Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: GUe2KFjDcsDu1AhAUXmm9QVoozF3XTRfAaSFGWR5d5I=
Subject key identifier: CC:52:A2:47:88:2D:E4:27:99:45:6F:0A:F2:D7:1B:12:18:27:E4:DC
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 0194BD4E3DBA09ED6AD4200624D9BC32F680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 0FB9
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: FZZrN0FdL0gNs590dwayz0/hRvQRrQ6OveZd4OUURPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:ba:09:ed:6a:d4:20:06:24:d9:bc:32:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=cc52a247882de42799456f0af2d71b121827e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:2c:29:b9:f4:a1:ee:63:aa:4b:87:ce:82:
5e:6b:82:d6:6a:bc:60:16:a9:8a:02:2e:8d:fa:0e:
0c:7c:6e:38:9c:d4:c0:c6:f0:02:1e:3d:40:c6:33:
0a:7a:c6:28:dc:a8:7d:14:62:c4:73:4b:54:8b:a7:
67:26:c4:76:dc:92:7d:a6:cc:bb:b8:68:42:3f:65:
07:d5:a8:42:38:27:d2:a7:02:b3:b6:e3:ad:12:07:
41:a5:30:01:06:66:31:af:e0:20:3e:64:4b:36:b8:
05:1d:e5:8b:3c:8b:08:b9:68:59:1a:b9:54:3e:fe:
aa:af:bb:a9:55:47:a0:6a:6a:18:04:e8:9c:f0:41:
2e:be:f3:e7:1e:a2:3d:c6:a3:6a:33:e1:1b:68:20:
8d:4a:13:33:63:9d:ed:80:50:ef:61:14:54:14:69:
e7:3d:3a:6f:8a:72:26:e5:ae:54:a9:7a:71:66:bb:
4b:79:5e:70:f8:03:5f:b9:07:45:b3:ed:b1:8a:4d:
78:7b:c9:a9:54:3e:88:3f:96:75:5d:95:56:c3:f7:
b2:63:3d:3b:5e:4b:3f:b9:6e:b5:b4:0c:7e:c8:81:
21:b5:7c:7b:27:7c:c7:dc:f4:ea:65:0f:ec:0c:e8:
0c:cd:fe:1c:d1:0b:b4:03:87:12:26:f0:7e:9d:71:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:52:A2:47:88:2D:E4:27:99:45:6F:0A:F2:D7:1B:12:18:27:E4:DC
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:78:a6:9e:f0:df:b0:c7:df:51:f5:24:22:4c:76:fe:43:50:
30:ea:84:f4:08:18:16:e7:39:a8:17:36:ad:7f:73:7c:ca:17:
64:01:f5:15:be:3b:77:fd:54:6f:de:f0:cd:d2:38:51:82:0d:
75:3f:db:c8:32:31:ec:a9:72:dd:4d:e1:c9:48:42:b4:d1:af:
0f:84:25:ea:83:0b:7c:2c:f9:4f:4b:74:b6:37:13:65:64:b3:
4f:24:c2:46:e4:8d:9b:50:04:51:2e:d9:6c:0f:8a:1d:b0:5f:
2b:09:bf:e1:05:39:cb:11:05:05:e3:12:d3:d4:8a:a9:3f:4c:
04:49:2f:86:96:06:e3:62:e5:31:07:2e:ce:72:32:30:86:9f:
24:cd:b4:d0:95:2a:80:f2:42:6d:39:28:66:f5:63:22:78:ea:
76:ef:3f:e4:b0:9d:1c:3e:21:60:58:42:89:fa:12:01:8d:0d:
1a:e0:83:d4:28:ab:28:1b:a8:34:06:df:7d:96:ef:4b:43:5a:
8a:d0:c5:4f:44:7b:80:09:20:69:e6:f8:d9:89:e3:f2:29:04:
5c:3e:4b:46:3b:4f:4a:e6:3f:c4:c3:98:64:f5:d7:70:af:08:
35:73:6b:87:01:d7:11:e2:d1:92:68:97:e9:b0:d1:9e:14:b9:
8c:a9:ed:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:16 2025 by rpki-client