Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: cflydKLfDjHBPCctFnKrptv66BCRyFxt/OxQCogQwPk=
Subject key identifier: 76:E0:85:B1:FF:DB:B2:96:19:E6:2E:D3:01:C1:1B:5C:90:89:80:B5
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 0194BBCEACBF5217A314289B6A995833F6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 0892
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: TJ/MUR0LgXqE9G65o7R9kAwj851oM03KiWQMNCyfaZc=)
2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ac:bf:52:17:a3:14:28:9b:6a:99:58:33:f6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=76e085b1ffdbb29619e62ed301c11b5c908980b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:42:f1:02:0c:94:2a:ac:6a:36:ce:60:5c:
9b:b0:e8:60:12:e9:d1:e1:67:13:a4:0d:f7:5b:30:
99:df:06:69:c7:8f:1c:7a:73:13:04:27:af:00:a0:
13:57:4c:3a:a9:80:68:c5:32:fb:c0:b0:d1:ab:1d:
57:6b:19:23:49:8d:9a:1b:3e:13:31:ca:8a:f8:fd:
3d:e0:82:c8:52:5b:64:57:56:23:7b:06:a9:df:26:
18:23:9b:cf:59:84:5d:54:b7:5b:0d:14:64:5c:3e:
a2:fe:26:9b:61:ad:58:69:17:ca:cd:91:7d:35:84:
3f:88:ec:e9:f0:6e:ad:3a:0b:ee:43:66:86:5c:c4:
b4:97:aa:74:28:eb:23:40:77:fe:82:5d:c0:c9:b5:
f5:7d:14:3e:81:29:26:9d:98:55:0f:c4:cd:b1:5a:
50:fe:2a:1f:40:fd:ae:cc:a3:dc:f9:7b:40:ce:8a:
7b:b6:de:ef:a0:2f:92:0e:8b:4e:15:0a:60:13:63:
c8:c6:19:3c:f3:95:c9:ce:2e:41:c5:fe:ea:26:1c:
ac:92:aa:bd:e1:5c:fb:de:cb:e6:91:d7:6b:e1:16:
d1:b2:d3:11:c0:13:81:52:72:18:2f:e8:6a:96:f9:
bc:2b:5e:a8:f5:a1:ad:64:8d:8a:3f:35:fd:db:4f:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:85:B1:FF:DB:B2:96:19:E6:2E:D3:01:C1:1B:5C:90:89:80:B5
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f0:03:c3:d5:1b:b3:56:7c:41:52:6e:3b:d8:56:71:7a:a7:
1f:0a:ca:55:ba:1c:51:f1:36:ca:5e:48:a6:9c:61:39:c6:9e:
5a:cf:3c:84:94:26:a8:cb:bb:92:78:6b:72:f6:1a:b0:f7:76:
a9:9c:62:c3:08:d1:b7:53:4d:9a:7a:82:a6:38:49:a5:79:55:
d4:98:72:a4:b0:60:e9:f9:3b:94:63:ab:d5:3d:e2:8d:24:9b:
a1:e8:3b:8e:cb:21:58:cf:98:00:76:0b:33:41:15:97:af:d0:
70:65:2a:0a:1b:67:2a:84:05:43:ed:89:24:6c:cb:24:65:73:
1d:ab:55:da:dc:90:dc:ab:93:9d:ce:00:ff:71:f5:ad:b6:e3:
63:7c:1f:8f:b6:41:0b:46:69:45:fc:e5:c7:6a:3c:e2:67:dd:
85:dc:b1:93:c8:f1:ab:94:65:94:8c:d3:ed:1d:47:e5:b7:f3:
27:33:af:76:53:4b:54:a4:6e:16:9b:be:57:97:04:89:1c:f5:
f4:a4:b0:d8:65:e3:84:7f:2b:59:1f:eb:81:77:57:05:d0:ae:
31:4f:8b:1f:2f:be:f3:86:2f:3d:c3:13:02:87:45:b1:d7:ad:
b3:6d:d2:f3:c9:f3:30:cd:83:ea:8f:52:5f:c0:e1:a2:30:83:
25:ff:41:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:38 2025 by rpki-client