Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: 7r0QL19ilCQaEOLVr0K9TLIYVchAMOurEKm1Yjxgd2I=
Subject key identifier: DF:55:1C:ED:F5:CC:4E:49:12:5F:C7:A3:1B:38:9C:8C:C9:94:E3:80
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 0194BBCEA2DB07F95EE0649B750BCE3C3314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 01FF
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: Z2mtOD7I3+xp/SmHCw9bLYHe5qCrTUkjEGHMnZswxwY=)
3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a2:db:07:f9:5e:e0:64:9b:75:0b:ce:3c:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=df551cedf5cc4e49125fc7a31b389c8cc994e380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:b5:6b:e5:b1:d1:86:40:9b:2e:28:10:51:
e1:32:d4:f6:bd:13:c1:36:ba:b5:76:a6:e1:87:a5:
c3:ce:3b:90:5f:e0:b1:84:ff:de:17:b9:3f:bd:b6:
6a:ff:52:49:18:b0:0d:be:45:06:13:e1:32:8d:b6:
d9:21:ab:cc:65:6f:6a:74:9f:e3:ff:60:fe:59:13:
10:14:ec:c3:bd:00:9c:c1:4f:26:55:e0:95:af:2e:
4f:a4:c9:4b:a6:89:fa:12:af:7c:07:bb:a8:c5:3a:
95:37:94:6f:df:6e:fb:ee:dd:fc:32:67:17:41:01:
94:80:e9:56:c5:98:eb:82:e8:41:09:fe:d5:f3:7b:
49:4b:b6:dc:bf:2e:19:92:c9:66:05:4c:31:b6:d5:
dc:6a:b2:0a:a7:a6:39:0f:27:db:4b:57:96:02:fb:
93:4d:28:01:6a:24:1a:23:8e:eb:7e:da:32:54:ef:
b9:fb:d5:be:50:7f:c3:95:35:84:7d:0e:d0:e8:7f:
c3:f1:b2:a3:50:0d:41:c4:6f:b9:d5:0a:2d:a6:97:
88:9d:cd:9d:2a:92:b2:88:b7:71:1b:9b:99:c6:3d:
8f:a6:26:fd:34:b7:fe:21:fc:2e:83:00:25:c1:5b:
e3:33:d2:7b:36:3f:8c:4f:80:df:2f:8c:e1:2d:70:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:1C:ED:F5:CC:4E:49:12:5F:C7:A3:1B:38:9C:8C:C9:94:E3:80
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2e:1f:17:c5:3a:78:9a:1f:ee:3c:6b:87:c1:a1:8a:0c:0c:
d8:aa:c4:30:60:dd:43:6c:9e:37:e5:da:3b:6c:de:2c:56:74:
f0:05:cc:bf:3c:63:39:ca:4c:ec:ac:88:79:9d:d6:0c:d7:84:
3b:5b:49:13:e9:a8:a5:97:06:64:b0:b5:f0:13:fb:41:ca:5c:
ae:d6:82:14:20:5f:b0:c1:d6:80:cd:ea:23:7b:b5:66:85:e6:
84:3f:3c:2d:a8:b3:48:33:0b:46:5d:fe:57:6e:2b:80:50:e8:
96:2a:75:ce:54:43:b6:35:4a:c7:e6:2c:50:56:60:93:3f:77:
64:04:0e:c1:e9:38:67:4d:9e:0a:4b:42:b2:60:0c:19:01:ac:
b5:3d:7d:c0:e5:c0:8c:28:b1:a2:ba:9a:6e:7d:4d:04:4d:c0:
98:90:ad:77:e8:39:8a:a0:62:9a:e6:f4:fa:77:58:ab:bf:59:
80:6c:9c:36:ae:7a:7d:cc:b8:2f:f0:ff:ea:41:03:c5:c1:18:
f3:ab:33:4d:ee:f5:2a:4d:c4:54:41:46:37:b4:c3:cd:8f:93:
ae:58:0d:9e:d5:97:56:0f:da:10:9a:a8:29:2c:e9:66:91:75:
63:11:98:d1:fa:6c:f7:ad:a1:19:84:b7:75:80:cd:2d:b9:42:
4a:f0:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:36 2025 by rpki-client