Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
File: kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft (raw, json)
Hash identifier: uFD/tSxLbHkciTIDUZC/cKlonnfHy0JAhVqS78zQuRA=
Subject key identifier: E7:36:87:BD:D5:E3:CA:2C:86:15:D5:D6:8F:EB:45:E3:9C:6A:81:02
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 0194BCE0884E7451F5F7AA653E18CEAC15A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
Manifest number: 08BE
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: JyQo8VWrljsbu7fdBUyCLnp2fRo.roa (hash: PYNlAKDVxyxJWLdDPpsz5WMXt3MO3ZloO8y7DclxK3I=)
2: kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl (hash: /vKEnXlXuTH1IGoFXPFgbyjJ2XtNukoSTPGclEk7AiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:88:4e:74:51:f5:f7:aa:65:3e:18:ce:ac:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=e73687bdd5e3ca2c8615d5d68feb45e39c6a8102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:bb:f0:45:4c:d7:04:2e:13:a8:08:d8:91:
65:43:97:85:8c:c9:a7:f4:56:1c:c5:d2:e0:fc:5b:
ab:ba:af:d5:a5:de:29:36:73:d5:85:55:bd:32:7b:
95:3c:74:43:ef:1d:aa:3f:fb:79:c6:c7:8f:6a:ff:
90:27:14:2a:68:2c:7b:bc:e5:cd:d7:c4:87:ee:e3:
3c:72:f8:7a:b6:ea:23:98:2a:7d:06:85:f8:1b:87:
b9:57:ae:dc:c7:16:97:93:20:94:00:5f:de:9f:45:
68:4d:1c:02:1f:ad:56:7c:32:64:ca:ba:52:29:d9:
ce:7e:d5:44:f6:45:39:e4:1d:86:88:46:b3:d1:2e:
a9:a8:92:c5:1a:8a:a9:bc:c7:e8:5f:16:f5:4a:7d:
47:57:3a:e3:4f:de:55:8e:89:3b:28:8c:31:df:51:
73:88:01:26:ec:dc:f2:3c:d0:ad:eb:b8:4d:8e:10:
47:39:68:8c:a3:1e:3f:5d:ba:13:10:be:8d:5f:a5:
42:33:95:e3:9e:67:86:bb:97:22:d2:f1:73:17:c6:
50:52:1d:8d:06:c9:4f:09:6e:8b:56:17:f3:be:74:
9c:85:1c:66:0f:1b:6c:41:ba:bb:eb:db:3b:c7:a5:
cb:86:09:c1:24:19:8c:4f:9c:09:b9:8f:df:6e:38:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:87:BD:D5:E3:CA:2C:86:15:D5:D6:8F:EB:45:E3:9C:6A:81:02
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b8:18:cc:dd:cc:05:4c:7f:49:4a:cc:f6:8c:0a:3c:e5:38:
28:90:03:41:60:d0:3e:b2:26:9a:31:d2:56:b6:9b:c9:7d:53:
c5:bf:39:6c:98:9e:b8:6f:29:10:56:f4:63:c2:7b:48:62:d4:
08:d7:d2:ed:fd:76:04:43:77:d0:de:26:2e:cd:a1:65:2f:a1:
ec:44:1e:8d:83:b9:d2:a8:06:f0:dd:eb:d9:7f:93:5a:fd:14:
57:05:02:fe:6c:2e:8d:4f:52:eb:07:4d:c7:1f:cc:2a:67:f2:
ed:03:08:84:c7:75:45:e3:67:b1:ce:94:24:50:1e:72:bc:41:
8b:41:6f:f0:17:e7:dd:60:08:ef:87:01:9c:e5:64:b4:25:65:
9d:1a:76:86:61:71:dc:3d:71:c7:54:c2:d0:ae:37:19:31:3a:
0f:52:d6:df:0c:73:8b:a1:a1:8d:30:35:2b:76:99:31:93:92:
7d:2c:7f:8d:f8:2d:ea:23:6c:b4:07:57:a9:af:e9:be:87:82:
f4:0f:4b:12:f6:62:9a:49:7a:3c:54:14:13:89:e2:41:15:0b:
a9:1c:2e:4b:9a:ab:e2:00:a5:01:1b:a0:23:d5:90:55:3d:0a:
f4:c7:8a:20:e4:b4:c3:28:da:fc:08:a0:77:53:04:eb:ff:93:
7a:36:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:22 2025 by rpki-client