Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier: hqQ0mnKLEDeRcIdP74rdmCyoUgT0SmV7Htc/vsrvmIk=
Subject key identifier: 09:A6:68:42:04:CD:4E:3B:A9:C1:15:8A:94:F0:3D:DE:0E:35:57:D0
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial: 0194BCE0BDA3659691B05B50B78EC8C26E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number: 0144
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: dTQZy95vQR6ahQWIYDu50v+kFx/9uE+ZOA0c9JX7cEs=)
2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bd:a3:65:96:91:b0:5b:50:b7:8e:c8:c2:6e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=09a6684204cd4e3ba9c1158a94f03dde0e3557d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:f5:c6:89:53:47:ca:73:6e:9b:43:09:d9:
e7:f5:6f:73:0d:41:7d:85:64:c2:0a:74:7a:ed:c2:
5f:24:49:60:e2:8c:d4:29:aa:09:6a:fe:84:b3:80:
f0:c6:26:10:03:11:8b:95:96:85:7d:81:d3:08:e1:
95:b5:0d:ae:d5:05:ab:71:fe:12:ee:59:43:c5:b4:
07:a4:fa:ae:9a:76:82:dc:78:d2:aa:34:07:7e:64:
7d:ba:ad:f4:6c:6e:3b:83:60:9e:25:d3:5c:f6:b0:
22:35:72:cb:33:6a:26:6c:39:19:a9:fb:b7:56:0c:
11:de:60:74:63:a7:86:ae:8e:3d:ce:f0:ec:cd:f3:
dd:bd:56:a8:64:fb:e2:3a:9b:6f:26:84:86:7e:25:
fb:27:09:84:30:5e:56:98:39:6c:20:cd:e1:aa:e8:
c2:d6:a7:9f:9f:16:ca:d4:04:06:22:a5:37:18:f6:
8b:e0:dc:02:f6:dc:2f:94:21:b2:ca:9c:a7:d5:7e:
8f:be:79:8d:c6:a2:ef:84:7f:b3:f8:0b:2b:04:e5:
d1:82:f2:9f:95:5c:1e:a9:a2:69:4c:87:4e:e1:ef:
8c:8f:f6:d8:9c:ac:c2:9f:c4:56:2d:77:f6:e5:fb:
bb:51:ac:22:7e:75:14:0d:cc:45:33:57:87:6e:97:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:68:42:04:CD:4E:3B:A9:C1:15:8A:94:F0:3D:DE:0E:35:57:D0
X509v3 Authority Key Identifier:
keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:17:a9:bf:1b:1f:0f:43:8c:63:f3:7d:2b:99:8e:41:e1:96:
4e:6c:13:ad:22:eb:0f:87:62:fe:2d:79:19:ad:12:28:f6:c8:
3a:42:82:5a:3a:75:f8:50:a7:ae:fc:52:72:f4:b6:29:64:dd:
9c:dd:dc:ff:fd:39:32:74:fd:f5:f9:07:e0:0f:f8:33:40:e4:
d0:1d:e0:49:69:e7:70:a1:7c:07:89:88:87:16:65:40:10:f3:
ba:0d:c8:d8:48:0d:3d:94:bc:71:c7:be:8e:2c:5f:6f:36:67:
21:34:e5:d9:1c:e6:00:b3:21:7f:62:c8:dc:0e:2f:61:d8:e8:
f4:4b:39:0f:42:72:61:e9:00:ef:a1:e5:a3:c0:85:07:ab:7b:
b2:70:b0:dc:4a:1e:69:41:d4:14:8a:7d:c2:ef:a7:10:50:4c:
05:47:20:c7:0e:b7:ed:97:3e:61:d2:27:3e:4c:60:26:8f:64:
59:0c:67:ff:87:28:97:60:e9:91:26:c3:98:29:0a:0d:f0:9c:
7f:44:51:a7:4a:df:31:ca:6f:d0:54:82:bc:00:4b:bc:e2:9c:
cd:58:0b:a9:02:ae:4d:ec:58:53:84:67:0a:e1:fe:95:9b:50:
87:5b:dc:38:f3:b7:d7:54:cf:7e:bc:76:51:cd:81:91:45:74:
0a:13:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client