Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: 3Fr5Qh89cez2Xf86xwwt+m7Fh80KmfmBq/w+ykNOq5Y=
Subject key identifier: 7C:89:0C:18:75:98:AF:AE:88:91:72:F9:3C:1A:39:0C:37:86:B5:58
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 0194BD855778D5B65D919BFACC0048DE8F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: TNiG3SYkttHqvw2YpPLswvkIr00TOcRXZk0ewtFSqV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:78:d5:b6:5d:91:9b:fa:cc:00:48:de:8f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=7c890c187598afae889172f93c1a390c3786b558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:7f:cf:c2:c6:cf:d0:6d:0f:7c:1e:d4:57:
2c:c0:8f:a3:ea:13:77:a2:f8:76:31:66:de:13:87:
ed:3b:0f:d4:f6:82:de:cd:f1:1d:c4:75:cb:8c:73:
67:e6:a7:e4:96:64:86:2c:8b:b1:7a:d1:cb:21:7d:
c4:2e:bc:a1:b0:83:49:cf:21:a0:c2:63:a7:a8:75:
02:17:83:18:3e:6b:2c:2e:75:10:29:1f:ca:65:c4:
90:f1:40:9f:79:c3:cd:b6:5e:a1:3a:8e:77:8c:f8:
48:d7:5b:e6:28:2b:85:d4:fd:91:30:0f:5d:1f:ac:
b9:ea:6f:10:6b:e1:3a:52:37:1c:b2:3d:71:b6:25:
d2:77:1f:ea:09:3b:a6:a2:1c:7d:01:af:36:b5:08:
81:74:04:96:97:21:37:1a:bb:9a:84:b3:a7:1d:cb:
88:89:be:24:12:a9:20:7d:2b:cf:d5:f1:4f:7e:57:
11:e8:25:39:a2:91:cc:09:7b:6d:e2:33:ff:f5:dc:
ca:f1:de:9a:64:3b:bb:2e:2c:15:b6:2f:e2:12:8f:
8f:85:00:56:0b:8c:9d:9d:f6:51:5e:5b:0d:7e:47:
d6:ec:96:da:8b:ae:c9:75:af:d0:d7:90:b1:9c:3b:
30:8d:e9:45:03:a2:36:2a:7d:23:79:80:52:bc:26:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:0C:18:75:98:AF:AE:88:91:72:F9:3C:1A:39:0C:37:86:B5:58
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c5:3a:08:ec:9f:f2:e5:3d:64:f2:79:af:ad:0d:c7:51:95:
db:71:37:b8:1f:7d:11:df:43:99:0b:52:af:35:61:0d:8d:eb:
b8:d2:1c:aa:d6:58:50:98:aa:da:41:73:61:29:9e:5a:56:b0:
a6:94:9d:ce:13:23:75:68:0f:4d:a1:3d:78:40:e1:e8:61:9e:
d5:ab:67:b2:7f:69:97:5e:5f:ea:c2:12:f7:f4:05:a4:b1:5c:
9d:53:e9:76:95:9d:1b:55:6f:81:1e:75:93:35:fd:05:f9:0a:
53:cb:9a:ea:91:bc:f8:33:7b:03:5d:a2:49:81:88:1c:65:7b:
f8:88:0b:61:da:d4:08:ec:18:77:58:ba:60:4d:06:fb:f5:81:
2f:d5:57:d9:94:71:95:cc:ea:6c:4d:e9:04:a8:5b:f4:f4:56:
e9:e1:d3:4f:0c:49:7b:7d:33:90:04:f5:bb:a2:46:cc:97:8d:
07:88:bc:2c:b2:1c:88:19:65:44:88:99:6f:0e:e8:5b:87:74:
7d:c7:b7:2c:c7:fe:b2:83:75:a7:18:bf:5b:c9:20:ff:12:b7:
ba:da:06:52:4d:4a:8d:ae:46:f6:e8:5c:27:96:1e:31:c4:62:
cb:1b:2d:16:6e:2c:5c:3d:94:a2:6e:6d:cf:39:27:8e:a7:e1:
9c:bc:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:04 2025 by rpki-client