Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: yDRkmynUQcUISw1jfKLM6az3JzZsJZ5fpzXJ7uBJ7go=
Subject key identifier: 7D:AC:DD:46:B9:69:B0:A8:FA:EA:47:86:7B:13:2C:45:7E:4F:71:04
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 0194BD17B0D5B25A096669D2828DC53B091B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 08B9
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: Q5x-oLuKsAX8G6VHtW5DmYmMvBo.roa (hash: Yo25vViOdvC6dn3PtfxGUX7ghUL2FSb11Ef7j26sFsA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: 1k41RWn/6DVkyTtSSSm7jk+Z/7CKi3xt/npo9aRUQwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b0:d5:b2:5a:09:66:69:d2:82:8d:c5:3b:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=7dacdd46b969b0a8faea47867b132c457e4f7104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:47:ea:c4:08:17:b6:c2:4e:95:df:8f:06:
0e:2b:59:cc:94:dd:1d:f7:5b:75:0c:95:5b:77:98:
67:c4:bb:a0:1c:ec:e4:bc:a1:bc:ca:72:e7:f8:df:
ce:b8:8e:58:02:85:99:22:84:2a:6b:45:09:c5:2f:
e7:a8:40:07:2e:19:0a:72:33:18:fe:7e:60:d4:81:
f2:65:68:59:03:4b:f2:8f:64:97:ea:5a:3a:df:3f:
74:a2:47:9e:35:dd:f9:9e:bb:85:e4:96:09:10:ed:
10:d1:d6:68:d8:fd:fc:8d:a3:c3:b5:b9:16:18:ef:
87:fb:e8:4a:cd:77:46:c5:5b:56:df:ac:b5:98:69:
de:68:51:61:88:b9:3b:3f:f3:d4:16:18:5d:14:1e:
77:2e:d0:b3:77:04:a1:1f:8e:f3:9f:51:07:b6:bb:
09:8d:70:81:74:9c:0a:b9:9f:86:2a:57:fc:cb:e6:
90:49:ff:68:80:a9:ef:c9:97:4b:e4:67:5a:4c:e4:
d9:76:9a:56:8a:bc:83:07:e7:f2:48:e3:66:f1:f9:
ac:22:8d:f7:b3:b0:3f:72:62:8d:dc:7e:e2:6d:e7:
f9:e2:03:af:74:35:91:92:f1:44:77:5a:e4:4c:88:
80:d9:2d:2f:df:6b:f0:a9:94:b2:1c:d9:f2:44:22:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:DD:46:B9:69:B0:A8:FA:EA:47:86:7B:13:2C:45:7E:4F:71:04
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:85:05:94:84:bb:d1:f6:8a:6b:fd:07:aa:a6:c7:20:94:c1:
ee:65:cc:46:1b:40:40:ef:d4:d8:e7:be:00:36:37:fa:cc:8a:
de:13:02:73:db:3d:90:95:2d:6c:f0:bf:d3:02:16:a4:70:e2:
fa:69:c0:97:ad:bc:c4:c6:32:aa:c6:0f:52:88:27:72:de:30:
fd:b4:91:ab:5d:8c:af:ee:da:70:2a:00:4a:84:fa:90:31:c0:
5e:62:d3:5d:ab:90:2e:5f:8f:e4:8d:46:df:f6:93:7f:f5:f9:
7f:ea:b0:67:b1:4a:f0:9e:ad:17:2f:ba:5f:ac:16:a5:92:12:
9c:c4:5c:30:fb:16:da:a0:bb:f3:0c:b9:45:fe:bf:76:a0:6c:
9d:30:1e:96:3c:af:6b:91:71:a2:ec:b4:72:25:a1:61:73:98:
6a:24:c6:09:56:12:90:a2:ea:64:b5:30:97:75:78:ab:d6:e7:
ef:9d:52:dd:6a:c8:b7:4e:82:38:a7:01:e1:96:a4:ff:d6:ec:
39:37:39:13:b1:7c:20:59:69:58:9e:65:3b:f7:87:e7:5e:88:
69:1d:32:e0:e3:e6:f2:4b:fe:59:76:eb:16:30:24:df:a5:f4:
c3:1e:45:1f:b5:cc:e9:d5:52:e2:28:0b:b1:7f:bf:e7:38:93:
89:89:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:51 2025 by rpki-client