Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: rD2QBlRaFAP37DMp4xgx4mo7xuF/uzBU1wmx+gg4mkA=
Subject key identifier: 46:E9:FF:85:02:D3:31:33:AB:CE:0C:5F:32:04:43:40:E4:0E:0D:01
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 0194BCE0C0F0E604AE51E505AC458862E648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0802
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: ohJtWKNs2ADTZcZxM53V/sDeY1hK6UfJY2gTqSlMG04=)
2: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:f0:e6:04:ae:51:e5:05:ac:45:88:62:e6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=46e9ff8502d33133abce0c5f32044340e40e0d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:33:b7:49:ed:9b:c2:2f:6c:ad:72:63:19:
ba:10:d2:55:0c:81:93:ce:fd:92:db:ae:18:a5:e4:
c6:17:6d:c1:84:82:40:61:09:8c:43:b2:e5:e8:93:
17:bb:09:80:f1:34:4b:2f:af:71:db:7b:5d:94:8b:
c0:b7:c5:00:ec:d5:ba:69:cb:24:84:58:1a:ff:79:
ef:43:2c:33:87:9d:44:f6:12:1b:17:5e:2d:5d:ed:
6f:05:b8:3e:8b:9a:85:46:c0:3a:b5:32:fd:5e:45:
fc:71:b9:f2:91:9c:4f:8f:85:0e:2d:02:69:a8:29:
03:3d:6e:20:ab:a4:c9:fe:8b:a5:33:d4:18:24:f5:
95:19:04:a7:50:73:c5:a4:53:93:5e:a8:2b:86:22:
8a:40:a2:94:1d:19:10:e7:fe:8b:61:52:ad:3f:7a:
5e:01:fc:f2:9a:ee:dd:c9:18:aa:2f:fb:49:6a:1c:
16:c4:a5:1e:6e:ea:92:8d:d1:82:a0:84:9b:bd:55:
8b:eb:eb:36:db:10:79:3a:d4:92:6c:41:9e:04:57:
34:2a:49:5b:a5:3b:1e:74:18:ce:16:16:c1:4c:89:
d6:63:a1:b9:76:cb:72:ca:9d:c1:b6:22:4c:8b:17:
43:94:88:86:b8:64:cc:23:2d:dc:a1:5c:af:5c:b6:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E9:FF:85:02:D3:31:33:AB:CE:0C:5F:32:04:43:40:E4:0E:0D:01
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9c:2f:25:64:5b:94:93:5a:ca:af:3d:e8:12:bc:ed:6e:dd:
78:f4:b0:9f:92:b6:b8:95:21:ca:38:93:83:3a:bf:d7:5c:3e:
fd:38:cb:63:d3:e6:30:13:b0:39:36:5d:6a:93:9b:7a:87:f3:
33:45:ce:a8:c4:8b:48:39:1e:00:a2:23:ec:f2:7a:af:02:b8:
d8:79:af:6f:9a:64:80:fb:a5:53:6b:4a:5d:87:27:0a:be:6d:
2f:d8:8b:1f:c5:93:13:66:3e:ba:6b:fa:0e:79:90:81:94:e6:
c0:f3:9f:90:32:2e:5b:86:cf:a2:6c:95:f1:ea:92:89:9c:3b:
e4:5a:d9:d5:03:5f:3b:a0:a3:8b:8b:a8:66:85:5a:cc:2b:8b:
d3:21:3a:7a:8c:ad:31:69:c2:86:50:aa:af:4d:26:75:9b:48:
e8:e8:9e:20:b0:2b:f3:a3:2d:0c:3a:40:0d:30:13:76:73:5d:
b7:f9:ae:5a:b8:be:a0:f8:35:16:0f:ec:37:0a:f9:33:a8:25:
c6:c2:db:05:a7:d7:ab:9c:c2:2a:8f:65:4f:14:5b:a9:e9:d2:
f5:c0:70:87:e8:8d:c7:a0:41:c3:5b:a8:29:a7:34:4c:ea:d9:
a0:09:16:d2:32:9b:ee:0f:89:e5:97:70:17:a7:8d:23:ac:4e:
a4:21:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:55 2025 by rpki-client