Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: UfSJ81TN4eAXbpicH8sfIa+5jHUy1PX87JGxvXj1oE8=
Subject key identifier: B2:49:96:13:5F:2C:B3:64:47:75:76:C8:40:58:00:38:AE:8B:BF:37
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 0194BBCE2A6848775C01E85D8C7BFDAAE75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 09CB
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: hd3SvatP7VrJBMD6wEWdR3kMqVUK8VkT1pCTgT2hpLk=)
3: hBprFDZElX2sHj2Kaw0JJ0jN9Ro.roa (hash: 2JG09FHe5eSpxaJ9idEhdaHS+yUplvNwc1d04eIKBko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:68:48:77:5c:01:e8:5d:8c:7b:fd:aa:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=b24996135f2cb364477576c840580038ae8bbf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:71:4e:ea:f0:98:8b:c0:e3:7c:6f:41:74:
78:96:d0:b7:fb:f8:63:2e:3c:5f:28:f8:7e:1d:eb:
1d:a7:e3:a1:37:65:f0:5e:a0:ae:06:86:ae:f0:b0:
29:5c:92:6a:60:ef:9b:dc:ed:28:d5:fe:18:14:f4:
2c:61:66:76:9b:a3:08:b1:cd:5d:5f:cb:e4:ad:de:
54:c0:62:77:89:e6:c8:c8:ca:c0:4d:38:58:ce:c5:
9b:fe:04:a5:0d:41:3a:3d:2f:b9:c1:2d:0b:fa:47:
ce:70:61:2f:12:8e:42:87:60:32:1a:33:d9:06:18:
c8:a7:ed:cb:3d:1a:87:54:eb:ab:e3:15:08:2d:ad:
32:83:c6:8f:cd:18:0f:6b:fe:c0:65:30:93:86:81:
a0:b1:81:18:ef:84:36:c7:9f:0b:f8:4a:b1:82:07:
e6:9a:ed:ce:4b:4e:4e:cc:92:94:a7:43:c4:a0:cb:
b2:b0:d0:fe:b2:fb:41:07:19:95:c5:e6:68:e1:63:
94:0d:53:28:50:ff:f3:c4:d1:8f:e8:b6:6d:26:28:
78:de:5c:fc:a8:3f:de:a9:55:df:38:4e:31:1c:f3:
bc:db:40:29:55:90:77:5a:ac:c9:e9:39:bd:98:6e:
68:68:5b:59:37:8f:4b:9b:0e:fb:fb:da:82:aa:65:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:96:13:5F:2C:B3:64:47:75:76:C8:40:58:00:38:AE:8B:BF:37
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:80:7a:91:0f:c8:2e:46:cc:5f:d9:9a:16:46:e8:04:2a:08:
3c:b5:35:64:5f:03:e7:f9:2d:06:bf:e1:77:98:2b:10:da:6b:
d2:d1:2f:da:bb:99:42:21:a6:ae:60:16:12:e3:fc:83:dd:d3:
a9:5e:94:89:23:36:c5:68:99:1e:f6:98:35:15:5b:16:89:d7:
0a:63:81:b9:03:8e:f4:f4:09:0e:8e:3f:0a:b7:fc:e7:65:2b:
28:21:8c:e1:7e:da:71:43:c3:22:4f:5b:f8:ba:36:98:08:b9:
f1:c2:3a:07:a5:57:dd:e0:66:d9:9d:ff:e0:b7:5b:46:01:df:
ce:37:ca:73:fc:61:22:51:a0:b7:f0:b2:32:41:64:4b:ac:45:
ff:97:62:2e:85:45:c2:d1:6e:06:6d:5a:db:47:72:f9:38:4a:
59:04:ce:e7:52:43:72:c8:ee:54:c8:1d:77:d2:a9:12:dd:9d:
8e:5a:b2:9b:77:95:a2:ae:4f:94:2f:17:59:4b:77:78:57:a5:
ad:4b:d6:1b:f4:e8:00:aa:3a:53:a4:62:27:23:ac:54:46:b7:
40:ed:8e:dd:c3:cd:90:96:fb:55:b0:9d:6b:f8:3b:97:22:b1:
f9:11:bd:77:d2:b5:1c:33:21:99:c4:4d:f9:68:82:20:82:bb:
5d:38:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:36 2025 by rpki-client