Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File: kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier: zBJ6Yu6XU9s2u5TDboEA5iomtyWm12e3DDhw+yqC3FA=
Subject key identifier: D2:C7:9D:27:63:80:F1:FB:7F:E7:FC:B6:A2:83:CD:77:BC:7F:AA:79
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 0194BD85B12A1CB18E9EC0BA27325C013EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: U5Y7YWVXNPPm9KoqmwsivloXzrs.roa (hash: ca5vcs2GJ+zXpmrDaBzBSEBE+1Vnejqdln+cTCo9uxU=)
2: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: nTy9yLs/V3QTfhdJV+TQ1f5QplcsMeaJsYQ7IS9YOLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b1:2a:1c:b1:8e:9e:c0:ba:27:32:5c:01:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=d2c79d276380f1fb7fe7fcb6a283cd77bc7faa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:3f:e3:90:d4:62:39:aa:d7:f1:8d:a7:ba:
08:d2:5d:34:f0:9b:dd:6f:83:3d:b9:b0:5b:b8:5c:
92:54:eb:8a:23:28:51:9b:57:96:2e:7b:87:b9:fc:
6b:10:d1:d3:e5:53:4f:b5:c8:40:8b:d9:d1:16:f3:
0b:10:d1:4f:9a:81:bc:19:4c:b1:ee:02:53:e6:66:
27:7c:46:d0:cb:be:3d:49:4d:fb:94:1a:25:ee:50:
40:9a:96:22:cb:3c:e0:1f:ca:33:51:99:4b:c4:95:
8f:ea:a3:06:03:28:4a:ad:a0:4d:97:64:79:74:7b:
91:28:b9:2e:5f:22:f1:53:ee:a4:0d:c1:db:3d:0e:
60:45:d6:9f:3a:70:84:ae:24:6f:ad:15:bc:29:f4:
5b:21:c2:2d:13:64:57:3c:9a:bb:1b:9f:83:ce:1b:
49:28:fd:50:0c:18:fe:72:88:53:41:4c:22:83:4d:
1d:3e:14:8e:e1:eb:5a:f9:83:1c:e7:4f:27:09:52:
aa:43:f5:9e:6e:d5:b3:7d:20:a6:15:d9:4b:a5:29:
e8:2a:2d:fb:0d:62:14:cb:9f:73:5a:0e:c6:0e:8b:
57:1d:cb:7c:ae:b4:dd:91:76:1f:0f:3c:66:08:16:
b7:00:cc:ee:0d:56:73:bd:34:27:81:0b:ea:db:38:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:9D:27:63:80:F1:FB:7F:E7:FC:B6:A2:83:CD:77:BC:7F:AA:79
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:81:45:3a:46:92:40:66:cf:3d:08:39:f8:e8:c3:84:61:04:
61:32:ea:ba:c9:df:32:b3:11:26:4b:78:0e:50:63:0e:15:f3:
4c:d3:0d:54:81:d0:64:6d:1d:c3:80:ee:84:17:6e:78:ab:17:
8d:c5:37:38:e5:a4:99:c7:98:dc:af:c0:eb:7c:8b:11:0b:2e:
2a:f8:22:2b:75:ba:e5:fe:d8:2b:09:d3:b1:ae:89:c9:1e:bb:
4e:8f:30:48:50:eb:d8:fe:91:a2:c7:f7:2a:e1:e7:ea:05:f6:
0d:66:e6:74:e3:24:d4:3a:3e:b4:64:f3:d7:77:71:56:25:3b:
a8:97:2d:d2:23:f5:b8:cd:b7:05:99:71:12:ec:74:17:3e:63:
58:03:94:16:02:45:70:ae:78:f1:83:e4:56:4a:d2:e5:b2:42:
6d:30:c6:4d:1c:96:bc:78:9b:90:46:f6:d1:83:86:0b:53:db:
96:d5:b8:fe:96:5c:95:eb:2e:68:1f:98:4d:ea:57:c1:78:83:
b7:df:cd:aa:e3:15:56:89:32:c0:a7:62:9c:d7:bd:37:25:2f:
3d:30:d8:44:af:28:3f:8c:2f:87:3a:46:c6:e5:3b:86:94:58:
07:27:81:c0:42:18:b3:78:09:3a:f5:dc:cd:05:ec:f9:c0:3a:
20:d6:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:44 2025 by rpki-client