Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: afp7ySvgA6Oq23gllStzz4t8KdrJM9wc/R3nc5ASO0M=
Subject key identifier: 1C:BF:5E:1A:92:12:E3:EB:8B:3F:94:F1:33:8D:AB:EE:A6:7D:19:A7
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 0194BCE0A256D0D0689ABFC3A6D8CD10DF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: Dmpy31ijG2f6hXZqP5vPJHMC7fc.roa (hash: a19ubK1sseKa07iYGs0SfWBGmOIfQnOOnA1DdC09cIs=)
2: E7yxjynkTDUFSV0KBoIMTHpUAPI.roa (hash: 9bhJ257wp5/WErvUFH4Spo9AhE0rTIMhiGRzFbkOnjk=)
3: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: ym77Tz1LPB2NJb30PcN9zjoMzjReLoetpX1kcw5vYx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:56:d0:d0:68:9a:bf:c3:a6:d8:cd:10:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=1cbf5e1a9212e3eb8b3f94f1338dabeea67d19a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:d0:5b:4a:fb:2f:36:d6:e4:59:a5:02:dc:
94:7f:37:dc:67:08:82:00:8a:0f:95:5d:d7:a1:d6:
fc:41:6f:da:32:f9:db:77:cb:99:9c:b5:b0:63:fa:
8f:37:df:c5:bb:4e:00:13:87:90:dc:b9:7c:92:c6:
ca:a8:63:28:65:7f:eb:76:87:04:d3:23:93:b4:e2:
ed:88:21:5a:c1:36:2b:0b:b4:a7:5d:4f:ec:63:d8:
99:80:4e:96:ae:42:71:20:0b:1d:2e:4a:7a:35:01:
ed:81:a5:2e:8e:c9:da:58:f8:fd:7c:3c:15:ec:43:
25:86:8e:d5:05:33:d5:a7:3a:64:92:36:09:a2:35:
8d:d5:52:24:bc:a9:25:37:a0:67:d8:4f:cb:a5:8c:
13:b5:06:40:2e:8d:5b:8d:c4:e9:5c:2f:64:51:c2:
d0:e1:51:18:1f:fc:1c:d2:a4:2c:5c:a6:e9:45:ae:
8a:96:61:34:f4:e2:2e:8e:c5:60:ba:2e:b1:b2:e9:
07:7c:e8:55:7a:f2:05:db:56:7b:d1:e9:f0:43:47:
e6:d3:da:65:b1:5c:70:a6:5c:ed:97:d8:b8:a3:fd:
3d:fe:1a:95:1a:4d:3f:0d:66:ce:d7:60:76:2e:fe:
8d:ff:e5:07:2d:97:c4:b0:bb:9a:cd:8e:ff:d4:70:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BF:5E:1A:92:12:E3:EB:8B:3F:94:F1:33:8D:AB:EE:A6:7D:19:A7
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:96:86:7c:4f:a0:8d:02:db:9a:84:44:1b:ce:12:a9:dd:
2c:52:c9:e9:09:18:e4:d6:fd:36:af:02:d2:83:d3:72:15:ef:
7c:2d:39:b1:29:24:0b:65:76:a5:0c:1e:96:83:50:e6:bf:5e:
e1:f9:d6:b4:a3:cb:76:3b:07:63:9e:9c:02:1d:26:00:30:46:
b6:7a:00:2f:c9:4a:31:ad:1d:bf:db:40:f7:0c:18:ae:6d:d8:
e0:07:6f:16:43:39:fb:11:08:15:bf:1c:26:3c:24:95:74:4e:
04:1e:72:be:dc:88:ae:2a:d9:5d:e1:2a:c3:6a:ad:55:2a:8d:
ec:ee:48:ee:89:2c:91:27:3d:8a:76:b7:8b:ad:6a:fe:3d:13:
0b:59:84:55:4e:b5:fd:02:3d:8b:6c:1f:78:0d:d1:a7:59:44:
bf:47:20:d1:fb:84:9a:c3:a6:d9:08:e1:23:d4:a1:23:d1:70:
e6:9c:54:96:75:2a:36:03:74:2e:40:36:c5:dc:8e:a6:75:9f:
c9:7c:90:ef:99:a6:78:90:9a:ac:a4:bd:cf:60:f0:5c:39:84:
23:93:b8:1f:45:18:ab:f2:a3:cd:35:33:37:8a:b6:af:77:d1:
e8:f7:ad:0f:f6:80:c7:6b:d9:79:c0:ff:d9:1c:03:cd:9b:80:
d3:c8:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:01 2025 by rpki-client