Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier: GVb9Nf9tADA3/sVhQCyNGLKHvsi4BflZil6tjDXE6+0=
Subject key identifier: 86:3E:49:6B:66:06:10:A1:97:DC:40:F8:90:07:2D:0F:02:AA:16:D1
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial: 0194BC04A204E75ED07E3E7610786BA808D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: ni9L4a5I0SXWpdI8s/AZou0ps9Gc3Ber4K5EFiWq6T4=)
2: vfgX0QM1-x_CfmwOuFEwuDR0qtE.roa (hash: VmApxfvV1fKRc5LBTSdDtZW6mm+Y06ANpvyiPSheTug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:04:e7:5e:d0:7e:3e:76:10:78:6b:a8:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=863e496b660610a197dc40f890072d0f02aa16d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:10:21:06:16:e5:bb:3a:b3:d7:82:3d:ff:
d8:9c:da:c5:3c:1f:28:3b:24:27:a4:f6:df:03:4d:
e1:da:6d:ee:eb:04:ce:f8:21:a8:2f:41:a2:ea:d5:
14:8d:a8:89:42:f3:7f:e9:7f:05:b3:8c:6d:2e:3e:
48:4e:fc:c9:8b:58:6c:ef:2f:64:5b:29:a4:f6:21:
99:df:2b:6b:52:3c:19:85:d3:30:89:33:c7:a1:25:
c5:bd:db:2e:d6:56:8c:51:2f:4d:7c:6a:ba:a5:54:
d2:60:6b:21:b2:d8:63:39:88:de:ef:fa:38:ab:bd:
af:a4:60:2f:a6:ba:7f:cb:1a:62:f9:b1:00:7d:98:
2f:78:38:e1:fd:ce:97:87:97:61:96:d9:1b:7e:f8:
e9:fd:f7:70:7a:6d:0d:ba:df:8e:fd:f1:4c:99:21:
6d:a2:75:b5:3c:b6:2b:36:75:25:64:02:44:0f:46:
86:40:94:e1:33:84:90:b6:b5:9b:b9:ae:72:ea:2a:
07:c7:5a:a4:dc:1b:4d:3e:9a:a4:ed:7f:e8:90:16:
86:ed:c1:17:f7:4d:c1:59:d2:f1:78:44:c8:3c:c6:
71:93:2a:3c:12:79:b9:b7:0d:9f:2b:08:01:6f:3d:
27:c8:eb:0e:51:48:a9:ef:12:62:64:23:df:5d:5b:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3E:49:6B:66:06:10:A1:97:DC:40:F8:90:07:2D:0F:02:AA:16:D1
X509v3 Authority Key Identifier:
keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d8:6a:3d:97:eb:cf:5b:ef:c1:7c:85:0b:40:78:8a:84:5a:
14:e7:81:db:10:a8:5b:f8:17:74:07:62:01:f5:2b:7e:92:6e:
6f:d2:28:c5:c2:26:60:28:3e:c2:35:07:97:b6:c7:78:cd:2c:
c9:92:cd:11:1a:30:59:d7:63:f1:1d:db:46:c6:b3:56:5d:2c:
16:61:ac:d1:e1:ed:d4:58:4c:cd:34:a0:72:2e:14:7d:55:66:
12:d3:d1:d7:4a:e1:fb:19:7f:cc:46:d7:47:94:73:86:19:c4:
e9:8b:58:68:db:98:ae:56:ed:f6:2b:4c:76:61:89:8f:d3:b8:
c7:af:b2:0a:27:ad:a1:7a:7d:72:20:dc:0f:f7:41:ca:9e:63:
41:2b:45:23:1a:29:ca:5b:fc:c0:d6:f5:c7:0f:4d:af:e0:0a:
c6:20:2f:69:7a:e3:f3:9b:f4:bf:dc:2e:a9:72:79:31:5b:a4:
a6:5c:9e:f9:59:1c:00:62:46:92:b0:20:79:6e:85:82:99:6b:
0d:fe:c6:7b:2f:45:08:33:f8:d0:e5:d4:37:5a:f2:aa:8d:f7:
a8:ba:ca:cd:f4:04:57:50:4d:99:6e:35:fa:f1:9a:cc:cf:fd:
ac:a4:f8:e2:52:dd:b5:d6:0b:05:88:39:3a:5b:6f:c9:07:ba:
0f:dc:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:50 2025 by rpki-client