Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier: FLihJ7gt0G99bSgPYmUaznLVp6VXVTnXnDe5A9Zgi4U=
Subject key identifier: B3:60:EC:EF:C7:26:27:FD:F3:8C:38:B4:4E:63:2D:E6:62:79:7C:91
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 0194BCA96FA3975FDD6860E8DE2CC4B98880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number: 079C
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: AaZ1hXq2pSCEY68otFl6Jj0mQ+u16+8zQ42pqA/e1fw=)
2: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (hash: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:a3:97:5f:dd:68:60:e8:de:2c:c4:b9:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=b360ecefc72627fdf38c38b44e632de662797c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:5c:ae:72:cb:d3:09:43:e3:25:67:08:3a:
5e:c0:2b:30:d1:eb:50:a2:e4:8d:b3:d9:ed:fa:2f:
93:40:a8:ee:d7:bf:54:68:55:a6:5f:75:07:67:94:
84:08:b0:5f:b4:03:22:94:9b:40:53:68:6e:8e:61:
25:fa:62:2d:15:f4:9a:c0:d8:f4:44:03:ac:92:26:
2a:6c:f1:ba:09:13:98:cf:ee:1a:4d:5b:74:c7:e6:
be:d7:19:bf:db:b7:2c:8b:56:88:70:59:42:fe:f1:
43:6d:23:e6:79:c9:d7:d1:ac:ac:13:7a:50:fc:ad:
3b:24:69:1e:dc:0e:6b:25:6b:ba:66:8d:22:9d:07:
66:e5:82:ec:f2:ea:f4:dc:c4:92:f3:d5:7e:8c:66:
28:16:3d:b0:01:a9:63:40:44:d5:7e:f2:e0:aa:72:
6e:c0:50:21:12:94:34:7d:fb:22:5c:1f:70:a3:ec:
3f:44:85:88:a2:ff:2a:02:c8:64:5c:dd:e4:9a:72:
dc:12:da:61:73:fd:a5:0d:eb:0e:d3:a2:2b:6f:5c:
1d:96:39:d4:43:6a:bc:e2:a3:6b:2d:9d:9b:e9:89:
b3:e8:16:95:f7:07:07:f4:05:dc:99:51:d8:10:e3:
ad:2a:3e:f9:e4:06:0b:2b:3c:74:d4:1b:44:fb:5d:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:EC:EF:C7:26:27:FD:F3:8C:38:B4:4E:63:2D:E6:62:79:7C:91
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c1:52:fa:eb:6c:db:a4:7d:16:e3:06:85:54:24:02:a4:63:
35:96:7a:6e:96:ef:31:97:0a:3d:a3:53:55:f6:a8:71:97:31:
a1:bc:66:b2:72:93:aa:f5:90:c9:2a:9b:5f:70:6d:03:4b:68:
8d:2c:a7:07:89:d6:95:cd:73:a1:02:47:1b:de:22:cc:8f:7f:
c6:64:ba:aa:26:2c:d2:2e:45:fa:ed:53:be:14:85:79:13:27:
35:99:48:9f:c2:e0:1e:86:69:ee:6f:1a:c4:28:d2:0f:a4:07:
84:73:30:45:0c:c2:b8:0b:f6:e6:d6:0e:86:37:17:ee:13:34:
6c:e4:7d:e8:a6:12:b4:68:25:a0:80:65:c1:a6:aa:f5:16:73:
a9:00:48:1f:bc:64:55:21:b3:75:d8:92:67:4c:57:0c:81:18:
03:85:bc:94:66:95:4a:d3:53:eb:7c:9f:2c:40:d1:a8:71:0a:
49:90:39:0d:ba:95:ee:db:ab:ae:45:19:15:71:94:86:b4:8e:
77:0e:5a:a8:52:83:07:80:a1:72:80:d6:c5:73:35:99:74:68:
66:24:28:80:6c:b4:52:45:35:69:05:7f:50:d4:9b:87:44:2a:
e4:89:c8:b2:30:dd:1c:b7:07:2f:f2:79:f7:29:d7:a7:16:77:
19:7a:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:59 2025 by rpki-client