Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: rDe99VplzNMnCWL9y7ziPqxH6dS2pHcKT30U8KCs1VQ=
Subject key identifier: 49:98:D2:FB:E9:F7:AA:37:80:A2:DA:0C:F4:40:2E:4C:A0:9D:28:2B
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 0194BCE087E9EBE7E8A8E22FD4BC73CD8EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0501
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: 3Xz88jjeAy/Up66VmmMUvEto7lxCAYxAhanlOajc/Bg=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:87:e9:eb:e7:e8:a8:e2:2f:d4:bc:73:cd:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=4998d2fbe9f7aa3780a2da0cf4402e4ca09d282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:f4:b6:09:6c:92:5e:3a:63:4b:86:15:62:
9d:4f:95:8d:ee:d4:11:19:5d:03:27:41:d6:ae:a9:
29:02:a0:32:83:da:d3:eb:a1:16:78:42:96:3c:6a:
a2:fd:ff:41:cb:be:84:f9:87:cf:d0:c1:cb:db:41:
cd:9a:29:30:b5:d2:f0:f5:00:6f:0d:4f:6b:84:9f:
4b:9c:13:a6:d0:df:19:6f:d8:b8:ca:e2:5e:e4:41:
39:9d:14:34:79:07:5d:bb:f5:98:a1:99:66:76:53:
9c:f5:fe:f8:7e:00:c9:9a:8a:d4:e6:4f:ee:03:7a:
62:80:88:a2:e6:ae:bb:c4:74:fe:f5:c2:ed:22:d7:
4d:31:27:9d:de:1a:fe:25:78:04:13:82:bc:69:83:
c8:74:5b:87:18:20:22:cd:8a:bd:e1:d6:78:d2:8b:
95:81:49:00:f7:5d:b0:87:f0:10:f7:db:0a:db:16:
65:f4:91:04:2a:dd:77:03:94:d7:3e:cc:6f:e7:79:
ec:af:13:47:ea:8d:cd:2c:59:12:c8:ca:ad:10:4e:
61:5b:bc:99:1c:61:99:59:34:36:85:6b:23:b7:7e:
bb:6c:9e:5f:29:1d:6c:71:f9:bd:a6:44:39:01:1d:
fb:95:48:01:45:6e:97:77:2e:02:dd:91:bb:f6:72:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:98:D2:FB:E9:F7:AA:37:80:A2:DA:0C:F4:40:2E:4C:A0:9D:28:2B
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:f8:d0:8a:8b:39:e3:c4:03:29:03:56:18:64:ca:bb:74:
87:6d:f7:a7:fd:2d:42:2f:c4:30:f4:f3:84:f4:a2:26:87:63:
ae:43:f2:4c:7f:0c:ee:94:26:21:86:27:a8:92:67:d8:6b:a7:
1e:5d:0d:aa:76:ed:55:6f:1d:20:c0:0b:13:da:8c:05:a7:d5:
ca:7d:ba:f4:d9:ea:c0:fd:cd:13:3d:b3:9a:e0:fd:73:ec:a3:
cd:39:c3:10:db:3e:a9:94:64:63:82:08:62:12:10:25:c7:fa:
85:4c:f8:c0:35:0c:1a:f5:0e:4d:d6:6f:86:38:35:9e:99:a3:
d9:c8:8e:78:a8:a8:6b:17:62:58:5c:75:c9:59:3b:51:0c:7c:
41:47:b1:90:2c:71:72:2d:5f:be:80:56:3f:7d:85:b3:07:48:
a0:0f:99:b8:c5:df:23:09:1c:2a:34:00:2f:0b:02:77:a4:55:
0b:d1:1f:d9:f3:73:2e:59:9b:60:8b:20:2a:7c:8b:f5:59:a7:
ec:fa:b9:5a:93:1d:9d:01:da:d8:25:c8:bc:b6:c0:04:09:ac:
bc:76:58:be:d7:ba:85:af:59:d9:cc:61:a2:5c:25:32:32:fa:
bb:17:43:81:38:75:0f:85:82:59:f3:d5:ce:a0:88:65:c5:e1:
bc:0d:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:31 2025 by rpki-client