Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: +27s1GdOYLQR1+2wInq56mKAGal76aycb/1cy3N9PAA=
Subject key identifier: 3A:E0:59:F3:45:5D:6A:8A:0A:B2:10:9A:88:EE:78:61:C6:89:F4:A0
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 0194BD4EB5391810A08D628E109D35EC364B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 02F4
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: Zm7m8I8GQgZwixBN6joRzA32rJHi9uyFSRagM9FXXd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:39:18:10:a0:8d:62:8e:10:9d:35:ec:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=3ae059f3455d6a8a0ab2109a88ee7861c689f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:4d:4a:49:93:eb:b5:cd:12:f6:ed:39:3e:
28:55:7f:63:1a:88:c6:4e:37:34:b2:07:ae:06:1e:
64:df:33:f9:a1:08:5a:08:44:c9:b4:d8:cf:a7:c6:
58:6b:54:c8:2d:54:3a:1d:2e:10:e0:54:19:4d:84:
ed:6e:54:1e:a3:83:81:e2:1a:9a:f4:ef:0e:ac:49:
6c:82:83:35:df:e6:1d:cd:f3:e9:9d:74:c1:44:e0:
bf:70:31:a2:df:93:4b:a8:ea:e6:c3:ee:9d:69:e1:
b4:5e:c2:e7:8c:30:a3:2a:35:a2:2c:a1:d9:5c:7c:
15:af:8f:13:00:f5:38:4c:15:96:38:b3:33:a3:a5:
df:d9:47:40:c9:6a:58:55:39:a1:3f:96:12:05:99:
7c:07:c7:c0:f7:69:6f:2f:06:15:57:45:b2:9c:ee:
15:1f:bd:32:94:4e:1a:98:c7:d1:5b:c9:ea:1b:91:
e2:ad:34:3e:0f:a5:8b:d7:e7:4d:61:0d:e8:6d:36:
59:89:28:c1:81:9a:61:7e:73:e3:ca:65:2f:44:8b:
88:23:63:c6:87:18:5b:3e:fe:ce:e3:a5:62:53:d8:
bb:a0:f9:1b:11:45:eb:43:dc:c6:6c:f6:c0:31:f4:
76:88:eb:c8:a8:e9:d4:04:95:7e:6c:b7:a4:6a:b9:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E0:59:F3:45:5D:6A:8A:0A:B2:10:9A:88:EE:78:61:C6:89:F4:A0
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e3:ee:c9:14:d8:c6:5d:32:93:dd:8c:42:d0:65:11:02:d2:
ef:b3:a3:3a:22:de:11:63:af:94:b5:d9:2f:04:ce:b1:82:ff:
15:2e:fc:66:2d:e0:c2:3a:94:26:01:16:ac:5f:44:98:61:7c:
3d:e0:47:35:c4:4b:f3:49:7b:03:db:45:b7:10:01:8a:a3:e6:
1d:26:fb:9c:9d:9b:5d:8f:b1:ee:34:7a:dc:e2:3d:21:fd:aa:
dd:aa:30:06:67:51:5a:b8:e1:ca:a1:bc:8a:3a:d0:f3:45:cb:
29:92:b4:99:6b:bb:7d:51:ae:05:42:ff:17:3e:0d:0f:64:c4:
1a:66:b9:b1:4b:47:f1:cb:12:72:40:2d:32:a9:32:ff:fd:56:
c3:f4:41:24:03:95:22:a1:4d:c6:12:a1:7d:8d:32:d4:fa:e1:
7a:40:7a:5e:84:d2:6e:b2:f4:4b:52:6a:95:0e:e3:8c:44:77:
bb:46:35:2b:f6:48:b3:bb:a5:1b:55:f9:44:b6:f7:4c:5f:d3:
9f:f9:81:45:44:32:14:d9:93:da:aa:2f:3d:1d:45:68:54:ee:
2a:b8:da:b5:5c:94:fe:2e:d7:e8:a8:37:39:93:f3:a1:7f:ed:
92:6d:50:99:e8:ec:25:10:dd:8f:59:d8:a7:e1:75:4d:cc:11:
7d:a2:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:14 2025 by rpki-client