Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: Z0tZyeW2StC0/6TccBDy+OgPQxac4gDUZ6YvPMKQOgE=
Subject key identifier: AE:C6:9F:01:D8:6E:67:F6:03:2C:2A:2C:74:1D:D9:31:7A:18:D9:63
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 0194BD175D7673653B99EC6581562EF8C228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 048A
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: Y07oID24rO8HGfYkKUUWvtNrJykVj+a6cqfU+dzl5Xs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5d:76:73:65:3b:99:ec:65:81:56:2e:f8:c2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=aec69f01d86e67f6032c2a2c741dd9317a18d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:0f:1e:45:0b:27:d9:e0:38:97:7b:63:01:
44:31:2e:5d:ac:a0:54:1d:1c:d8:78:4a:1d:39:4a:
47:80:9d:6f:e0:00:25:69:15:41:28:70:1c:55:52:
58:1f:3a:e4:68:99:e0:56:31:f7:9b:ec:5a:c6:e8:
68:9d:01:8f:76:52:3a:bf:37:2c:c5:bb:da:b3:48:
dc:3d:a2:e1:da:fa:97:22:53:5f:ab:df:c5:71:6e:
fe:9d:8f:47:4e:eb:fd:94:78:7a:b9:ff:01:ca:3c:
e2:64:83:b5:a2:16:83:8d:6c:08:63:72:b6:1b:13:
0c:39:b1:ed:f6:e4:52:db:e9:46:23:a3:99:fe:98:
61:f6:5e:89:62:02:a0:76:05:0e:85:80:52:00:a6:
0c:ba:eb:18:5a:d4:4e:e6:ce:9a:db:d2:10:43:b8:
46:f8:17:f4:19:23:25:f5:cc:2d:9d:a8:e6:9c:51:
8e:b4:df:61:27:4b:dc:bc:6c:cf:f3:7b:9a:12:88:
e8:1d:ef:ea:f4:8e:af:0f:3b:62:33:07:32:67:3d:
cb:e2:37:05:18:f5:1e:a8:4f:28:f6:e5:d0:f8:64:
06:67:75:e5:a0:8f:74:0d:b0:91:8b:60:80:02:74:
ec:27:bb:83:3f:8f:a0:05:11:80:8f:00:75:07:fc:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:9F:01:D8:6E:67:F6:03:2C:2A:2C:74:1D:D9:31:7A:18:D9:63
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d0:cb:72:e3:23:f3:6d:6c:29:5c:bf:3b:b2:93:11:5c:f3:
5b:33:a9:b0:5b:48:34:f6:40:ff:c5:97:38:93:f4:8b:44:56:
1a:76:0f:c1:2f:5e:20:e8:3e:0c:ba:6a:32:f3:89:f7:18:84:
e0:c9:19:82:b5:c5:17:bc:6a:65:24:e2:f7:ce:13:44:4d:89:
3a:40:4e:7e:07:27:42:f1:8a:a1:b4:b2:0a:02:ab:f6:7c:03:
f3:40:2c:de:29:b6:61:4b:1f:a9:06:8b:db:75:b9:6a:87:37:
b7:91:b6:d5:1a:05:e1:87:d4:b1:3f:6b:cf:08:f7:5d:ba:12:
36:40:52:6b:6e:7f:50:09:3e:4c:2c:96:38:2a:70:a8:51:ac:
51:14:dc:2f:49:4c:88:15:29:85:20:20:28:6c:dd:e9:a9:da:
36:5a:e0:d8:56:f1:cf:42:31:79:dd:04:c6:7d:8a:6a:8d:26:
67:ec:eb:d9:b5:4b:36:ad:cb:e2:c7:1a:bc:a2:4d:d4:59:53:
8b:1f:dd:1c:e9:fc:10:cc:23:c2:59:c7:e1:5f:92:f5:d3:4d:
75:80:7c:61:b2:b4:e5:fe:a2:4d:7e:54:48:42:0f:9e:87:f7:
80:80:3f:fa:66:f2:e8:6b:b3:34:12:f9:7b:5c:d3:07:7c:59:
d1:9d:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:43 2025 by rpki-client