Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: CXzXCkkacrQPeNJflskqDoziJHIdsLfLcxHKIkaPTbg=
Subject key identifier: 6A:F3:16:5C:67:48:91:E7:56:4C:F9:CB:BB:5B:7F:D1:BC:F1:AE:F6
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 0194BCA98289F3907890C1ED8954B8DB778E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 12C5
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: R2hzQb+iG/dGgo2ZG6DVxMFi2Vde9QoXyEaiTs+D5KI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:89:f3:90:78:90:c1:ed:89:54:b8:db:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=6af3165c674891e7564cf9cbbb5b7fd1bcf1aef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:7c:68:0d:4d:72:15:16:80:c2:a1:8a:50:
e4:b3:41:9d:13:5a:a7:85:59:e8:60:b5:5f:e2:86:
20:b9:06:fe:fc:2e:e0:ff:59:24:d9:b1:35:9f:97:
df:ee:1f:1c:2f:ce:1b:b3:10:f3:fc:9d:e0:b7:e8:
07:24:bf:c0:d3:01:36:0f:a6:cc:25:9b:11:48:f3:
e2:5a:cd:d8:20:8a:f9:3d:de:3c:c6:73:9f:c5:2f:
d7:a8:1a:b8:a2:14:88:aa:75:ab:bd:01:c1:c1:12:
41:63:21:ba:10:40:c1:fd:ef:5c:ad:1c:43:52:c1:
b4:aa:7a:8d:a9:97:56:f9:81:88:7a:51:47:d7:5c:
12:8c:7d:b4:9d:f1:a4:e2:02:82:ae:60:d8:ca:ea:
a1:97:a1:cb:cd:26:db:a7:07:7e:8c:fd:b6:46:2f:
b9:71:ef:f9:e1:a3:fd:76:a9:dd:91:e8:d6:e5:a5:
12:77:41:02:47:13:f5:9f:43:de:30:df:13:48:c3:
5d:8a:21:9f:c2:36:fa:62:2d:ee:a2:36:25:65:3a:
0f:86:5b:e4:d3:2c:3c:07:84:f3:1e:d9:1e:3c:0f:
c1:22:ce:19:89:86:c2:27:15:14:e8:8a:31:c2:e3:
97:06:c0:a9:90:7f:78:6f:27:22:cb:91:f6:a0:6d:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:16:5C:67:48:91:E7:56:4C:F9:CB:BB:5B:7F:D1:BC:F1:AE:F6
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:f9:38:8a:7a:fb:4d:50:82:c5:4e:ad:ba:d3:8e:40:aa:
4d:f5:ea:2c:a8:00:58:3b:a4:e4:81:c4:e5:97:4d:12:dc:ca:
b2:61:b1:8f:ef:89:c4:07:ce:81:26:4e:da:aa:7d:8e:2e:b4:
24:f7:4e:ca:5f:b4:ea:4a:32:aa:0f:2f:1a:37:80:7a:3e:97:
06:35:2d:61:43:75:9b:fb:b6:57:d1:bc:02:da:c1:2a:bd:84:
40:c4:df:10:87:6a:61:64:10:6e:8c:3d:8b:dc:8e:b9:7c:54:
80:99:db:ce:69:ef:2b:93:37:52:23:11:3d:d4:70:ac:d9:a4:
5e:04:69:88:40:6e:1f:12:2a:9d:88:1d:0a:28:f9:26:ec:39:
25:36:da:c6:90:00:b6:7e:60:0f:91:1d:3d:bd:46:c4:d7:6a:
66:fd:fa:25:fc:df:fd:ce:b6:77:8c:3c:c1:ee:f5:6f:4c:0e:
1e:6b:30:7e:1f:3f:8c:9f:a7:7c:df:e8:51:04:cc:dd:15:85:
23:50:c9:fb:59:cc:3d:b1:77:4d:38:72:14:98:7b:10:16:ca:
96:20:55:81:7f:b4:63:18:da:0e:ef:a8:86:41:f2:bc:8a:8e:
1f:82:c6:8f:39:b8:97:06:1f:2f:01:61:d3:65:d1:c3:31:ea:
e6:cc:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:03 2025 by rpki-client