Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File: kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier: AmqXWXplxOAJtT9lKinGHJgkYwCFUS72M8GPtpoXR+Y=
Subject key identifier: C9:52:88:D3:74:2E:7F:52:8A:BB:CF:91:17:9D:6B:63:50:F2:39:D6
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial: 0194BC3C22213C82E248E15BE69A779705DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number: 0CC7
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 9Bw4s7L1PZyJ0cmK8dHggvZkyc8.roa (hash: k8G5zSf+pp8Di/1i1Rk8bBBXkqYoG95ba1/+ZDXAe1E=)
2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: Yz6sOylos+L35U2TgmQ+m+HG5Pj5ouX6SO48mEXmUto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:21:3c:82:e2:48:e1:5b:e6:9a:77:97:05:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=c95288d3742e7f528abbcf91179d6b6350f239d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:e5:8d:73:df:d2:94:a0:66:6b:20:8d:14:
01:81:5f:dc:0a:78:bf:03:9b:6c:ad:10:7c:0e:30:
a8:a0:15:4d:c8:f8:83:99:89:ca:08:98:b2:91:ca:
cb:74:2a:b5:e9:5f:f6:85:e3:fc:f4:7b:c7:09:5a:
51:8e:98:37:83:a6:b6:21:50:68:87:ec:26:a9:f3:
ad:40:b1:9a:b9:d6:89:41:79:50:b5:de:3d:5a:a3:
98:b6:8d:07:45:1d:6a:3a:e0:b4:2f:21:49:f7:a3:
4e:e2:df:88:88:03:c4:3d:31:a2:fa:9c:84:7d:3d:
13:4f:8f:b0:90:69:5f:e9:b5:3d:a8:ca:b7:9d:b2:
72:cf:eb:eb:2b:5a:da:9c:a4:45:61:3c:f7:84:f7:
2b:ac:17:ed:e0:24:81:82:dd:7c:50:2d:57:bb:e7:
0f:c0:09:98:4d:a2:28:13:8b:72:e6:ea:c8:25:1a:
80:66:07:65:b9:62:13:e4:c1:52:b0:ff:b4:53:7d:
d4:cc:8f:cd:0f:04:84:c4:3f:c2:ff:c6:c9:9c:0b:
98:5a:b1:a9:d2:69:4e:42:7e:04:62:e5:f3:79:72:
20:5d:01:36:0a:f1:b3:4c:bc:d9:50:bf:63:80:a0:
ae:72:21:9a:20:c7:74:3c:09:24:34:a5:48:d0:66:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:88:D3:74:2E:7F:52:8A:BB:CF:91:17:9D:6B:63:50:F2:39:D6
X509v3 Authority Key Identifier:
keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:42:a8:bd:40:62:75:71:d9:9f:cc:22:9f:21:11:34:14:52:
d7:26:43:13:8d:fa:3a:58:7b:17:3f:35:7b:78:2b:a7:ab:cf:
8d:eb:be:79:d0:5a:8e:3e:60:88:ea:87:0c:eb:f9:c4:d0:cc:
5a:0d:3c:8c:23:1a:cb:7b:ed:93:b4:bb:b7:86:e5:78:49:23:
9e:15:e0:e9:ac:d9:5d:0b:53:ff:91:19:ca:77:f6:a6:58:81:
43:db:47:b3:4f:dc:11:27:8a:05:59:79:99:5e:df:24:a5:6c:
bd:3c:f9:cb:3b:b6:b6:fb:91:6e:c3:ec:82:c1:aa:ea:ae:5f:
d1:e4:3c:9c:2a:69:e5:39:c9:bd:a0:22:03:3b:65:5c:33:e9:
27:a2:ca:a1:6f:16:dc:9d:5d:02:78:98:09:d6:a1:3b:13:4e:
ac:7e:f8:b8:f6:cf:b5:62:63:d4:33:c8:d0:12:bd:22:e2:4f:
93:48:71:9d:a1:a4:a4:8f:0d:c1:d7:47:b1:9b:91:a5:3d:5e:
29:72:d6:43:69:97:a1:42:d7:2a:96:54:48:77:54:cd:b5:78:
ac:ed:90:06:11:41:a6:7e:af:fa:fa:88:34:33:1c:87:24:4f:
f2:83:f4:5e:6c:54:9f:68:24:a4:b6:28:d9:22:bf:31:76:24:
f7:e3:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:50 2025 by rpki-client