Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
File: kjGbzZsJqYSwcOLvWI_8-otzyKI.mft (raw, json)
Hash identifier: YKrPLXWXMUzvclhWQ5THnYqZMWaz0MvdEvMhCQuM80U=
Subject key identifier: 72:9D:07:2C:DD:83:66:89:BD:10:97:CD:F3:C2:08:0A:DA:FD:88:DB
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 0194BCE0CC2551EA0BECE0B7BB9A103D27CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 7bvAiXOGGN5F75C5TPaLkcrMrJ0.roa (hash: zIEK7IKs3VnTSjIwiOz0gcDm6zKT0vC9tWF2HOlgyJ4=)
2: f7LoQlg3wh_mDB9M8tJRPc9pjRg.roa (hash: TGm9AlTdN93bdUpETbwDkFaVCWLQGhWDE7lXzrUzU44=)
3: fJSSSYyH6Ee1wixn2iid6CkKbD4.roa (hash: r5RuGMIc1UBm/9bI2dDIxiQn3TUA1FzP7ZQdx2BDTw8=)
4: kjGbzZsJqYSwcOLvWI_8-otzyKI.crl (hash: VMNm6nwJM5YT5ObkF6vWAMQFVkjJ0hXzwjvExioRfXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:25:51:ea:0b:ec:e0:b7:bb:9a:10:3d:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=729d072cdd836689bd1097cdf3c2080adafd88db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:f8:11:cc:38:01:18:25:76:e2:f7:19:7f:
1d:ca:73:ff:8e:32:8a:6a:4f:48:d6:c1:41:1c:73:
84:0d:f6:cd:b7:75:2f:cb:3d:78:91:56:ed:cc:76:
93:8d:f9:2c:18:81:b5:7c:25:b3:8d:df:a0:7a:7c:
80:0d:38:7c:4d:87:31:7a:02:7b:84:a0:3e:d4:d9:
d3:62:33:60:a4:dc:d6:7b:57:e5:4b:b7:8c:15:1e:
c6:9a:24:a3:34:3a:48:de:7a:0a:44:d4:f4:83:51:
eb:d2:d6:69:33:e9:3b:51:88:eb:4c:57:26:5f:4e:
1d:72:46:36:53:c8:bf:b8:f8:6b:a8:d5:37:5a:a2:
e1:4a:49:58:73:ee:da:f8:fb:0f:74:29:6d:b3:dc:
92:25:69:e3:fe:d8:ba:64:48:d5:81:1f:b2:63:f3:
a6:84:18:6f:14:91:ac:ae:0f:ce:eb:df:69:4b:a4:
b4:f0:ac:58:ab:61:ee:70:62:20:76:50:2e:d4:1b:
8b:c4:34:38:8f:cc:67:3a:19:bc:5d:a2:70:6f:e1:
18:61:41:c9:a7:40:ff:24:c0:18:45:d7:a5:6a:4a:
71:fb:26:80:ee:8b:3e:25:f4:62:eb:32:b9:3d:40:
a3:89:8b:04:d2:0b:04:c6:2e:0f:2c:4e:8e:f0:46:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:07:2C:DD:83:66:89:BD:10:97:CD:F3:C2:08:0A:DA:FD:88:DB
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8a:0a:8b:0e:1b:56:1c:c5:14:17:cc:73:4c:4d:d9:d6:ab:
7a:6e:f4:90:62:91:e4:f4:0a:e9:42:ae:f0:b0:be:54:7e:95:
37:86:44:f4:5d:aa:e0:f0:7f:d3:89:29:10:be:20:f4:0e:8c:
19:37:cc:5b:9e:66:b7:c9:9f:5a:8e:d5:fe:05:20:59:d3:e2:
7e:09:86:d5:b1:f8:7a:c6:b0:76:be:47:ff:3c:36:e4:39:2a:
9e:e7:f1:74:7f:c4:c1:d7:4f:8f:d9:4c:81:28:be:4c:42:1d:
db:84:67:02:b7:d2:90:05:d2:3d:c7:1f:5c:3d:9d:67:e0:92:
8e:e0:08:5b:52:1c:0e:c9:26:a0:84:e8:52:af:3e:ec:cd:8d:
b9:55:f0:92:bf:fc:bb:28:14:bd:f2:3d:e7:72:74:10:1a:ec:
ae:f2:d6:7c:ee:f6:76:15:43:fa:a7:ce:52:c1:ff:c2:4f:9e:
8c:eb:06:17:8d:d7:db:7a:45:68:9d:fa:72:87:3f:d6:1e:c5:
4a:c1:a5:c6:c3:73:78:d2:37:1c:e2:8f:49:49:45:89:ff:b1:
3f:6a:b3:d4:fd:c3:1c:03:90:67:67:05:24:41:b0:5b:f0:29:
99:6b:d9:69:f2:13:4c:b9:ee:e3:86:13:c7:65:b7:a2:48:dd:
19:95:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client