Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File: KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier: AiFHLcWQsA/ybY4PDZYV/1SSwE450r8X0mDsTW8rRAw=
Subject key identifier: BF:1F:6B:13:D7:5A:15:F3:86:4E:D7:C5:E3:D0:D8:EB:6F:3C:A3:AF
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer: /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial: 0194BBCE5D0EC05443DE6D412DFDC1050054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number: 0966
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: 1lrtH8qIV5e3th4jMCPobjKiYaU.roa (hash: xgADT5hDJzpgst28AckBVIlM/BW2ECMOC24fNQS3BL0=)
2: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: Hz6Kk1rwUQaAFM6Eih//xuwbe5Mc314W63wwTgeb9e8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5d:0e:c0:54:43:de:6d:41:2d:fd:c1:05:00:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=bf1f6b13d75a15f3864ed7c5e3d0d8eb6f3ca3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:d7:60:11:b9:31:23:76:25:e1:32:39:63:
f2:92:48:da:26:a0:69:10:35:27:30:66:bb:f7:2d:
16:08:8f:9e:06:e4:65:07:a7:5f:98:c8:7a:22:34:
37:52:f3:e2:cf:81:e4:9d:1a:a2:86:f8:f1:2e:e6:
d5:c1:f3:a3:5c:ef:fe:ab:68:76:73:03:9a:dc:bb:
15:68:c1:b1:eb:81:ed:23:c1:c9:fc:9b:4e:c8:4a:
2a:92:8e:4d:e6:38:42:ff:76:e4:e5:ff:83:9e:2d:
ff:08:de:45:90:e6:55:f9:e0:4e:43:dc:c5:ca:b5:
e9:7e:8e:7c:65:90:2c:da:5f:ea:07:32:ea:89:58:
be:21:fc:e3:7e:b5:88:f9:b3:3c:ea:5e:7b:a4:f4:
4c:84:ad:cd:54:4b:d9:9e:2c:22:ab:26:7a:51:19:
aa:06:ce:e3:59:78:d5:01:bd:c9:ae:9a:63:f0:48:
3b:ed:98:1d:e1:70:29:9f:8b:0e:50:d7:65:79:52:
09:a3:a1:35:73:f5:8b:fb:03:24:e3:c6:42:07:10:
e9:80:23:5e:ec:b8:69:1b:b3:9b:76:77:aa:c7:c5:
5d:a2:bd:eb:bb:3c:40:24:cb:86:60:27:b4:fe:9c:
83:a6:71:0a:28:0d:5e:d1:e9:db:d2:3e:48:8a:47:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1F:6B:13:D7:5A:15:F3:86:4E:D7:C5:E3:D0:D8:EB:6F:3C:A3:AF
X509v3 Authority Key Identifier:
keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e9:de:ef:7c:c8:19:1f:fd:c4:47:96:80:1c:f1:7a:64:30:
ff:37:81:97:e0:86:77:93:57:24:0a:f7:c7:37:c6:f7:c4:75:
e5:ec:07:c0:01:53:b1:94:c1:93:14:b2:eb:d5:c8:13:bd:e6:
15:06:c3:89:02:a3:c5:e3:2d:f8:61:56:5d:90:a2:7c:68:ee:
19:57:30:31:99:d8:e9:32:d2:83:1b:86:be:6d:e1:3b:1d:4a:
90:dd:f0:c3:d0:69:5e:d3:5b:fc:7a:b1:c5:27:e2:b8:31:c4:
d1:01:32:94:f4:0a:26:5b:b4:2c:a8:a3:14:b2:f1:08:88:2c:
b9:ec:e7:c4:00:83:cf:e6:d4:a3:f8:d6:28:a4:45:80:fb:85:
f3:8e:31:7e:c4:f4:b2:9e:58:cc:23:2d:76:da:0c:c1:ef:39:
4a:12:b6:d0:fc:ca:75:33:90:f2:f6:0c:e4:62:c8:3f:a0:2f:
f9:9c:3f:42:53:25:a2:69:8e:c4:df:7b:74:89:d5:50:1f:b1:
1a:c0:b7:a5:7c:6c:7e:fc:2a:86:05:93:88:14:53:c4:e9:5b:
f8:99:61:c8:9e:bc:be:36:ee:fd:17:50:ae:38:49:a9:0e:0f:
3e:71:3d:6f:d8:c1:c4:cf:f0:1e:7c:bb:eb:f2:3e:ec:ba:c9:
4c:65:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:52:01 2025 by rpki-client