Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
File: KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft (raw, json)
Hash identifier: IT/+3PW49kRxhmVZyTM8+ImwCsfOaCFm0jYbx8ow4Qs=
Subject key identifier: E9:EB:CB:6B:26:AF:99:E0:DE:A0:56:32:D5:8C:17:25:F2:57:28:58
Authority key identifier: 29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
Certificate issuer: /CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Certificate serial: 0194BBCE5763D0831943105318946C11704E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
Manifest number: 06B8
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: IrS-qV3W0Ik-KE138sR-ycmjsj0.roa (hash: ZrhZqy7V3sNpl24EYUX1sc+YyDytYvN7JDm/U17ihTc=)
2: KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl (hash: azofwkna2+xLpNETZ/wB9doZ8Pw10vqyBDf9TVb2Cio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:57:63:d0:83:19:43:10:53:18:94:6c:11:70:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=e9ebcb6b26af99e0dea05632d58c1725f2572858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:81:cc:ca:31:ed:3b:84:86:75:af:ce:dc:
91:8f:45:44:9a:a7:fe:c0:c1:1b:5c:e2:d6:c7:c1:
21:f7:a0:62:fd:0f:a6:4e:1e:6a:20:e7:45:e7:f5:
91:eb:b5:ce:9a:d3:8b:a1:75:67:70:c1:a3:f0:06:
72:00:67:7a:55:31:2e:c2:fd:e8:90:81:eb:ed:94:
f2:97:2a:9d:29:7c:15:55:2a:93:fa:a2:e7:b2:46:
3f:1b:a2:b2:c3:56:20:56:31:e1:d4:71:24:6a:b4:
af:03:8f:fb:85:ce:d6:a8:a9:db:22:95:5a:54:64:
06:53:a8:d5:8f:86:5f:62:31:e2:f3:3e:43:b3:3d:
2d:31:06:64:e1:90:f6:24:4c:50:32:c3:0d:c9:95:
e5:6d:18:34:bb:b1:6c:c2:5d:96:de:88:44:82:6a:
1c:41:d2:65:cd:c8:e4:3d:2e:03:8d:27:89:73:7b:
dc:10:aa:f1:48:02:6a:11:ef:78:b8:a4:5c:ef:e8:
76:50:7b:12:39:79:87:50:f8:8d:58:b0:ba:a4:55:
b0:ad:74:b5:38:a3:bc:9f:b3:03:1d:5d:08:90:eb:
d2:52:dd:52:e1:94:9f:3f:0f:d8:17:22:f9:d9:e2:
8b:f1:a4:0c:8b:2f:5e:b5:55:da:70:c0:56:e7:fd:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EB:CB:6B:26:AF:99:E0:DE:A0:56:32:D5:8C:17:25:F2:57:28:58
X509v3 Authority Key Identifier:
keyid:29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3d:b7:a1:d2:18:34:45:71:7d:a4:c6:91:d8:76:9f:03:76:
b3:89:b1:87:3b:68:b6:a6:f3:4f:0a:a4:5f:8e:2d:aa:30:94:
0d:19:3d:4b:16:9b:d5:66:85:af:0b:0b:22:da:f6:21:1e:c9:
58:22:3a:bb:5d:3a:b7:17:1a:04:d6:cc:64:01:89:86:35:df:
85:b6:59:db:29:d6:6a:c0:a7:89:cf:b6:9d:5f:e2:88:60:3a:
31:34:f2:22:04:83:d4:8f:23:2f:dd:55:43:af:1c:94:32:c5:
cd:51:64:c7:e9:0f:93:e5:5c:4b:0a:cf:e1:59:82:95:49:47:
5e:78:5f:0b:f2:aa:0e:c2:42:8c:f7:ce:cd:92:5c:9b:3e:e3:
2d:51:8b:30:bf:54:4e:00:64:09:00:6f:46:a2:aa:d2:a9:e3:
6f:fa:9a:47:2d:e4:42:fa:eb:10:aa:d1:a4:07:7d:07:a1:7c:
4b:bd:dd:f1:24:53:68:8e:50:73:5a:5c:2f:9d:9d:c5:f3:49:
47:85:d9:90:12:f6:06:34:eb:b7:5f:1b:5d:51:0e:93:61:3f:
f8:c2:7a:14:72:ce:ee:45:f1:14:9b:6e:4c:77:1f:54:30:1c:
b4:4b:ee:fa:6d:b4:18:e9:45:a7:a0:3f:4a:97:82:52:5a:6f:
e2:fa:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:53 2025 by rpki-client