Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: YTmd/gnsi50RBoVtGWGic5ZeFYxzubF6tLk+AnBYm5Y=
Subject key identifier: 2B:EE:9D:B3:A3:9C:9C:53:0B:32:9B:9B:51:23:05:C4:A7:8B:A7:B6
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 0194BCE073AA877A4A1585440C381FE2E641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 1125
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: R+wr3ET8kCVBsEF1tUKK54NTm3zr/bGJKS9uw+s85EA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:aa:87:7a:4a:15:85:44:0c:38:1f:e2:e6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=2bee9db3a39c9c530b329b9b512305c4a78ba7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:bb:d0:6a:84:f8:41:b3:2d:41:a5:6d:36:
ab:d7:2f:ff:00:21:14:3f:0f:00:64:00:8f:3e:03:
c8:be:28:74:12:f8:e9:6b:b3:02:d0:5b:59:d8:26:
df:c1:7e:8e:d2:47:6b:69:e6:25:fe:04:57:53:e9:
3d:58:6e:74:8f:8a:5c:69:f0:a8:f8:a8:2a:e1:6b:
68:c4:b8:04:a4:47:30:1c:e7:fe:b0:de:93:22:3f:
18:b7:ca:0c:6e:b9:88:6b:5a:a6:41:1c:67:31:73:
94:f5:8c:92:47:9a:fa:44:1b:7a:80:f4:f9:5b:37:
ce:36:4f:99:83:0e:77:3f:60:57:10:dc:da:76:ea:
d8:74:32:ab:5f:27:a8:0a:c9:c8:9b:78:3f:34:cd:
aa:de:f1:bd:a9:48:0f:23:a5:54:29:00:e2:9a:3e:
b3:13:ee:78:08:6f:35:04:f2:ce:5b:40:1d:b1:4d:
fd:aa:60:d3:cd:52:d0:ae:18:fb:07:c6:43:1f:25:
1b:f0:3a:90:26:d6:18:f8:22:9f:7e:a0:c9:0a:d0:
29:31:96:4c:3b:1a:f2:dd:f3:27:c6:ab:63:91:ed:
d3:2c:ab:11:74:a6:06:2b:25:57:ef:27:c0:32:f6:
d7:03:2e:c5:88:4f:2e:c5:79:ab:24:8d:5a:55:1d:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EE:9D:B3:A3:9C:9C:53:0B:32:9B:9B:51:23:05:C4:A7:8B:A7:B6
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d8:6b:8a:9e:4b:b3:b0:0b:05:95:8f:fb:57:f2:5a:fe:a4:
67:d0:3f:49:c7:88:be:8d:fb:c4:db:9b:34:d6:a8:78:6a:40:
51:66:0a:f1:ad:2d:66:72:80:f8:24:eb:5f:45:dc:10:9c:89:
3e:02:18:a9:3c:b4:2f:fc:f3:60:24:96:1b:b1:b3:da:5b:45:
d6:0b:26:86:4f:91:bb:75:b1:2e:ef:75:11:7b:fb:16:ab:ba:
7b:f8:ab:44:8d:2a:37:46:4b:bd:25:45:eb:a4:1b:df:e0:6b:
6d:96:52:4c:3a:cf:97:7a:a4:de:31:33:82:c6:08:d0:4c:44:
d0:40:2b:d9:d1:70:c3:7c:52:68:13:aa:ff:25:6e:90:fd:8b:
88:d1:78:df:d5:2c:bb:f8:37:48:f8:d5:a1:ea:37:3e:1c:00:
6e:83:8e:25:3b:a2:93:3e:3a:85:5d:56:d3:f8:2a:20:d7:54:
28:63:c5:63:25:d3:6b:c8:c1:8d:4a:38:91:39:c0:da:36:47:
5c:f1:b9:3f:9a:96:e1:3a:f2:34:63:9a:d0:33:86:8b:55:16:
05:be:68:93:98:1d:fe:3a:14:e6:63:54:c9:96:f1:a6:4a:3c:
55:97:a8:35:18:78:e8:3e:bb:3f:b3:96:f2:41:cd:5a:f9:d3:
98:38:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:52:30 2025 by rpki-client