Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: 8rC3GwdL5r4qZIzqNGL0ZeXmyCK1Ba/guhs9Vuuj9Bo=
Subject key identifier: 08:D2:35:E2:64:35:B3:13:15:29:73:33:23:8D:DC:03:66:7F:9D:B6
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 0194BD856A88873C24B02B87C9E741C06B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: RUPuhFwMtHManduSxwyql7+TDlLnnNMit79daMPfdVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6a:88:87:3c:24:b0:2b:87:c9:e7:41:c0:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=08d235e26435b31315297333238ddc03667f9db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:2f:57:53:14:af:72:3b:8d:7d:cb:c2:f3:
23:7c:95:8f:74:0c:94:71:56:f0:e6:f2:c0:51:7b:
51:4e:14:00:70:c0:a6:00:23:ba:2b:39:0c:00:cb:
53:93:9c:11:9a:e3:7b:11:2e:f9:07:1e:4b:3d:5f:
5e:6e:43:0e:9c:c3:b4:c0:85:c1:3a:06:61:dd:2c:
ae:71:84:02:5b:40:45:c3:4b:43:66:57:a6:b2:96:
b4:4b:91:6f:d7:0d:0e:30:1d:84:c3:a5:92:0a:ed:
1d:10:15:13:6a:aa:1f:b9:12:e9:97:29:46:e9:d8:
9a:1d:56:37:83:a0:ae:49:62:a9:70:cb:b3:12:f2:
76:9c:68:b4:0e:2a:86:df:7e:b9:82:24:c7:cf:6f:
9b:2d:32:52:b0:b1:be:fd:2b:f4:0f:b6:bb:76:9a:
cb:85:e9:fe:6a:0a:c1:b3:b3:82:f3:4e:1c:84:30:
ba:07:0d:8c:f9:0d:12:e2:7e:f7:fa:e3:6b:39:35:
27:20:6d:d9:9a:53:0a:01:64:e1:db:b8:90:25:b2:
96:c5:fb:0a:f2:eb:c4:f7:4c:b4:d9:83:d1:7a:74:
ed:fe:ad:2e:73:26:72:fe:5a:fd:c4:9d:98:a5:43:
2a:72:d4:30:ba:55:71:8c:64:80:7b:db:24:dc:ba:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:35:E2:64:35:B3:13:15:29:73:33:23:8D:DC:03:66:7F:9D:B6
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d4:36:ae:da:7e:35:d2:f3:c5:0d:c7:b1:de:16:44:29:8a:
01:a7:97:55:a8:28:bc:af:a5:90:3e:6e:d9:3f:44:86:b2:93:
30:09:59:49:b8:08:28:b5:c4:62:bf:d2:bf:7f:1e:5b:2f:04:
8d:cc:da:fa:cf:ab:6c:65:ff:4f:1e:95:5d:de:d7:86:73:1a:
4b:1d:15:da:63:14:4f:3f:b0:d3:82:47:b4:6d:bf:74:0a:64:
6d:d0:34:7e:76:31:3b:d5:ff:f8:f1:dc:2f:3b:31:91:57:b6:
77:c6:b8:56:b6:e0:b6:9e:b5:43:eb:9b:cc:a4:4a:34:a8:06:
8b:c4:3a:35:1e:eb:5d:30:17:7d:05:f4:17:15:36:e1:50:a4:
9c:fd:5d:a1:24:e1:c5:29:28:52:37:c6:99:a4:36:ce:54:33:
f8:63:86:55:98:99:3a:61:d3:f3:d3:9d:5c:4f:f7:3a:69:96:
58:46:ea:b7:c2:6c:94:95:4c:01:51:bb:88:2a:78:33:73:13:
26:bb:1c:54:5c:67:38:7e:85:66:52:bc:af:b2:0f:1e:88:a4:
b6:10:28:cc:80:cd:5e:6a:bb:48:b3:4b:43:da:8c:27:b9:95:
89:eb:4b:42:c5:f5:df:3b:36:bb:36:4a:db:00:ad:2b:1f:0f:
87:df:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:01 2025 by rpki-client