Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: /G6E3OAUkWleT8fvy9tSRbGEFF3rdICDdpbFojz3l7g=
Subject key identifier: AC:59:E2:CC:E2:84:D1:5E:E2:85:FD:B1:FE:18:8E:E7:70:B7:B0:73
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 0194BBCE80B9F5636DE20CE2DA0A2BD71C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0A5E
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: 8gsOL2eU8trsvwc78Z2ZBxmIJU8.roa (hash: U9kGrmKtwph96lNZQv3D9nLxVV6hC3SJ4xgIzZS6eNw=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: ktrAbyOaTPB+O73bTPfCoj7FHvPZYI6BiUTS3DxoDS4=)
3: r23XkTQdFdKFayUIhFOF4SL6nWc.roa (hash: Q5cBXjvEd4FzKMPjAAxINMxDmDD6U9ghS7XqogAQVJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:b9:f5:63:6d:e2:0c:e2:da:0a:2b:d7:1c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=ac59e2cce284d15ee285fdb1fe188ee770b7b073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:83:99:fa:98:97:f1:30:34:d6:4b:c0:5c:
ee:4c:ea:31:2c:f0:c9:38:0f:a3:8c:89:3c:53:d8:
13:ca:4d:15:da:75:42:55:a1:69:bf:08:6e:ca:97:
7f:35:9a:5a:37:4e:cb:da:1b:6b:99:62:7a:17:43:
6a:ba:ec:fc:8b:25:ba:dc:2e:11:19:45:4a:44:da:
bc:be:11:99:50:a9:d2:c8:49:b2:fb:f6:0a:f2:46:
db:f6:67:17:ea:ae:9b:b8:14:11:62:b8:26:d3:dd:
1f:fb:fe:3a:0f:ba:e6:e5:c0:a9:8f:a2:0d:80:9a:
64:4c:4a:bd:d9:02:76:98:ef:8f:33:c6:9a:5d:5f:
16:82:e3:fa:76:96:af:db:74:02:59:b7:10:d7:e9:
97:7d:cd:6c:f4:60:79:46:66:80:38:db:9b:27:80:
e9:64:6e:92:40:41:08:9d:c5:81:46:cb:fd:ad:b5:
e1:e6:0e:9c:20:e6:9f:83:45:f0:ac:fe:24:7e:29:
5f:47:a5:ff:36:66:b9:8b:40:1f:0c:3f:71:ab:cb:
cc:22:1c:28:e2:90:52:f5:f4:e7:ed:4b:01:7a:6d:
98:78:62:71:f8:1d:d4:38:2c:cf:6b:0e:4c:69:ae:
62:55:7c:f4:1c:fe:5d:08:51:41:be:fc:e4:4a:b9:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:E2:CC:E2:84:D1:5E:E2:85:FD:B1:FE:18:8E:E7:70:B7:B0:73
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c0:cf:79:9d:4d:b0:0f:6f:c8:bf:0e:73:6c:6b:aa:9b:c7:
26:aa:f6:92:39:fc:fa:82:88:c4:1c:cf:bb:39:7b:7c:26:12:
c7:5d:38:58:7c:01:a1:ea:46:28:cf:89:27:e1:4a:3a:36:02:
11:d4:4d:18:22:65:d1:64:fc:b9:0f:87:4c:4e:7a:a2:90:d0:
24:db:82:20:12:b7:80:3e:e4:45:05:23:8b:e8:f0:7b:86:96:
b3:76:c5:d8:01:b2:a8:26:4f:8e:6e:c0:0b:72:2b:23:08:ba:
b0:24:75:a5:56:0d:83:c8:e8:df:65:d6:24:dc:32:9e:64:b7:
b8:1d:4b:02:cd:11:3c:f2:06:4c:fd:2c:73:74:0b:8e:98:22:
26:c3:f1:6c:d2:50:c1:e5:a1:66:ef:03:b4:86:bd:92:45:ae:
d8:ba:c0:31:24:46:9a:55:2f:2e:d8:f6:ed:6f:1d:6b:0b:a8:
52:b5:ed:dd:3b:3e:47:72:9f:62:0f:24:4b:a1:26:db:4e:f5:
96:c2:c9:65:de:e1:b5:35:1c:ed:13:1a:82:de:1e:3b:6b:9d:
03:bd:1b:a0:94:63:d8:15:69:d6:46:48:7c:f7:51:1b:fa:bc:
b3:df:02:c9:45:ef:bb:ab:cd:3f:2e:90:3e:38:35:c7:a4:0c:
3e:b9:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:14 2025 by rpki-client