf:ff:f2:7a:bd:c4:87:8f:67:07:
62:95:ed:84:c9:af:e8:41:46:9c:be:87:60:53:cc:82:81:b0:
9f:60:7b:09:b4:ba:9a:16:a1:f7:47:02:e7:a9:40:d2:91:b6:
ef:16:45:95:ee:ba:38:84:78:00:ad:39:e7:7e:9b:24:04:37:
6a:20:4d:d0:5e:24:6b:cf:aa:f8:db:6f:d9:92:2b:4e:0a:ae:
0f:5c:f8:4b:ef:92:78:22:6b:b3:5d:c6:c9:9a:8f:85:a2:e4:
10:97:c4:fc:86:11:9a:94:76:05:a9:5e:5e:f6:d9:26:84:f8:
90:58:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:15 2025 by rpki-client