Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: 8EuC+encZ7lHyOXQlAEdWbonDsvepPls11u/9+GTqYk=
Subject key identifier: 0F:4A:83:A5:54:DC:05:88:95:AB:84:9F:DA:7F:B1:58:6B:67:CF:66
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 0194BD17E93E3AC9C602DD8500F4E6C6A2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: NfGQ5+WKd+NuSjNKat0NvlyrbLz3TVuZ/fgU5Tfb2+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e9:3e:3a:c9:c6:02:dd:85:00:f4:e6:c6:a2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=0f4a83a554dc058895ab849fda7fb1586b67cf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:78:ce:37:02:83:2e:cf:13:7d:de:cf:f3:
9a:0c:06:63:ab:72:13:ea:25:d5:4f:68:34:ae:a1:
80:a0:97:23:54:55:fd:f2:65:ec:fe:f2:65:52:be:
c6:0f:c5:25:ab:85:74:e8:a6:85:0b:bd:ef:3d:a1:
bd:11:0a:a9:47:84:ca:49:a2:90:14:00:5e:da:80:
58:b6:10:03:c7:38:7c:27:20:9d:69:2b:e5:b8:8f:
c1:fa:88:4d:f2:e9:15:84:b6:17:14:79:bb:f4:12:
c4:6b:c1:c2:b8:5b:8d:5a:44:22:3e:73:19:18:c9:
2e:92:2a:c7:42:67:c0:d8:8f:48:53:de:6f:f5:9c:
ea:df:92:39:6a:17:7a:c1:8c:89:89:42:89:96:09:
c3:e7:a5:53:2b:63:e0:64:14:99:89:38:9c:76:13:
ce:7e:1f:93:9d:1d:0b:8c:4a:0a:ed:3f:d8:17:c2:
71:48:55:69:05:02:33:d2:3d:18:ec:16:e4:1f:71:
c0:c2:74:67:60:6f:7f:20:83:8f:0b:65:2e:55:e6:
21:6a:bb:7f:c0:3a:d4:10:0a:37:a0:5c:2a:57:c4:
0a:5a:15:5e:64:2c:d2:11:4b:f1:7e:6c:45:a4:04:
4e:36:1c:c3:fe:ad:41:83:6f:f2:4f:78:71:ca:7b:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:83:A5:54:DC:05:88:95:AB:84:9F:DA:7F:B1:58:6B:67:CF:66
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3b:c3:d8:39:9b:12:05:89:05:c2:a4:0f:a4:35:b5:be:f8:
25:56:3f:1b:26:e7:ef:1c:dc:3a:89:e7:b8:59:27:d4:77:d6:
9b:08:3f:dc:ec:f7:63:b8:ff:3c:e1:4a:f7:1a:cb:55:95:50:
84:40:92:06:be:78:9a:31:f4:da:06:48:62:c9:2c:d8:b5:02:
45:dc:24:be:3c:fb:b5:d3:26:98:ce:02:58:f0:7d:3a:29:3f:
01:f5:74:6e:1d:49:e6:f8:32:83:74:49:d1:da:79:f9:ed:f4:
7b:79:d9:06:4e:c8:64:92:e3:91:1e:12:c2:57:f9:1a:e5:ac:
cb:a0:a2:f5:d0:e5:e9:cc:98:a0:04:0f:7e:28:3c:53:e3:50:
ff:b3:d2:1e:b2:81:bc:38:f1:97:2e:c4:2f:b2:0e:08:f8:b4:
e2:82:62:05:c1:fe:be:f5:e5:30:9f:63:0d:ca:dc:87:cd:55:
4d:19:9e:10:79:06:fa:94:1e:66:ff:94:2f:e0:7f:27:97:e5:
6d:40:af:38:43:de:e0:6b:31:3c:7c:84:46:6f:8a:c5:3e:32:
9e:66:f6:04:14:fa:3b:3a:90:84:f6:3d:68:09:e2:b4:23:0f:
4d:50:91:4a:b9:69:05:12:44:7f:84:bd:1e:89:e0:93:0f:1a:
0a:6d:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:36 2025 by rpki-client