Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: xiyOlcl4YTE5PRJAgrbpDuV5UYziHzYTQxWLjSobjBE=
Subject key identifier: 6C:C9:1F:9F:56:84:F0:30:21:FB:1D:46:90:73:E0:D5:E6:DE:F2:C5
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 0194BD4E974797810D297D21A4062D6D7306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: 2XyBd6i8XhkqQE98PQCUYONu31g/ybrll4L7ijH5s5s=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:97:47:97:81:0d:29:7d:21:a4:06:2d:6d:73:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=6cc91f9f5684f03021fb1d469073e0d5e6def2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:ec:89:63:cb:51:24:05:80:c5:7e:b0:a9:
2c:a5:12:cd:14:7f:58:d7:7a:d5:1f:ba:6d:85:47:
b3:6d:34:9d:6c:c9:e6:ad:17:3d:aa:b5:09:15:af:
ce:7a:a3:0d:c8:09:9a:97:c7:05:0b:ca:75:77:08:
ca:10:31:5d:14:07:dc:a1:80:97:7f:c0:3f:4b:6d:
59:31:05:9a:4f:99:cd:57:af:7d:d3:8c:b7:eb:9c:
cc:89:df:54:73:3b:24:7e:99:86:c1:09:f0:ed:e3:
6f:81:03:82:de:bc:8e:91:0b:34:b6:34:3a:fa:93:
c8:69:05:79:b1:df:c5:86:b6:42:e4:5b:99:0d:3b:
13:3f:b5:cc:53:3c:9c:4f:83:a3:00:60:12:a9:1f:
f9:c2:57:a2:3a:ff:b6:9f:48:c8:15:11:7d:66:3d:
3f:e4:43:54:0e:25:c1:e1:23:90:63:56:ec:70:ab:
26:eb:cd:7e:f1:93:cb:3b:4f:3f:c9:93:ec:9c:eb:
e7:4b:8e:51:68:a5:db:34:36:e6:ed:74:58:01:43:
68:cf:80:06:4e:d1:07:3e:ff:49:c4:96:d4:2d:10:
ee:d7:f2:0e:23:b7:32:9b:66:a1:e2:1f:7e:fb:36:
e9:4a:d9:cb:f5:cb:78:d7:b3:6e:a6:c1:d5:ae:09:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:1F:9F:56:84:F0:30:21:FB:1D:46:90:73:E0:D5:E6:DE:F2:C5
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e5:ec:62:28:8c:f7:27:fc:71:a5:ca:f2:4d:32:07:94:04:
cd:34:0d:5b:80:bd:a0:40:67:2e:db:16:ec:46:3b:aa:97:50:
3d:e4:fa:b1:79:b7:fd:c7:0b:0b:85:b2:49:47:48:81:88:96:
c6:e6:66:9f:d1:d9:6f:29:0b:59:68:ed:3c:e1:3b:d5:5c:a5:
dc:d2:64:b9:ca:1a:ff:a9:7f:84:84:c7:62:3b:c5:5f:a5:fd:
87:50:32:3f:9f:5a:1e:95:c0:fa:2f:04:3f:01:a0:15:ab:2b:
4f:32:12:f6:0e:b3:03:20:3c:79:62:ed:66:4b:2b:c0:ee:a8:
4d:39:31:14:31:96:29:4f:38:25:c0:13:0d:58:a6:8e:aa:d3:
6c:2a:10:a7:1a:01:e7:ee:41:8a:36:a0:98:91:10:36:23:e1:
32:83:2e:a7:f7:5e:eb:9f:b8:87:84:36:48:6b:e9:28:e5:64:
33:76:8d:88:db:44:9b:ab:e0:85:00:62:73:d4:e6:e7:ea:ce:
ba:ec:a9:c6:f9:7c:cf:1f:91:e6:a7:df:b0:76:2a:87:57:52:
90:3b:66:93:52:3b:53:de:ac:83:49:73:40:79:50:c2:4b:9d:
d2:a5:6a:a5:f7:d0:82:ca:da:99:9a:15:f5:b4:01:a3:72:b1:
8d:61:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:58 2025 by rpki-client