Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: P71n6xnWqfwfkbpYxcHsIHvGPe+baU6Z4cOMSNlO8ds=
Subject key identifier: FA:51:91:91:7F:09:F1:76:78:1F:DE:CC:F0:E2:46:DE:6C:C7:D6:87
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 0194BD859D6F35CFEBA148DFA076C3567452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 1156
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: L5/oOp8z2iuJt9Q8u9tw0hV4rkpGbQLGd2+yNFx17l4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9d:6f:35:cf:eb:a1:48:df:a0:76:c3:56:74:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=fa5191917f09f176781fdeccf0e246de6cc7d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:b3:fa:42:bd:92:6d:80:07:cb:c2:ee:4e:
c3:78:5e:d5:42:71:d4:f6:e3:2f:fa:0e:55:db:ab:
5a:e8:90:c0:69:00:1c:48:b2:d0:88:76:a5:cf:1e:
0e:33:64:da:31:5d:5e:db:bb:c7:88:c3:b2:ab:99:
c9:7a:a7:67:dc:16:89:a8:21:20:5f:b5:cb:b7:3b:
90:45:e2:3c:d1:83:c6:23:f5:90:2d:6d:2c:06:d7:
23:ba:e7:83:d5:1c:1c:36:e3:61:47:53:7f:88:62:
61:be:87:f1:14:46:88:a1:4a:dc:a2:97:c9:59:66:
fa:f6:c6:13:9f:f0:cd:29:10:15:5e:25:9c:8e:23:
5c:d9:7f:f9:44:ac:95:67:c9:7a:0c:7b:be:d5:57:
04:87:f1:74:db:df:21:44:54:4e:15:41:ec:7e:69:
78:18:25:2f:f2:28:d4:8b:26:03:48:db:61:dd:13:
b5:51:3d:56:44:0b:5e:5c:4a:d1:47:62:e7:67:fd:
8c:0c:3a:cc:b9:63:f3:44:1c:42:4b:30:8d:44:20:
34:b5:bc:0b:07:58:fc:70:a4:7b:6c:06:32:d1:06:
12:9b:ee:62:fe:09:16:2b:fb:a0:d5:1f:fe:ae:65:
4d:9b:c7:4d:aa:9a:09:ad:b8:66:0b:b9:f9:d6:96:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:91:91:7F:09:F1:76:78:1F:DE:CC:F0:E2:46:DE:6C:C7:D6:87
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4a:b2:68:dd:6b:1f:a6:ae:fb:34:8f:30:4c:68:91:7a:aa:
0e:4e:1d:9f:55:25:d1:a6:8d:77:68:7a:b3:3d:19:21:7a:79:
46:11:21:5c:7c:c1:ae:1e:15:5a:8c:af:c5:db:12:a3:a0:94:
c1:3f:ca:4c:5a:73:7f:8b:93:7b:f2:eb:c1:37:c7:b0:23:11:
7c:e4:a6:65:ca:60:63:4b:75:18:91:e3:8e:8c:cc:53:10:db:
d7:e7:52:40:1f:d1:95:8f:c9:e5:b1:78:21:4b:e7:a2:56:2a:
b5:b3:90:01:44:1e:5c:4b:d8:c9:07:69:77:d7:21:7f:4d:66:
25:e4:ce:d3:88:50:62:d6:7f:ae:40:2f:98:f2:ce:32:9c:8f:
e6:ce:c2:71:ab:0d:c1:cb:ee:02:41:b1:bd:85:65:8c:ec:02:
6f:ab:12:0a:0f:0b:73:68:f2:e6:e2:36:9c:d5:a3:49:ec:5c:
9c:78:91:72:e4:63:88:9c:dc:d0:56:b7:85:39:3e:9a:b7:08:
b6:14:17:e0:17:75:e9:2c:fe:4e:47:31:97:86:ac:61:8c:d3:
cf:8d:82:7d:de:70:65:17:f3:35:cd:93:9d:1f:88:78:2b:25:
b1:23:b6:9d:90:ab:f9:e4:c8:cb:ce:6d:97:f8:cf:71:c8:80:
dd:2b:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:51 2025 by rpki-client