Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: FJ/BzkLDXtgPlkTbGDd7Y0aeG1D+RvNF+atgdR14n3M=
Subject key identifier: 15:B8:DD:78:BD:00:92:A3:BD:93:7C:E3:D5:AC:54:49:FF:A7:4B:72
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 0194BD8595FD0549EBFA1E01452FADA91083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0CC7
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: 0tc5nxwN/xGPjR0Cu2YjxksFeNbi7RSiW5fjcRk4AfQ=)
2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:95:fd:05:49:eb:fa:1e:01:45:2f:ad:a9:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=15b8dd78bd0092a3bd937ce3d5ac5449ffa74b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:e4:92:e7:bb:21:8d:8c:f9:e9:f3:2a:cf:
a0:e7:37:35:e5:47:97:37:8d:f7:8f:56:62:59:3b:
2d:f2:ba:3e:59:95:cd:ee:bd:e3:12:1c:1b:da:3d:
90:39:b0:6a:ad:fe:ad:cc:2a:ff:ee:46:d9:04:16:
56:09:09:41:e0:b3:34:f5:f1:ef:12:79:dc:10:ff:
c9:78:40:10:98:91:45:78:b3:a8:9d:df:69:18:66:
a7:e5:66:f8:c4:d4:27:4b:61:5c:7e:10:6c:c6:54:
47:64:d7:7b:f2:bc:7b:09:9d:14:af:ba:3c:73:f8:
da:0e:f4:01:d0:d8:c5:0d:c3:6b:d8:e4:4e:59:9f:
0a:bf:04:64:d0:27:3c:de:d9:29:28:ff:a3:8b:2f:
32:4c:d8:0b:f1:fa:a3:2e:06:aa:61:eb:4d:31:ce:
c6:ef:13:81:aa:6c:6a:84:67:d5:63:be:2f:af:fe:
e9:90:c9:38:0d:85:46:53:cf:05:72:87:f4:92:ac:
aa:b8:76:45:23:44:2d:59:ed:d8:94:fb:c2:da:0d:
db:03:e5:b1:35:61:a8:34:29:e9:eb:55:7c:1e:21:
e0:1c:0b:fd:92:a9:b9:7b:7f:32:a3:5d:ce:56:58:
af:cd:04:13:ee:6c:ac:86:3e:06:a4:ad:92:1f:8a:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B8:DD:78:BD:00:92:A3:BD:93:7C:E3:D5:AC:54:49:FF:A7:4B:72
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e5:12:e0:70:e5:60:80:92:63:fa:fd:9a:80:57:12:35:20:
89:c0:13:2b:57:49:8f:7c:38:0c:b3:25:a8:9c:e5:68:f3:82:
13:ee:3e:54:d6:ab:56:35:c2:be:bd:00:26:9f:6b:24:32:38:
f5:2f:ad:df:76:16:68:b9:b5:71:cc:1d:23:da:73:8c:e1:a5:
a3:10:59:53:e8:c7:85:60:6d:14:2c:33:fc:47:db:20:e2:ac:
04:ec:0d:63:52:8c:62:c4:ff:3b:0c:76:4a:12:be:92:81:99:
3c:9e:ac:81:4d:9d:67:c9:d7:aa:ea:8a:8b:bb:6a:f2:85:88:
6e:51:f3:83:8f:53:ed:fd:44:a8:ce:fd:ad:74:1e:52:73:82:
26:86:30:62:0e:08:11:d8:68:ce:26:3e:5b:48:56:09:b9:71:
e0:27:1e:72:0d:63:d2:a8:c3:bc:2f:2b:ec:8f:73:e6:07:65:
40:c2:bc:b5:74:ed:b4:05:f3:18:d5:0d:5e:75:c0:39:0b:e9:
7c:7a:b2:7a:7c:46:0d:7f:c8:c9:fa:1f:36:86:38:ba:f5:c4:
08:b5:8d:e1:14:73:86:a8:6b:b7:69:c6:37:9c:29:d4:9b:e2:
3d:1c:77:b0:8c:4b:ac:fc:84:fe:47:2b:2d:d6:c4:7b:7d:30:
0d:94:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:02 2025 by rpki-client