Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: a7gY3WVFU1slnshPiGYmOYf0GIsW6EKyNZL35MnXc7Y=
Subject key identifier: D1:2F:EB:78:7B:2C:BC:31:8F:43:87:20:32:69:03:E0:F0:55:1C:F1
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0194BC3C76DF1F8F0423086B5B53587756FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: mAmGAvKgQNHEncXFWmu5vZcl1V+fER+jqb9tu8QSnkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:76:df:1f:8f:04:23:08:6b:5b:53:58:77:56:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=d12feb787b2cbc318f438720326903e0f0551cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:47:85:17:d7:69:ee:d4:f6:78:c1:63:5d:
06:5b:65:b5:60:aa:bb:a1:a5:ef:15:30:26:6b:92:
50:76:70:ac:95:0e:94:29:ce:8e:cf:6e:d3:3b:8d:
07:da:ac:b9:9c:7b:b6:5f:55:08:6f:8b:9e:4f:d8:
1b:f8:d8:d2:2a:47:35:76:7f:6d:d2:a6:c3:19:17:
8b:18:47:e6:54:9e:82:62:da:d3:db:48:39:ad:c4:
fb:7b:5f:f5:28:37:f2:42:a5:cd:2c:88:d2:18:0c:
83:21:ed:be:36:4d:af:df:dd:81:d3:0f:44:e5:2f:
6f:b3:b4:6c:0c:5f:6a:d6:31:30:2b:df:75:11:3e:
ab:f4:d7:c1:7b:7d:0f:8a:75:20:b6:03:34:ba:d0:
be:2a:23:c2:0d:ee:e0:25:1e:81:e1:bb:fd:84:83:
9e:c2:e9:da:25:12:89:61:a8:6e:f8:aa:e7:f0:06:
68:f1:9a:d9:92:03:44:f6:11:8c:1c:1c:ae:0a:84:
30:76:ad:1d:04:c6:c7:40:2d:cf:8f:3e:d5:ce:38:
89:88:25:ce:b0:35:d7:de:6a:fd:04:65:17:02:4f:
c8:ee:d7:37:56:02:5e:32:02:62:a3:f3:ff:27:c5:
6c:56:83:49:4d:01:cd:2a:7e:c8:68:25:1d:d5:10:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:EB:78:7B:2C:BC:31:8F:43:87:20:32:69:03:E0:F0:55:1C:F1
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:3f:ff:b8:11:4e:41:69:c3:d0:7c:56:a1:fb:ac:ef:b7:
74:78:af:ad:c2:60:d0:00:f2:fd:f5:fa:ed:49:8c:a3:60:b4:
7e:63:4e:ca:90:56:80:ef:6c:03:3a:12:d9:52:61:42:9d:06:
1d:a3:91:01:2b:ba:4d:b5:84:6c:c3:fd:bb:1a:8e:94:1d:f1:
fc:f6:65:cf:17:3f:42:bb:42:c2:5e:23:b6:ea:1e:76:18:a5:
de:45:44:07:51:9a:c6:75:55:31:d1:63:1a:b0:f2:0e:75:45:
6b:7e:50:9c:32:3f:72:fa:cc:6a:8e:a3:a7:94:49:e9:aa:ac:
4d:87:93:6b:8a:c6:fd:3b:82:d1:0d:52:e2:12:72:12:30:38:
36:b6:83:46:ce:23:68:15:c0:49:e2:45:c4:bc:df:44:0a:ac:
0f:ed:a8:ea:3d:13:92:2d:73:9b:ab:52:0f:77:22:99:f4:f5:
56:5d:35:d2:b7:3d:65:fb:93:85:47:61:00:cd:3c:07:fb:3f:
5c:82:4f:2e:16:ee:0f:bf:dc:a9:f0:d2:30:29:ad:44:5d:8a:
3e:50:bc:e2:11:f9:0f:db:c1:ca:1c:5e:e7:c7:16:61:58:68:
d4:89:b5:e7:43:db:23:da:92:f9:b2:3d:f7:5d:00:22:d6:a0:
90:99:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:32 2025 by rpki-client