Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: koy1RRUEO7nkHWELteYIeXTfP5ToborTk2bV7dc6YYg=
Subject key identifier: D8:45:8B:73:1A:F6:31:79:99:4B:A8:F4:98:2D:8F:8D:DE:68:7F:DE
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 0194BCE0DBF53F21D7CD848DDA798F10F83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: C2u2nRBdNuxUokMBWCHV9JQ/bKVUKahICiHFT6aJ9vw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:db:f5:3f:21:d7:cd:84:8d:da:79:8f:10:f8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=d8458b731af63179994ba8f4982d8f8dde687fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:d6:a9:1d:19:7b:14:2b:0e:4c:83:2c:17:
ab:95:22:94:70:cc:c8:97:23:91:d6:c1:23:ef:39:
2b:77:a8:af:34:be:42:88:bb:93:25:ce:11:56:4e:
2c:4a:8f:f0:64:87:47:2c:6a:24:da:29:6a:cc:bb:
96:1d:f8:40:b8:9b:5e:e3:4f:1a:52:d6:af:6c:38:
7f:80:a5:c8:cb:fe:60:27:b0:55:d4:fc:05:4b:34:
ea:28:d7:17:e9:5f:c0:68:51:fc:8a:70:7f:c4:97:
96:2f:c1:77:08:11:1a:a5:68:88:03:f5:c9:50:72:
55:7c:93:fc:8b:15:09:56:36:01:02:ed:64:16:f1:
16:86:fc:38:ec:4a:f8:65:24:fd:71:0a:18:80:66:
98:fb:d6:bd:7e:39:71:6b:36:a7:31:ef:4f:86:e7:
dd:b5:2f:6e:d6:67:e6:71:13:79:84:d3:c6:61:64:
b3:b6:15:90:1c:cf:9b:80:23:63:96:03:07:66:60:
60:a8:df:c4:70:c6:44:36:ab:6b:95:67:f0:c9:dc:
a1:ba:81:0f:5b:40:21:d8:c6:2c:32:24:ca:a2:9d:
10:41:ee:98:b8:db:b5:f8:43:07:47:e2:c6:15:9b:
5b:17:b9:a6:86:0a:cc:b5:ae:ce:54:83:19:12:01:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:8B:73:1A:F6:31:79:99:4B:A8:F4:98:2D:8F:8D:DE:68:7F:DE
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ba:85:6a:7f:84:89:67:65:14:c6:3b:ef:84:66:cf:ac:59:
6e:90:15:6e:d7:f1:ea:18:52:56:72:cb:15:5a:9c:b6:28:6b:
32:cc:a9:c2:11:86:0f:f3:4b:8d:0f:89:21:58:f8:ef:0b:a9:
be:79:7b:f1:e1:3d:64:94:c6:51:0f:a0:38:8d:57:1c:5e:5c:
bc:8e:d3:b8:82:71:bc:f7:b4:b1:6c:df:f5:b9:75:42:91:b9:
50:97:e7:c1:3e:fb:e0:c8:90:82:ea:f2:d8:dc:f0:9e:1a:d3:
89:ca:1a:19:be:f3:e0:ff:0b:08:a1:fb:83:9e:04:52:fb:51:
7e:f8:2a:cd:ba:83:39:49:56:31:84:1e:04:b7:e8:21:6e:85:
2d:b2:6d:93:f3:db:be:21:a7:23:39:19:dc:b2:69:61:a8:7e:
1e:ec:74:0b:0a:74:84:88:f7:e5:56:dc:9c:d7:d2:1c:70:48:
fe:d6:4c:c7:0c:e9:eb:0a:f9:7d:04:fe:22:d7:9f:47:62:0e:
fb:4d:b4:ef:b8:00:16:a4:6c:ad:75:ce:47:43:de:a4:29:36:
8e:4f:9d:fb:10:af:90:f7:e9:45:e4:93:3e:13:76:22:b6:78:
66:b7:7b:3e:10:52:ad:c9:35:34:5e:f0:e7:d7:34:81:8b:8e:
b7:85:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:21 2025 by rpki-client