Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File: K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier: nkOGLKOMrXMTOxJtyKlqTYn1nVOmj3+L5nudL0P8UWQ=
Subject key identifier: 3D:CC:BD:11:A8:4E:AF:20:FF:E0:D8:66:D0:1B:D1:17:33:92:F0:10
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer: /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial: 0195E00FE27830672560548C33793EDDDA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number: 046C
Signing time: Sat 29 Mar 2025 04:01:31 +0000
Manifest this update: Sat 29 Mar 2025 04:01:31 +0000
Manifest next update: Sun 30 Mar 2025 04:01:31 +0000
Files and hashes: 1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: 06cK9Yl2A3O1+PtGuLJxBn8hPT1dctwQuXlXeRGNFc8=)
2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:e2:78:30:67:25:60:54:8c:33:79:3e:dd:da:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Validity
Not Before: Mar 29 04:01:31 2025 GMT
Not After : Mar 30 04:01:31 2025 GMT
Subject: CN=3dccbd11a84eaf20ffe0d866d01bd1173392f010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:b2:74:aa:e2:7b:8e:04:0f:73:36:c1:de:
57:1c:32:f6:c7:5e:33:de:e4:52:66:9c:f8:dd:e4:
b4:ec:16:21:65:75:fb:a3:9c:3d:1f:82:5a:0d:dc:
ec:d0:28:76:2a:8a:9f:3c:ba:c8:31:05:96:5c:c3:
14:6a:20:a6:45:2f:d2:5e:6c:4c:fb:f0:f9:3f:a6:
5f:01:11:3f:e1:e3:14:ca:27:21:ec:02:f5:c7:25:
35:17:24:e1:57:cd:8c:81:17:ce:63:93:d1:7b:69:
69:b6:0d:ef:28:1e:0a:01:03:da:45:1a:aa:61:db:
25:34:98:9a:91:24:71:0f:17:c5:5c:a2:d6:b9:2b:
53:e1:9e:ce:3a:6c:f3:fd:6d:31:0f:5c:0b:83:b2:
31:d5:c9:29:e0:4c:e2:5f:1e:95:26:10:cf:8f:fe:
bb:61:12:52:ee:24:67:90:2d:98:df:96:b8:29:8d:
70:14:83:cb:41:e8:36:04:16:1b:e7:c4:44:b0:24:
58:b4:b5:a3:f0:1d:41:52:6e:6a:d2:53:72:1c:f5:
05:bc:44:8f:1c:92:eb:0e:b5:89:27:26:cc:57:cd:
8e:8f:96:f2:6e:c6:db:92:df:f4:a4:4e:e4:37:63:
b3:b4:42:d2:38:80:0f:c4:9f:95:ba:24:57:10:3b:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:BD:11:A8:4E:AF:20:FF:E0:D8:66:D0:1B:D1:17:33:92:F0:10
X509v3 Authority Key Identifier:
keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:83:47:41:3b:09:56:cf:58:d2:54:d7:04:ab:e1:c0:df:
11:cb:04:11:06:fc:02:de:cf:88:ae:c4:f9:da:91:38:5a:4c:
a6:70:69:11:ea:02:dd:1f:ff:e4:2b:43:55:fb:49:bc:ef:94:
7e:21:76:e0:ad:de:dd:96:55:38:03:bf:e0:75:02:00:3a:a6:
a9:5d:d4:2b:d3:1c:07:2a:e6:16:0c:82:c1:0f:b5:1a:9c:c1:
7a:0f:9f:f3:cb:eb:e9:15:8d:e2:7f:08:65:a6:e8:1e:f0:3e:
c4:78:a1:85:cf:c0:d8:48:b1:f1:25:2e:b3:61:af:f5:0e:6d:
96:bd:6d:6f:f4:97:5a:84:4a:18:64:11:95:fa:25:75:e0:5f:
fb:64:5d:09:47:1c:9f:73:2e:a4:c3:91:8a:1f:9b:91:ed:a8:
31:69:f9:72:59:41:85:af:86:24:b1:f0:ac:e3:a8:34:37:0d:
27:c5:8b:92:67:b3:f5:e0:ac:a8:d8:35:0b:88:a9:4b:a1:4e:
3e:99:26:e6:8a:be:25:61:25:41:b1:37:9d:34:73:2d:d9:a9:
76:48:9b:96:7c:5c:3d:07:35:fe:1a:99:71:ea:39:9b:e7:80:
6c:b1:43:f2:2a:06:a0:6f:5a:91:8d:67:e4:3f:0a:15:0d:73:
9d:07:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:08:42 2025 by rpki-client