Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: 4CGyafPxXPePD+nrdWKRLBRrrGdsuH1yhTV5k36OuA8=
Subject key identifier: 25:4F:AF:42:7B:85:52:BA:95:E5:E0:F0:40:0D:D4:91:2E:2A:54:19
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 0194BC3C78165E89608BA5ED1165C1F41064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: DzfrvRrYjIriqFxXiJJ1qg8oo/dd7YAphTGd2UiK7TY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:16:5e:89:60:8b:a5:ed:11:65:c1:f4:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=254faf427b8552ba95e5e0f0400dd4912e2a5419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:01:be:5e:cd:60:d1:2a:73:42:41:e9:4d:
0f:04:36:86:27:db:dc:32:2b:e7:e2:f1:60:5c:35:
c7:d6:98:7d:08:b4:21:b8:2b:a9:99:1c:ef:cf:25:
4c:24:40:5c:de:85:03:e6:c5:3b:1c:f4:5a:72:b0:
1a:94:8a:3f:ce:b6:85:2e:42:96:3a:bc:2f:53:fd:
b8:70:7c:0b:af:a5:5b:6b:71:43:9c:e7:be:66:14:
c6:3b:14:20:00:0a:7f:38:50:40:bd:6c:27:86:09:
97:26:46:b9:12:ad:b1:ac:17:41:14:13:f4:a4:01:
39:e7:d1:08:41:be:cb:f9:a6:f2:8b:ce:49:ca:f5:
8e:a8:c1:d5:14:6c:93:0d:f8:69:90:c4:23:a2:4f:
da:25:ad:38:38:98:34:2e:62:7e:18:8b:54:0f:99:
ff:0d:c2:d1:ed:ab:cd:a5:a9:9d:de:36:bc:f5:48:
66:b9:62:2e:79:e1:03:f0:01:a8:d4:21:db:d1:fa:
5f:15:44:26:b5:24:1a:e6:d6:d7:1a:eb:81:42:23:
da:17:89:9d:76:37:0b:38:8b:70:41:82:e6:ed:13:
46:3a:92:8c:08:77:af:a3:b9:65:fc:eb:b9:12:1e:
92:85:4b:8c:45:dd:19:5a:95:17:86:d3:ec:df:fe:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4F:AF:42:7B:85:52:BA:95:E5:E0:F0:40:0D:D4:91:2E:2A:54:19
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:90:30:f5:a7:b6:2b:25:ff:c0:46:1d:15:97:24:ea:34:
4a:b5:33:d4:85:6d:ba:d2:e2:69:bb:a0:3c:1e:20:f4:37:3a:
35:7c:6d:f5:f9:5d:13:52:ca:de:d2:f0:ef:82:f8:ac:e0:7d:
57:dd:53:96:3b:fa:cb:7b:87:a0:0a:80:c9:38:04:57:37:c8:
13:f3:b2:04:cd:57:34:70:8f:91:fb:63:35:f3:58:c3:8c:95:
67:fe:e2:0e:f4:52:b8:63:e9:b4:e4:17:74:6f:c5:68:06:dd:
68:e7:05:40:4d:a2:02:a2:07:25:4e:6b:ae:bb:95:d5:be:cb:
83:b6:dc:8e:45:72:2b:31:74:96:f0:50:ac:05:0e:39:75:f0:
1a:de:e0:0c:68:fb:a5:8d:a4:2c:07:35:f9:d4:7f:0f:82:7e:
fc:8f:9b:25:ae:f5:d2:a2:71:55:53:bf:33:8b:1c:78:bf:ff:
a3:61:72:be:a9:bb:27:f3:70:ee:89:f9:0c:e9:fa:93:25:b8:
8b:7b:d3:62:b4:41:38:18:61:2a:20:bd:37:73:ee:70:13:c7:
13:2e:da:ae:cc:92:80:ec:d1:e6:5e:0f:1b:0e:f5:bd:0d:2e:
dd:fb:3a:7f:5a:2d:1c:b0:d0:b1:ed:e5:18:7a:fd:46:3d:c6:
17:2d:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:01 2025 by rpki-client