Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: tK+4ssfe2aA8kBwvukGkZ8OZpbe38ITwc6bpgsY5d+o=
Subject key identifier: 42:1C:8D:5E:73:AD:B0:BF:01:59:A5:51:19:C5:9F:4C:F9:84:D2:59
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 0194BD858C3903B6263F21579814B666BFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: ZS44isS/XzqOLy1X+6VUKxZAqDZM2j5uNe3LRXHyl54=)
2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=)
3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=)
4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:39:03:b6:26:3f:21:57:98:14:b6:66:bf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=421c8d5e73adb0bf0159a55119c59f4cf984d259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:0f:50:ff:54:36:e9:87:41:4a:f4:0a:88:
15:a6:18:f5:25:2d:46:d8:d1:53:01:e5:b6:03:bd:
4e:95:19:7b:f8:5d:bd:47:a0:ea:45:5e:45:46:a1:
2b:cd:8c:d6:ae:20:71:1b:67:f3:00:cf:81:f0:d6:
62:1c:f2:34:9d:6d:50:52:53:cd:56:f0:2f:a3:9a:
4e:3e:94:ff:bb:1b:23:1f:79:7d:33:07:d9:2c:69:
75:77:d2:55:62:f7:ab:1c:0e:1c:cb:3d:e2:86:f0:
98:75:39:43:68:34:8e:9c:38:7c:30:45:6c:19:45:
a0:18:61:bd:5c:94:5b:c3:13:11:e0:30:24:f6:50:
2c:17:35:60:19:5a:ad:8b:46:f4:aa:b9:59:92:fb:
cc:18:39:21:01:91:5f:17:6f:37:9b:f2:e9:5b:d2:
32:57:18:9e:08:b2:49:5c:c5:99:0c:e4:1c:67:a9:
6a:8b:63:1c:b1:e5:55:68:b1:4a:c7:9d:4d:68:7d:
87:2b:7e:d9:4d:93:2c:98:d2:27:90:60:46:fd:2f:
7f:78:c7:88:8f:cd:65:1a:45:7b:21:78:9c:d2:09:
37:64:27:df:2e:32:16:01:2d:86:ce:0b:a2:ff:11:
18:98:fe:7f:ae:cd:cf:95:ad:cd:c1:9f:6b:2b:70:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:8D:5E:73:AD:B0:BF:01:59:A5:51:19:C5:9F:4C:F9:84:D2:59
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dd:a3:28:7c:38:54:c2:b3:8a:b7:03:6c:38:e0:1b:c3:93:
6d:11:47:39:33:da:66:15:c3:d2:ce:5b:27:bf:ff:4c:ae:b1:
4b:24:6e:aa:ba:7e:37:61:da:db:01:4e:1b:fe:34:58:bb:bb:
f4:fd:d1:e3:66:02:87:09:58:d9:49:3c:75:b3:73:48:b7:4c:
09:aa:00:f2:65:9d:c9:a8:8d:a9:24:52:42:f2:92:cf:d2:a4:
d4:d7:f4:f0:fe:d9:28:b5:e3:30:25:58:e2:14:7d:7b:65:bc:
19:6a:67:83:36:da:0f:a2:96:e8:f0:d0:d8:df:48:14:a6:9e:
05:61:b8:53:af:69:40:b2:be:5e:15:4b:de:ec:e1:29:96:07:
58:0a:eb:01:14:e6:b4:63:ea:a1:22:76:f5:db:2a:af:7b:5e:
42:00:9f:83:4f:0f:71:5f:5e:ea:7d:90:1f:dd:c5:75:58:1b:
6c:80:dd:7c:cd:a2:95:e4:9c:8e:eb:e3:bf:31:fe:75:84:ae:
5e:89:f4:43:22:dd:90:e1:7b:28:75:31:db:3c:97:83:6d:10:
b5:c5:4e:a2:a6:4b:09:3c:4d:c4:58:2b:68:f4:b7:b7:fb:4f:
3a:ae:14:db:09:96:ef:0f:cc:23:62:21:ae:8e:d5:c9:bb:d0:
2a:8e:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:57 2025 by rpki-client