Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: b4UI2NAGF6N4XCgsDY4GwA64bMZnCv+e49ZrXeoUN08=
Subject key identifier: C6:1A:9E:18:96:61:5E:83:82:27:D2:6B:CB:47:C3:2F:76:8E:B6:3D
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 0194BD4EB7931047F1634D23FB3E7178BF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: KrEyLtzd_FGxXKe36EuPBXxaKHA.roa (hash: ADivn+VbvpgE3fUtfn8Xzz0qtLuBXCOdiCI9IztCcUQ=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: cUMOQVWRN3Hop5IF1iB1jVZxaol6W8ANuJemNabJL1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:93:10:47:f1:63:4d:23:fb:3e:71:78:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=c61a9e1896615e838227d26bcb47c32f768eb63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:5d:b7:da:da:1d:17:98:58:63:9f:76:01:
4a:3d:d2:2f:d4:cf:dc:6f:2c:ce:cc:2e:8f:4f:6a:
39:8f:ee:3e:9f:e1:d5:26:f6:81:0f:7d:f9:72:8a:
7b:09:b9:6a:fc:8f:82:7b:bf:2d:c9:9e:17:70:36:
09:e5:82:b2:c3:bf:23:ba:74:db:87:bc:e1:f7:75:
7b:04:f4:8d:19:87:22:01:27:aa:bb:73:61:e6:24:
a8:31:5a:11:32:c6:cc:ce:98:8d:5a:23:ec:a4:f9:
26:ce:60:fa:52:b0:d4:f6:ab:b2:bf:d1:9b:3e:6f:
53:7c:4a:26:b5:25:e7:6c:88:f0:53:8d:b3:7a:ee:
b9:27:d7:80:b2:85:82:3f:fc:b3:b8:de:07:1e:2f:
0b:4a:c2:e7:e4:d9:51:c0:63:62:9a:10:aa:a0:4d:
d3:95:47:cb:14:3f:8a:f5:c9:31:b0:1f:2f:21:05:
9f:9e:90:8b:e2:4f:28:86:c3:39:e9:1f:b3:1f:a7:
8a:97:31:1e:8d:3b:3e:87:25:cf:ba:9e:dc:9a:ff:
86:0d:7e:e8:f7:03:2c:38:1d:10:78:b4:44:3c:22:
53:87:1b:39:a3:7f:b2:63:79:72:63:69:98:12:77:
a3:8b:54:c9:77:f8:14:b6:df:49:76:bb:fd:32:dc:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:9E:18:96:61:5E:83:82:27:D2:6B:CB:47:C3:2F:76:8E:B6:3D
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4b:22:bf:8c:53:72:9b:96:43:86:85:2f:ce:42:b9:e7:c5:
88:d1:f1:60:82:07:29:f5:fc:ed:c6:33:85:a8:6c:99:91:10:
26:32:e4:7d:5d:16:32:6a:0c:ae:f1:3d:70:fe:00:45:64:5b:
07:21:68:bc:1c:64:c7:43:83:19:70:07:91:5b:39:05:e0:a4:
d0:aa:dc:3c:b5:e6:04:59:62:9a:76:17:ae:3b:c7:57:2c:d4:
ff:e3:48:8d:8c:1e:f3:89:5f:28:85:65:fd:0e:f4:04:a8:1b:
e8:99:05:e5:b5:5a:07:8b:2f:74:7b:36:bd:eb:17:f6:a1:9c:
0e:9b:af:83:0b:bf:c3:dc:ff:43:bd:f9:dd:6d:19:32:f1:12:
54:2c:7f:81:be:e3:68:1c:56:77:33:78:18:0a:f5:cb:02:f0:
a9:12:98:56:bc:3c:32:2f:a6:96:a9:a8:16:1f:ee:5e:bc:0a:
cd:bf:68:88:11:c9:a7:52:f5:a0:98:3a:3d:3f:d3:a4:ad:e7:
98:84:2e:d2:5a:dd:46:8e:6c:eb:16:eb:76:fc:c8:34:ee:1f:
e2:d9:c1:7e:f6:c3:b5:69:5d:25:9c:8a:46:1e:36:9b:15:17:
e6:42:ae:2f:94:7d:46:ae:21:a8:28:02:12:57:5c:6f:ac:37:
f5:a0:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:17 2025 by rpki-client