Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: QkENO7BXaq7oiQQAllEiqDQtrAeqhpsCvKxd7Lcb9sk=
Subject key identifier: EC:9B:DA:CB:EA:61:3F:F1:DD:B3:1E:D0:31:E0:AF:1D:0C:07:C8:62
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0194BC3C9B7D066DF2842BE691825538439B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 143F
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: 9ONRNrbBValrAJuV2y6z566kP6w.roa (hash: JNoo7S5r35f65oUQwxcPjybT+69dMIFA6KuxH5tUX5Y=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: KL0IO+xzaqCUs3ZXpuCaGl1bL2U06H5R6pct7d60XwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9b:7d:06:6d:f2:84:2b:e6:91:82:55:38:43:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=ec9bdacbea613ff1ddb31ed031e0af1d0c07c862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:54:cd:9d:5f:da:f0:0a:81:e5:f4:a0:44:
7d:bc:99:5b:0e:0d:ac:c6:25:05:92:4b:bc:c2:86:
80:da:42:02:4d:03:06:b4:27:e3:73:ec:f7:5d:f9:
7f:63:31:92:0f:d0:01:c2:fa:26:20:7f:f6:93:d7:
cd:ba:79:22:96:c1:47:a2:2f:88:15:54:fe:ce:6d:
da:f8:99:9e:30:78:93:d3:21:3c:b8:18:23:90:7e:
38:91:e7:d3:f7:bb:cf:01:45:37:c6:d7:b4:89:d1:
d6:91:aa:e4:ab:04:a7:fa:f9:42:9a:08:bc:82:89:
c5:b9:6a:52:b5:a1:0d:77:37:d2:6c:d2:41:1d:35:
07:08:eb:78:b8:ea:73:96:41:38:9a:29:3f:91:4d:
79:1c:9c:21:a0:a9:7f:aa:76:7b:fa:af:a5:ce:a3:
75:c4:2c:1b:85:bf:90:fa:5b:be:f9:6f:df:42:02:
73:99:c4:d7:72:bb:e7:85:78:87:ac:13:f6:32:2a:
9f:17:33:2e:40:a0:3d:b1:21:c8:8b:b9:ee:a5:58:
01:6d:fc:16:4b:0b:86:dc:9d:8f:23:b4:d6:30:b3:
20:59:5e:82:fb:d6:e0:ce:b6:0e:68:09:da:57:ef:
e3:12:3a:c3:28:cb:4a:29:80:25:9e:26:75:06:be:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:DA:CB:EA:61:3F:F1:DD:B3:1E:D0:31:E0:AF:1D:0C:07:C8:62
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:d7:c3:3d:9d:18:4f:ff:86:82:a5:02:53:1a:3b:55:44:
d3:e7:4c:45:0c:c8:37:b8:05:a1:0c:16:1e:66:90:5d:44:4a:
f7:be:ff:c3:0d:f7:4b:51:01:2d:37:30:d8:1e:bf:6c:ec:7d:
3a:3b:cc:25:83:21:c5:ef:94:b0:73:08:6c:d8:c6:40:13:9c:
20:db:be:5a:6b:57:39:8b:c4:7d:89:4b:7a:5f:81:98:f1:75:
f5:cf:a6:a1:81:1f:85:5b:40:3c:20:52:17:d8:c8:8c:ea:6f:
a3:2c:ee:59:1f:eb:82:ae:63:56:bf:58:f1:b5:57:c2:95:ab:
c6:84:99:8c:12:ea:e9:ed:e5:36:19:29:3a:f3:2f:0d:1f:de:
cf:f6:4c:f9:5d:80:9f:89:33:f3:50:81:8d:2c:c7:19:12:48:
d7:9d:a0:2c:80:13:a8:72:99:ea:13:71:cc:e2:d5:5b:ed:97:
e2:e6:1d:b5:40:bf:8d:77:23:f7:2d:09:24:13:f5:bf:0f:6c:
91:46:41:a8:25:23:31:a3:19:47:2c:d8:96:28:d1:65:a9:42:
9c:76:67:14:3b:42:86:5b:52:83:6f:9e:6e:21:6e:d5:38:20:
67:1e:b0:21:c5:86:87:d0:1a:89:42:dd:16:36:e4:57:45:4f:
83:11:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:42 2025 by rpki-client