Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: 984FDXykuMAB3cPOwGKHP3OSwsXGHhrxI0Q9eH1MN1Y=
Subject key identifier: 76:5E:6B:D0:0E:99:61:10:EB:55:1C:09:8D:72:32:4F:BD:05:AA:98
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0194BCA97EAF6898C6E94FB3D78D2B79E0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: KmnIHSYCNMQtsok4dr6WXAk7L07jI6VMfD2kHX01JqA=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7e:af:68:98:c6:e9:4f:b3:d7:8d:2b:79:e0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=765e6bd00e996110eb551c098d72324fbd05aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:58:1e:af:cf:18:59:27:be:c7:be:95:04:
98:63:98:70:06:b0:2e:1b:1f:95:61:e6:e2:01:32:
de:3a:75:cf:55:30:29:8d:f2:73:81:f6:71:60:9a:
d3:0f:f1:eb:1d:98:94:b6:ca:97:52:00:29:44:01:
f2:86:6c:da:44:2f:ce:5f:dc:e5:8c:95:ca:a1:0f:
00:6a:90:7a:13:27:e3:86:ea:c6:04:3a:db:18:1b:
5d:00:b8:17:7b:88:b4:64:f4:b1:ca:38:f7:7c:7a:
9f:dc:57:7d:d0:3c:23:79:18:06:9a:83:7b:9c:1f:
f7:c7:51:11:34:d1:49:8a:e3:1b:0e:4a:24:a7:15:
10:0a:a3:27:e5:d7:41:34:6f:7b:86:99:d8:8e:78:
a8:c7:ff:f4:65:fe:06:c0:84:b1:ed:3e:51:2d:3a:
ed:aa:30:6b:55:e5:91:51:81:12:13:0f:4d:d8:bb:
36:6e:c1:7c:e1:04:7d:f0:fd:95:f9:6a:bc:92:be:
a2:8f:3b:55:b7:9e:c2:99:02:6e:42:21:b0:a4:20:
d7:41:03:0e:79:0c:10:9f:11:fe:56:72:d9:36:13:
fb:69:49:29:c0:26:d9:c8:8b:7c:9a:15:04:6c:c8:
db:16:e5:cc:4d:c9:bb:91:f4:91:cf:13:1b:ba:ae:
9f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:6B:D0:0E:99:61:10:EB:55:1C:09:8D:72:32:4F:BD:05:AA:98
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cb:ff:03:2c:fa:6f:49:50:7d:a5:d9:98:75:e3:58:08:d8:
7d:fc:1d:14:b1:42:92:77:8d:46:53:0e:c5:ad:01:33:fb:30:
69:a1:c2:2e:86:34:fc:e8:c8:61:0f:02:93:34:2f:87:72:a4:
a1:a4:d7:62:9c:39:31:20:03:a0:04:ad:84:01:bb:be:8a:c0:
7d:af:cc:f3:58:19:58:ad:9d:ba:5a:71:3c:e8:ab:5d:71:08:
48:80:22:f3:48:78:59:70:78:8f:9f:46:ae:35:97:ba:21:1d:
b0:a0:1d:58:22:77:32:b1:5f:5c:0f:3a:63:81:82:a2:09:fc:
2d:22:3b:d1:ba:71:2c:1e:92:6d:b5:da:07:f6:a3:3a:34:25:
16:f1:f0:99:db:29:7c:b2:dd:07:05:c3:6b:c0:09:0c:aa:13:
3b:4f:49:2a:c2:19:a0:bd:1f:72:93:ee:b0:20:05:e2:b9:fd:
0b:c4:74:94:35:a8:a1:76:ac:44:d9:ef:b0:07:44:a4:ad:4d:
d3:87:c0:de:41:26:8d:63:9b:37:70:6a:b7:3b:c5:97:e8:4b:
85:72:ba:bd:f6:1f:03:2b:0b:22:ee:27:1e:85:de:9d:9b:a1:
44:75:f6:48:35:91:99:fa:57:88:cc:0e:68:ed:c1:c8:2b:7c:
64:e9:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:11 2025 by rpki-client