Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier: 9/NwjaWBkkFmZMSoYmEt486qJGsWTxgsNQA88f1Jkh0=
Subject key identifier: 2B:A8:3C:3D:26:29:A9:19:9D:0D:2E:A1:82:9D:D4:B5:3A:CC:01:17
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 0194BD8544FA07E995C8EFD24B315CC6CDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (hash: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=)
2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: uBsrkBoFuUSqneT+vEGo9T+pNl0pDknJ37u+jWGK7Lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:44:fa:07:e9:95:c8:ef:d2:4b:31:5c:c6:cd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=2ba83c3d2629a9199d0d2ea1829dd4b53acc0117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:57:52:f8:38:1e:80:e9:3c:d7:0a:a8:c9:
57:0a:5e:ba:87:39:a1:c6:56:bf:d9:f5:21:94:7c:
99:3f:66:42:48:0a:31:0e:69:d0:a5:c3:b4:fb:c7:
94:c2:da:28:1a:4c:f3:36:ea:c3:4f:33:bc:00:d6:
1f:f1:4e:ff:de:64:26:7c:d0:bd:37:a1:bb:6e:0d:
11:64:3b:ba:6d:35:22:22:fc:4f:df:cb:9b:4f:74:
ec:6a:77:87:f2:6d:0a:00:f7:c6:ad:a4:0f:5d:6b:
a9:75:15:13:87:29:97:64:31:f2:2a:11:18:27:cb:
f8:d4:47:f2:ff:20:c7:eb:56:97:2b:2b:5c:bb:df:
be:b8:e1:e8:3c:ff:8b:3a:52:66:1e:ea:78:b9:2a:
ea:b0:29:d5:f5:d9:87:4e:f8:31:d4:d9:6d:8c:78:
39:8b:94:06:af:58:cb:0f:b3:c5:26:df:db:25:58:
f8:59:62:8b:d8:cd:a7:4d:6e:75:8c:7c:f2:24:4f:
c6:c1:bc:36:69:7f:cb:6f:22:fa:93:1d:42:a4:c2:
e4:84:36:46:be:6a:e0:37:07:6b:6a:1f:23:ea:dd:
cb:b0:ac:3d:ed:bb:ac:5d:8d:cd:b1:9a:10:24:17:
bc:50:d1:84:dd:b2:00:66:45:1d:f6:11:6b:cf:e1:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:3C:3D:26:29:A9:19:9D:0D:2E:A1:82:9D:D4:B5:3A:CC:01:17
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:78:48:fc:ef:d8:db:4c:eb:db:38:f2:37:20:79:53:f0:3a:
22:c3:f9:d7:ec:ca:cd:58:6a:3b:e5:0e:04:20:0a:64:f5:6e:
6a:43:a2:1d:45:2c:e8:df:33:b3:f2:c2:1e:cc:32:37:e8:2e:
1a:47:ce:be:53:71:fb:1e:42:4d:34:7c:6a:d1:5f:15:7d:91:
1f:6b:27:12:44:e0:4d:cc:3d:aa:2a:7f:e5:bd:34:a1:56:67:
95:17:82:ff:5a:56:4b:46:09:f0:cb:87:f0:6f:16:4e:b5:00:
4d:87:32:01:a9:c7:f6:7f:7b:ed:71:e9:5b:38:c6:e4:95:57:
c7:00:1c:e6:b7:7e:04:e4:c7:ac:fc:18:16:c8:76:0e:e1:88:
c5:90:da:3a:41:19:6e:1c:c4:2c:00:02:cb:97:32:e9:17:62:
c5:8d:85:d7:34:e8:01:cf:47:bd:ec:9c:44:4b:58:f6:f1:d0:
a0:d2:96:ac:97:fd:da:80:45:46:08:8b:ac:c1:32:8e:83:d2:
fa:cf:58:f6:58:19:c2:e8:0e:bb:39:ae:29:d1:ea:2d:e1:96:
84:88:2e:c3:24:3c:a3:bc:ed:ea:67:24:27:3d:8d:59:d3:73:
11:64:41:7c:4d:c6:78:3d:fd:de:30:2c:ce:8b:36:c1:67:8c:
7d:06:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:05 2025 by rpki-client