Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: GgqtxEXDYBcypKWTQM4/764DOADhv33062rRml37yhQ=
Subject key identifier: AD:B2:C9:07:2D:4C:53:F4:7A:69:2D:88:3D:78:A0:60:84:F0:C3:51
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 0194BD177672BF39E59BAB85689D8058B5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: 0rbD8r3KlIencqTxY4EcAxXbe8tMncZJK6fvlJBnvjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:76:72:bf:39:e5:9b:ab:85:68:9d:80:58:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=adb2c9072d4c53f47a692d883d78a06084f0c351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:1a:e1:6d:95:b0:dc:6d:af:4b:88:f1:02:
1b:30:b1:00:c6:5c:e5:82:6c:2a:d4:df:71:5d:5b:
95:96:a3:a5:22:a6:dd:81:f9:1d:01:1b:ce:41:80:
17:6c:15:f8:9c:2e:61:85:17:6a:13:24:07:2c:4a:
5d:c1:bc:cb:28:6b:6e:d0:ba:dd:1d:d3:6c:92:65:
5c:20:fe:db:da:35:20:a8:1f:5e:d1:26:26:4c:90:
06:1c:d9:fa:4a:10:8a:d3:1b:7e:13:06:5d:9a:3b:
a6:be:76:37:38:1d:de:0d:9a:84:ea:3a:08:5b:6c:
c9:fa:5f:f8:ad:36:e8:2e:d3:f7:56:c2:20:b7:08:
f4:dc:91:18:24:76:b4:98:a5:d9:4f:fa:ad:7a:fa:
4e:01:b0:5c:82:4f:22:d1:b2:f1:9a:e3:cd:dc:ac:
32:51:d5:1c:45:de:9d:33:26:06:66:2a:a9:b7:73:
86:a5:88:cb:ed:e5:d3:d1:1e:0f:d8:f1:c2:99:ae:
11:6a:67:ef:49:cc:73:c2:88:43:c8:b5:27:a9:76:
fe:e3:f0:40:48:32:3f:d1:03:27:30:b6:91:71:a0:
1c:23:a2:4b:c8:1c:a9:96:e5:c3:72:92:7a:28:51:
10:bb:89:0e:57:54:0d:f8:a1:e3:a8:45:19:a5:c2:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B2:C9:07:2D:4C:53:F4:7A:69:2D:88:3D:78:A0:60:84:F0:C3:51
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bf:8d:10:d9:21:5f:e7:bf:86:56:40:dc:2d:5c:1b:4c:e7:
38:aa:7c:64:ae:35:27:29:8d:e1:ac:38:de:4d:d6:12:4c:bf:
31:37:e4:aa:b0:b5:b1:00:1f:b7:46:91:78:d6:ff:22:26:16:
59:32:89:8e:87:b7:67:15:92:54:eb:b1:33:f9:e4:e2:29:df:
6d:63:41:a9:bc:b6:93:e2:15:c8:ef:c6:77:d1:40:17:7b:47:
b2:41:44:f6:00:75:5a:ff:8a:fc:a2:53:ed:d5:d9:28:02:80:
b1:40:39:89:8c:b2:27:3b:ab:88:9a:db:3f:db:f9:9c:b4:bc:
25:b8:a5:a4:ac:2f:87:ad:0f:ab:83:75:00:c9:58:db:3c:28:
d2:6c:76:66:7b:ec:6f:5d:36:3c:22:e7:90:a4:f4:e1:da:36:
d6:2b:ac:a3:6f:c0:20:d7:6b:e7:f8:a0:fc:0f:9d:9c:10:f4:
f4:f1:fc:2d:02:1f:fc:96:4c:02:18:fc:98:73:35:c1:7a:43:
4d:59:56:e2:35:d5:e0:c7:70:8e:7b:2c:dc:31:80:b5:d4:22:
3a:ed:37:b8:3a:7f:37:bb:7a:7a:bb:90:72:db:82:f3:34:f7:
95:71:e3:30:78:ca:53:d5:9e:3b:81:60:9b:f3:57:31:ab:16:
a2:b2:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:12 2025 by rpki-client