Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: TUwdT0gbwH8ua9HdwD1rmFYlrsiySOoKbLWSdS5mXv8=
Subject key identifier: 44:31:7B:CC:C0:9A:4C:BA:BB:23:3B:8D:67:6A:BB:63:B5:94:F8:2A
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0194BC04F4EF93654D0E1EDFDA7AF09619CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0880
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: EcxaTLPus9Z6NC9m2zuUAukKtgksdeh9G5C0ZJmkiaE=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f4:ef:93:65:4d:0e:1e:df:da:7a:f0:96:19:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=44317bccc09a4cbabb233b8d676abb63b594f82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:4d:f8:ed:61:c8:59:fd:cb:d6:16:ea:31:
3b:04:c0:b0:b8:38:1b:cd:d6:db:1b:ca:0c:22:e4:
9d:42:8b:f7:5b:f6:94:d2:c6:6d:1c:73:54:59:7e:
07:4c:44:37:ff:95:72:fb:54:55:91:a1:79:6c:74:
50:58:6d:fa:40:a6:93:f7:ed:27:85:77:43:b8:dd:
c0:ac:77:b5:13:83:7b:fe:8c:c1:e9:23:29:c7:b2:
71:8e:80:45:d7:08:1e:78:4a:c0:40:ad:a2:06:8d:
d8:fe:d7:f4:21:2f:9b:c8:4c:e9:f7:24:63:c6:10:
57:23:48:56:77:1f:41:d4:d6:86:0c:95:0a:50:62:
e4:e9:74:0a:a1:b8:68:cc:2c:27:d4:09:3b:38:a1:
d3:0c:34:f0:24:bc:70:b3:32:e7:4c:74:4a:84:2f:
3d:36:07:35:85:32:44:ff:8f:f9:b4:13:4f:7e:94:
c5:ae:cc:90:98:db:91:00:df:51:98:76:21:f1:bb:
11:65:2d:9e:25:34:a1:69:b6:54:c2:ef:a4:18:e6:
3c:14:58:a8:ad:65:bc:46:57:42:b1:2b:bb:89:7f:
68:43:3c:44:fa:cc:fe:46:a3:ce:31:a0:67:12:4e:
83:37:5f:11:db:be:28:af:39:55:f2:1a:0d:fe:e4:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:31:7B:CC:C0:9A:4C:BA:BB:23:3B:8D:67:6A:BB:63:B5:94:F8:2A
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:00:e8:75:2e:32:23:e4:8a:45:be:eb:9a:3f:64:39:bb:52:
49:c9:97:00:a4:c5:5f:04:1b:9c:73:a0:39:5d:13:a1:09:a5:
18:6c:4b:cd:a0:db:67:c1:90:f7:5c:e7:fe:b1:3a:41:6a:3e:
17:69:09:de:a1:90:58:00:55:35:5e:cc:3b:39:41:72:48:43:
2f:82:3f:a0:cb:8a:0a:80:a1:3c:ac:e0:e4:6f:ce:2a:44:04:
0e:d6:83:24:78:3a:3a:cc:85:53:53:31:35:c6:a9:19:0b:71:
a8:ea:4c:33:59:93:11:e6:b1:27:40:14:7e:d0:74:c7:12:59:
dd:fd:05:e6:3f:a7:3f:a4:5a:95:f2:8f:89:91:b9:51:b3:67:
ae:d9:39:cb:64:2b:0d:11:99:a5:95:f0:8e:44:6f:1c:85:61:
91:ab:fe:59:1f:32:30:71:a2:58:ad:67:4f:e4:00:70:3d:33:
ea:3b:a5:50:da:8b:a3:ad:51:5f:62:ba:87:01:d0:80:b6:f7:
c5:85:d7:54:bf:5f:b5:fa:74:c8:a9:99:fb:c0:31:59:5e:e6:
c7:88:00:09:23:af:b1:3d:29:e4:de:53:1a:a0:d3:aa:88:cb:
c8:41:6d:05:c5:cf:23:f3:34:74:83:a4:24:93:3a:79:b5:c6:
a4:03:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:18 2025 by rpki-client