Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: mPDsguic+qmbmXoBY+9/o7ieFhitIPm8rCDAjz7QbQM=
Subject key identifier: D1:5F:71:A2:6D:7E:B6:BD:93:96:BC:AA:CB:D7:3E:16:0C:0C:94:91
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 0194BC3C12718FD761DF7175645E1A6487AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0C77
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: L4yOlESI8fdR9WjrNj0pt8bvOiM.roa (hash: PjGLNOQOqdRe8JNO68TKc2teWeNxY1n93CJQ5L6+wdo=)
2: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: JrErQwgJT0VWGP9GWJnqjcu7slzrf/dj6HBBq//bdkE=)
3: r3p8XMwcqAmXyonA67gG5KyDMk8.roa (hash: W3LtjBTfw8JpwVLfBSb4wvoIcLS8m9n94Jp8osd+AvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:71:8f:d7:61:df:71:75:64:5e:1a:64:87:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=d15f71a26d7eb6bd9396bcaacbd73e160c0c9491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:27:9b:68:d5:10:48:3f:13:d2:e2:62:4e:
23:50:f7:2e:fe:fa:01:8a:7a:ca:af:f5:5d:cb:e2:
b9:e7:5e:10:b7:e6:3e:f1:90:64:dd:4d:16:e9:68:
19:19:61:e9:83:eb:4e:f1:01:a2:fb:0d:a0:1a:12:
af:28:75:4a:e7:00:f7:57:dd:c3:f1:43:2d:ab:e5:
dd:7b:2c:a7:f1:fe:b2:2c:e6:ac:f1:fd:fd:0a:a7:
e4:1a:fc:e6:0e:85:23:37:4c:f7:16:91:d3:62:62:
ee:a7:e6:41:b0:0b:4e:e7:86:64:13:b5:0e:ba:28:
2a:e1:4a:42:ae:a8:16:09:bc:19:2c:16:ec:36:ae:
f2:c7:75:6b:08:76:48:d5:aa:b6:22:ac:bc:13:ba:
84:df:65:02:a4:5d:43:78:80:b1:fc:48:25:2f:ed:
d3:f7:e1:cc:09:9e:05:49:b3:b4:f9:b3:a1:ac:6a:
f4:51:dc:9b:f1:88:b1:5c:bb:ac:7e:27:3a:82:66:
70:8d:ee:19:79:e3:f3:c3:22:fb:16:10:ca:b7:cb:
93:f0:06:e8:b6:06:69:04:fe:ff:1f:ee:4e:e2:b9:
58:63:30:35:dc:e9:ee:60:af:35:2f:ef:3c:05:fd:
c1:9a:7c:7b:1e:f8:be:81:34:b8:03:24:80:e1:86:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:71:A2:6D:7E:B6:BD:93:96:BC:AA:CB:D7:3E:16:0C:0C:94:91
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:48:89:c8:61:c9:24:28:c6:b3:77:8c:ca:f9:b5:ff:84:
73:25:99:2a:d2:0a:56:4f:06:fe:91:f5:4e:73:57:55:4c:a9:
a0:20:e9:20:d0:5d:6a:6f:e3:99:75:0d:ad:11:81:6f:13:a1:
ec:40:f2:ca:6b:ed:4b:5d:04:33:22:b4:b2:db:ff:79:bb:39:
cf:ec:10:36:9c:07:d9:b1:02:5b:68:37:3e:4a:69:9e:c5:eb:
92:1b:cc:de:46:72:3e:e4:5e:a6:43:6c:50:09:13:fd:50:b7:
19:56:ef:2e:a5:a0:cb:c6:d7:12:b1:ba:72:8f:29:20:32:42:
9f:21:e4:c3:87:60:c3:13:47:dd:02:f1:6a:24:96:45:7e:66:
85:db:22:ca:f5:98:05:05:82:e4:18:53:55:b8:5a:09:db:6b:
2e:01:d8:7c:a6:be:83:ef:9d:56:0d:43:e3:19:35:dc:ff:d3:
07:be:26:b8:1b:0b:7b:83:ef:fc:7a:76:3f:06:51:eb:44:4d:
2a:a8:af:f6:5d:65:ce:dd:5b:f1:6d:40:88:86:e8:d7:53:ee:
24:95:ce:2a:8b:f7:e2:c7:7b:9f:9c:fa:64:00:67:5a:49:e1:
e3:ca:ce:9c:77:9f:b7:05:61:f0:ce:1f:c9:58:d7:b5:83:05:
39:85:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:09:26 2025 by rpki-client