Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: g8wOEyeMs5qY3RAbOUd53yhDz8MZxLqrpdG1bBgpBag=
Subject key identifier: 93:D3:73:EA:54:58:F2:9C:53:5E:36:60:41:26:78:93:6F:40:28:8E
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 0194BCE0D74B3A533FC4F1E7BC7E1412B3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0823
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: zNiTYLXFzV45iZv5O+HFIgz7J2I+vmjMdlQMZqCH6iA=)
2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:4b:3a:53:3f:c4:f1:e7:bc:7e:14:12:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=93d373ea5458f29c535e3660412678936f40288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:50:53:fc:c7:5c:d7:77:1e:92:e1:11:aa:
b1:f7:bd:31:a7:f2:12:a9:10:55:cf:0c:01:2a:c8:
6b:37:d8:4b:bf:a6:fc:e7:c9:40:5c:5a:b6:01:2a:
24:b2:78:15:db:85:eb:9e:00:6f:d5:e6:91:88:58:
ac:bc:63:d9:6d:bd:98:ed:99:0e:7d:89:8f:c4:10:
0a:14:4c:80:6c:6f:49:00:79:fd:a6:bb:fe:e2:73:
96:3e:5e:fc:71:c8:aa:e9:7a:09:43:48:a0:6c:84:
56:7e:0a:61:71:5c:c2:b0:8e:84:72:ce:57:8f:f2:
92:b0:c5:cf:71:eb:1f:89:14:07:77:89:9d:a0:75:
80:0e:33:72:81:af:9a:95:e7:ef:36:cd:79:3a:01:
31:28:37:90:b3:d6:a9:a9:5a:e8:77:47:1a:f1:e5:
82:e8:96:5f:3a:ab:d6:07:9a:10:44:ee:ac:13:03:
c3:7b:12:34:6a:04:b9:06:d8:6b:b9:59:c4:dd:5c:
dd:83:ff:f8:2b:28:65:56:87:7d:96:98:c2:75:30:
d3:c7:7c:07:11:b6:70:41:34:68:31:70:7f:84:a8:
6e:09:a5:32:67:ff:09:aa:05:1f:fe:26:46:88:6b:
55:62:02:2a:44:25:63:83:72:40:66:bd:c9:e8:46:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D3:73:EA:54:58:F2:9C:53:5E:36:60:41:26:78:93:6F:40:28:8E
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:ea:cc:e4:fa:8a:fa:0f:c2:06:20:18:54:5c:84:86:0c:
5e:b6:68:e6:2d:55:9f:f5:e0:96:a4:ed:e3:64:61:e7:9b:79:
4c:2d:a7:3b:eb:c5:b3:cf:39:e3:19:f5:fe:e0:8a:af:c4:31:
21:ae:a9:ed:5c:fa:3a:ae:05:ca:cb:72:f6:5d:ea:8c:c8:07:
67:a5:07:18:54:2c:e5:1f:b8:a7:40:85:95:1e:b6:5f:e0:6b:
b3:47:35:c6:b7:c4:e9:e9:5a:b3:cd:a7:5f:43:ea:29:ef:18:
c4:79:96:66:72:98:91:80:43:88:8b:93:8e:1f:9d:75:bb:d4:
fe:dd:f0:2d:7a:13:d9:5f:d7:8d:c7:d1:22:0f:a5:93:1f:9c:
b4:12:b3:f7:22:3c:bd:3d:1b:3d:3f:74:84:ed:13:1d:7c:8b:
ba:e8:2f:2c:f7:7c:e1:ba:3c:f7:0c:8f:26:d6:4e:cf:9c:f4:
29:9e:ff:9f:54:92:12:82:66:0c:a8:0d:ee:b8:b8:e9:d6:85:
3f:fc:f2:f3:ac:92:2f:11:a2:06:87:48:70:ab:bf:aa:1e:10:
74:ba:44:0f:3b:41:db:a7:c0:b5:ab:dc:0c:42:de:62:0f:77:
7d:a0:fe:09:9b:5f:82:25:47:46:a0:95:80:5e:7e:3a:ec:e5:
e6:4f:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:00 2025 by rpki-client