Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File: kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier: bf8HkXhgOuaVR7Ctg+61VVlNZmDu5aKv3lVaI2jemN4=
Subject key identifier: A9:7D:48:E6:72:45:63:4D:4B:17:45:8A:17:97:3B:F9:14:DD:58:92
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer: /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial: 0194BC04C94894797093A79D981A5ECD0BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: DI3j9xE3yVQhpuQ/bj0ooyaIEYkv3NZAZrS1oizlJCU=)
2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:48:94:79:70:93:a7:9d:98:1a:5e:cd:0b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=a97d48e67245634d4b17458a17973bf914dd5892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3d:1d:1b:3e:16:37:43:33:37:99:3a:9a:df:
f1:ea:b1:92:6b:8c:74:69:22:e2:57:87:61:ce:15:
9a:de:4d:0c:72:b8:b1:97:3b:34:9a:1d:60:fd:a3:
e6:d7:0a:83:f9:38:1c:6a:fd:a9:8c:8f:ee:e3:e7:
85:21:70:97:6f:1d:82:69:89:83:5b:c8:00:72:ef:
82:1b:53:a1:57:5f:9a:56:09:1a:95:f5:63:f1:95:
15:fe:c0:d9:56:97:07:97:e2:75:4a:9b:a3:69:c9:
d5:72:ee:da:36:8d:85:ff:f7:94:98:52:90:92:a1:
06:58:98:d0:f5:73:09:34:a8:30:0c:58:74:7f:93:
6c:4a:71:e4:62:1d:04:d3:07:03:00:43:45:aa:e7:
00:83:53:6f:3c:c8:42:ef:12:c7:15:ac:56:55:36:
85:17:f1:75:b7:b7:06:23:72:59:a1:e9:35:4c:7a:
d3:56:14:3c:7c:3c:24:09:66:a7:51:55:00:7b:40:
17:5a:1f:48:30:ed:34:46:b9:f6:50:e5:13:d3:2b:
11:29:54:59:25:e5:d0:90:18:39:02:15:5d:ca:c1:
cf:8e:83:9d:06:ee:42:b6:67:94:c0:bb:e1:e0:02:
c6:87:38:1c:5f:1a:45:5e:95:00:08:76:e6:6a:d9:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:48:E6:72:45:63:4D:4B:17:45:8A:17:97:3B:F9:14:DD:58:92
X509v3 Authority Key Identifier:
keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b2:32:7d:a9:66:43:e2:dd:c7:16:e5:4f:a0:d1:7e:e2:c0:
3e:78:ca:d4:94:ba:e1:0c:ca:3f:1e:47:bd:65:2d:7b:41:51:
56:ab:85:ef:90:4a:b2:57:37:5f:80:01:30:7d:d7:58:07:a9:
d8:2a:48:67:4f:53:76:31:65:f8:78:30:a0:31:5c:8e:78:74:
5a:e5:ca:d7:30:ab:3f:4d:22:97:f0:7e:52:7e:74:8b:3e:74:
e2:af:e1:30:2c:e6:f4:47:4c:5b:8e:87:52:c6:8d:6d:b3:e8:
5d:7a:52:12:ff:41:91:ec:13:87:58:f6:83:7c:58:0e:fd:f6:
96:81:2f:97:4f:8c:d2:ec:a0:6a:d8:fb:28:73:9e:59:1a:8c:
90:a0:b6:8a:64:48:52:c4:89:24:6c:36:1d:5c:1b:6d:72:11:
11:e3:b5:93:13:3e:31:bd:34:9c:51:6f:a3:86:d3:ff:a4:b9:
69:7c:1f:1c:d3:06:10:ba:98:7f:14:88:71:86:69:00:c7:27:
17:37:74:e7:c6:95:e0:48:9b:fd:4e:c9:0c:2d:f1:3c:de:4a:
79:fe:5d:87:82:02:22:56:68:7b:f8:43:47:99:b8:e5:0d:51:
ba:db:7c:4d:94:f0:20:82:11:ab:f4:12:f7:71:75:77:e7:3b:
57:e6:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:21 2025 by rpki-client