Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier: u8Uj8gu6naS2grL0E5VypriK86HLGZT2VssjldZPNKU=
Subject key identifier: 82:55:50:CB:A2:FA:E2:CC:51:36:8F:C0:DD:75:1C:81:83:93:9A:7D
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 0194BBCDDCFE36163D61410908FEB37D8F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number: 0343
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: ff1tZnv5W9hp67FkvJhx1+/llDgQnE7ZW6lL6R7WrrE=)
2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:fe:36:16:3d:61:41:09:08:fe:b3:7d:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=825550cba2fae2cc51368fc0dd751c8183939a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:42:ca:9a:8b:d3:78:68:0a:7f:ce:43:08:
c5:93:2b:51:04:23:bd:89:aa:56:8d:e8:b4:20:4b:
bb:17:32:8a:22:e8:b3:0e:9a:5c:22:e9:39:3d:58:
8e:d4:e7:92:50:38:04:c9:b6:d0:96:ea:6c:c9:79:
ed:57:c4:14:4f:70:20:13:e0:f5:9b:65:a3:fb:5b:
85:38:65:f7:69:f0:e3:1e:fd:64:b5:74:55:02:ff:
98:4e:79:4c:2f:42:d4:1f:16:58:f3:c0:d0:51:56:
25:ba:a4:b0:8f:8e:62:27:55:ea:38:f4:82:26:91:
50:f8:9f:8e:b7:53:53:58:a1:af:d7:b2:9f:3d:be:
0a:57:27:6f:b6:fa:65:f1:2c:89:ef:3d:d7:42:7f:
9c:a9:fb:6d:2c:14:04:7a:a4:ec:a4:66:7f:dc:3a:
cf:5d:5e:b6:1d:f8:28:2b:c4:bf:c2:51:00:da:c9:
41:15:34:ef:d3:8b:de:42:29:b2:a2:9a:66:28:3f:
d7:14:db:1d:cd:5b:02:49:3e:54:5d:90:5a:7b:6e:
73:71:bc:04:b0:8a:d0:05:0b:a5:00:7a:59:21:56:
dc:5d:24:02:7b:04:be:8b:c6:46:21:d0:40:9d:a9:
ef:e2:cc:63:68:52:36:ad:74:3e:6b:75:89:08:6e:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:50:CB:A2:FA:E2:CC:51:36:8F:C0:DD:75:1C:81:83:93:9A:7D
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:84:c2:11:ba:b7:5d:eb:46:94:cc:24:d1:3e:02:29:ff:cb:
12:96:48:c9:4d:bb:55:b9:6d:5d:ab:1d:6c:e5:3c:b4:1f:eb:
43:53:b9:0e:6a:ca:54:28:ce:ab:7d:9e:82:82:4e:1e:f0:4b:
c4:dc:64:f2:1d:9d:63:4b:a2:8d:ef:75:26:21:4b:09:35:15:
be:95:24:98:95:01:f9:c3:0b:b3:1c:50:ba:8b:00:59:1a:24:
56:1a:2d:9e:34:fa:58:7f:75:98:2e:39:a1:43:c8:73:67:4b:
71:96:b7:92:d0:e8:58:f8:be:4b:cb:e2:fa:f0:e6:39:56:9d:
df:5b:c8:7b:7f:64:4a:ed:90:1e:61:4d:a6:d3:aa:f4:11:01:
ec:58:38:a5:c4:96:c3:a3:20:2d:d9:a2:7c:93:4c:48:5c:4c:
9f:92:79:9d:59:9e:8c:95:2c:b7:8d:99:d7:e9:32:3c:a1:ea:
26:ac:a4:03:09:c1:1c:6f:66:51:7a:ad:90:ef:25:fb:f6:d6:
f2:25:4f:08:d8:a0:9b:28:39:11:f9:80:37:b5:06:f1:ad:5d:
c3:17:02:79:29:dd:21:a8:70:56:7b:90:5e:5e:f1:d3:5f:76:
35:07:36:a5:01:48:5e:ca:35:84:be:13:c3:90:fd:8a:b3:1e:
24:50:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:56 2025 by rpki-client