Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: CiX7W2D5q3o958y4hCVrjiMCR94N2kIP9QVPYvJPgek=
Subject key identifier: EE:95:23:7C:8A:C2:63:E4:A2:97:67:55:53:00:14:2E:DF:BF:BE:EB
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 0194BD85A075D16C7C845B6D9F2C55108FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 03FA
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: FN4mbfTwvi8Xhlnmnlqh5KIO2hw.roa (hash: Z0wCpt0sE7ChkFPlKeGXtBFCnXabrU9fj1GXtnw3GDg=)
2: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: Z4qZXFXVWvNBqShLX4IX9or616Vj7uTVRsUmB6pZJBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a0:75:d1:6c:7c:84:5b:6d:9f:2c:55:10:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=ee95237c8ac263e4a29767555300142edfbfbeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:b6:f1:c0:d7:5a:85:d2:86:3b:d8:cc:b7:
38:d7:f5:bf:8f:15:19:41:1e:6b:7c:9f:ba:91:ee:
58:91:06:1c:1b:e4:78:b3:e1:5a:2c:39:6a:b3:31:
36:49:58:3d:e5:41:e2:b0:43:a0:b0:74:69:f0:d4:
ad:80:4f:3d:d3:3c:65:2a:ed:c8:62:93:81:2e:77:
a3:1a:ce:5a:9a:6c:2c:84:21:6c:49:b2:01:f7:a3:
eb:3b:e8:cf:59:f5:07:79:fe:77:89:3a:b6:df:5d:
f0:8f:af:04:95:fa:b2:b2:67:70:19:af:99:a3:ac:
5f:1a:df:e7:6b:1f:66:e1:7a:36:ec:34:e8:79:c2:
57:4c:73:90:45:42:5f:1f:29:42:b7:61:d4:1a:2c:
c0:17:be:11:5e:c7:87:3c:0f:35:b7:ba:af:b9:a6:
b4:7d:7a:76:6b:0c:85:6e:96:0d:80:55:73:77:85:
27:b0:4d:f4:38:f0:56:6d:47:07:f0:dc:72:e4:04:
45:c0:a3:bf:37:1b:ab:11:b6:b7:ce:55:fd:1b:68:
fa:6a:c9:32:f6:62:be:a1:08:87:cd:02:62:b5:88:
de:e4:a1:d1:af:65:0d:09:22:c6:10:0d:5e:8f:e2:
8e:1d:23:d4:e7:a2:f9:34:96:29:d0:0a:92:89:7e:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:23:7C:8A:C2:63:E4:A2:97:67:55:53:00:14:2E:DF:BF:BE:EB
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:67:af:39:04:6e:fe:13:76:67:61:38:eb:ea:37:c5:09:
7e:bb:bf:64:4f:ec:f5:f6:91:3b:d1:ee:24:7d:72:98:e4:d3:
2b:dc:97:c2:c4:0f:45:38:97:76:04:3b:fa:c8:a0:0a:fe:fa:
bd:8a:4e:3f:7d:ed:7b:ea:fb:0f:9e:a5:92:6d:fe:2d:87:c0:
aa:02:ce:21:24:a1:dc:d1:a3:be:ad:09:db:e6:c7:13:f6:bf:
81:9c:c5:98:9d:b7:1b:97:96:70:c7:99:a1:60:6c:1d:d5:a7:
81:7f:1f:e3:fd:3e:2d:9f:25:80:ca:ad:ce:4e:6f:c9:d1:3d:
62:bf:95:21:28:05:2d:aa:27:22:b8:9a:d7:01:f2:31:e6:cc:
95:24:b7:34:5a:af:2a:82:81:e2:04:28:66:bc:4f:f4:d8:35:
90:48:a4:42:f0:4e:95:5d:74:f7:c9:35:7c:1d:a5:c8:f9:00:
26:22:b7:d1:f0:ea:67:25:2c:72:6e:54:62:bb:cc:e8:23:85:
f2:7e:c1:22:3c:03:11:48:61:7f:e1:89:85:bf:9a:20:af:ef:
5a:e5:74:7f:fb:cd:0a:b5:27:74:dc:6f:64:62:1c:1e:ba:df:
7f:b6:df:76:7b:03:11:3f:3d:d6:c4:a0:d0:9f:9f:e4:5a:d2:
24:de:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:43 2025 by rpki-client