Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: l0o9rcD8cODQnH+4g0dyYLKv7sqwAZJ9kwTJ865XHFc=
Subject key identifier: BB:02:04:C7:53:FB:44:91:2A:29:FF:92:BF:FA:A2:97:8E:C4:D7:EA
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 0194BC72D2D66DFA8C7A77BCBC195990C09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: EM5arXizAZGntQkSvpYTkCYVH5qhz/GwP8AEuif80+Q=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:d6:6d:fa:8c:7a:77:bc:bc:19:59:90:c0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=bb0204c753fb44912a29ff92bffaa2978ec4d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:43:d7:d5:19:0d:44:36:78:f1:64:4b:91:
7e:aa:d2:ce:5a:95:a5:17:34:5d:0c:1a:c8:8c:8c:
cd:d0:ae:4c:51:e5:00:bb:07:cc:7d:01:b2:34:c5:
f6:2c:f4:73:db:a3:e2:91:d1:9b:d2:bd:0c:53:99:
31:ee:e9:91:3d:0a:94:02:61:3e:72:af:69:4a:3d:
74:fd:28:96:1f:94:24:0e:c2:b8:a5:38:8d:13:74:
6e:c2:4e:80:33:07:24:46:ea:3c:4e:ef:3f:84:b2:
4b:44:94:05:f7:39:49:b9:b9:6e:c0:53:93:c9:aa:
da:bb:ed:88:fa:6c:0c:9f:db:76:53:2a:a7:50:18:
86:93:c4:d3:e0:40:97:7d:5b:4c:58:a3:8c:54:6b:
2d:36:f8:38:3d:cf:59:8f:98:25:f0:59:fa:aa:05:
52:de:4c:bc:65:ca:82:b5:f8:89:d0:57:a7:6d:5d:
9c:65:25:65:88:9c:fd:ce:8f:4b:36:21:d8:4b:58:
a8:43:26:ed:ff:67:92:6e:0c:55:e5:16:ce:c6:d9:
7c:47:c8:a8:0f:19:18:e2:8f:af:3a:41:a4:63:cc:
a2:41:17:12:d9:5d:cd:82:8d:f2:dc:c6:a1:21:eb:
91:b7:be:d3:71:cf:94:a9:50:a9:ea:77:fd:d6:dc:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:02:04:C7:53:FB:44:91:2A:29:FF:92:BF:FA:A2:97:8E:C4:D7:EA
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d7:56:74:d2:6c:0a:23:6f:ff:c4:79:ef:49:d5:b3:8f:ef:
58:ae:ea:c6:a9:d5:a4:10:7c:ee:04:e5:6a:74:fb:20:98:c7:
07:32:a5:a7:c1:c1:2c:4a:3f:c1:78:51:f6:63:01:6f:76:ee:
b2:79:3d:be:fe:2e:31:b0:fb:02:78:de:9d:c9:08:3d:08:87:
3d:0b:bb:e0:26:b9:1b:1a:c6:4f:02:7a:e8:11:6a:f2:e1:a6:
8f:99:a6:d0:39:a9:21:1b:c7:13:42:ce:ac:e6:b8:8b:6e:3f:
8c:34:4f:94:05:e3:2a:66:2f:35:97:2f:ea:9c:60:8f:a2:6d:
a2:56:08:ec:b3:ab:af:0d:55:21:cb:be:d8:e2:cc:d1:0e:a1:
9f:17:29:55:ad:ca:76:14:6c:c9:bd:a9:4b:7d:b7:48:df:a7:
76:1d:15:de:29:01:4d:f3:66:df:60:1f:13:40:31:5f:c0:d7:
e3:99:88:1e:6f:f7:c1:6e:49:45:5d:37:97:3e:50:16:a2:dc:
ff:5f:3c:22:97:21:66:7d:80:69:7a:57:5d:40:16:21:4a:b3:
f1:e7:9b:bf:d2:d7:2c:fd:af:8a:98:80:f6:98:07:ac:97:1a:
91:90:e6:45:d2:1f:e2:13:ae:93:bf:51:e8:7e:cd:d1:10:cc:
eb:9c:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:55 2025 by rpki-client