Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/KAmrNQSTapqqCLqRnNI0XDTnKdo.mft
File: KAmrNQSTapqqCLqRnNI0XDTnKdo.mft (raw, json)
Hash identifier: DxQKvdwPxeYAqqIwVI3yQMgvk0xmeyR0nVsg2sOe0Ls=
Subject key identifier: C4:A3:BC:91:15:19:B9:FB:4A:84:82:4E:3F:82:0D:31:82:C0:2B:C2
Authority key identifier: 28:09:AB:35:04:93:6A:9A:AA:08:BA:91:9C:D2:34:5C:34:E7:29:DA
Certificate issuer: /CN=2809ab3504936a9aaa08ba919cd2345c34e729da
Certificate serial: 018DEFCEFCBECD42336365A17808B8FD2846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAmrNQSTapqqCLqRnNI0XDTnKdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/KAmrNQSTapqqCLqRnNI0XDTnKdo.mft
Manifest number: 0FF9
Signing time: Wed 28 Feb 2024 13:02:16 +0000
Manifest this update: Wed 28 Feb 2024 13:02:16 +0000
Manifest next update: Thu 29 Feb 2024 13:02:16 +0000
Files and hashes: 1: AmHaFSYGFi1TzTpzXknUHEt-2Kg.roa (hash: BIaRR7DCAUsB0YkU4052zACGK5zZ/heVKHKUFJ9C+vw=)
2: KAmrNQSTapqqCLqRnNI0XDTnKdo.crl (hash: pfO53J+sOWEUbtMrg8Kensw9cWOd0EwYDBwuJjNKrUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:ce:fc:be:cd:42:33:63:65:a1:78:08:b8:fd:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2809ab3504936a9aaa08ba919cd2345c34e729da
Validity
Not Before: Feb 28 13:02:16 2024 GMT
Not After : Feb 29 13:02:16 2024 GMT
Subject: CN=c4a3bc911519b9fb4a84824e3f820d3182c02bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:72:61:a4:56:f8:bb:3c:64:3e:0c:19:f8:
0a:b2:1c:8d:3b:24:d5:8a:00:b3:c0:00:11:4e:4e:
f9:b4:d2:11:06:f2:45:58:ce:95:01:24:70:2a:ef:
e5:fd:22:f3:e7:73:00:9c:2b:f4:9f:32:93:c5:9a:
e6:11:18:82:8d:1a:c6:7f:eb:1f:18:d5:1d:f8:eb:
af:48:7d:cc:91:d1:99:94:48:42:3d:d1:8b:41:d4:
cf:da:4b:c3:3d:4f:5f:23:81:1a:e8:e7:66:19:3a:
7b:b8:0e:f8:ac:0e:38:70:55:50:b2:8e:7d:49:59:
c4:42:ce:98:04:6a:ca:c9:a4:da:c7:f2:ee:e7:0b:
1a:8e:0e:b6:99:f6:5f:36:0e:7e:eb:2e:9d:cf:df:
0f:64:fe:d1:3d:69:7d:59:9a:f1:30:b6:aa:c3:fb:
5a:d5:cf:1d:17:e2:07:c9:1e:f1:64:81:6f:56:8a:
81:0b:7d:e7:07:86:ee:9c:0c:66:e3:49:48:8e:37:
17:97:d1:6e:d9:9d:7a:3f:37:ba:92:b9:88:2e:30:
41:94:87:b4:d0:f6:73:97:7d:bd:5e:57:27:40:f5:
70:ff:8b:a4:3a:9a:5c:a9:4e:78:9a:09:83:17:ab:
3c:43:83:ce:6c:cf:45:cb:12:96:81:13:9e:cb:f9:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A3:BC:91:15:19:B9:FB:4A:84:82:4E:3F:82:0D:31:82:C0:2B:C2
X509v3 Authority Key Identifier:
keyid:28:09:AB:35:04:93:6A:9A:AA:08:BA:91:9C:D2:34:5C:34:E7:29:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAmrNQSTapqqCLqRnNI0XDTnKdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/KAmrNQSTapqqCLqRnNI0XDTnKdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/bddbeb-a0d8-49a6-9c2c-85f954763975/1/KAmrNQSTapqqCLqRnNI0XDTnKdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:d9:ea:e5:ae:5b:7d:f9:95:75:98:ed:4a:69:3c:61:e9:
72:5d:e7:92:ca:cb:24:f7:73:f3:74:0f:33:7b:e0:7d:4b:62:
67:f0:1d:6a:63:f5:2f:56:c0:fe:a3:9d:7d:0a:32:96:be:b9:
ea:b0:6a:46:63:27:0b:57:97:1a:75:ae:3c:67:e1:5c:8e:1a:
48:33:0f:0f:5e:36:e0:71:2e:72:e1:6a:01:79:39:35:84:00:
be:db:0a:60:2a:14:9c:77:0b:ac:33:b8:7d:fa:5f:9f:d7:8b:
24:29:b8:e1:a9:81:5d:67:f3:65:e7:3e:8e:df:69:63:d7:ca:
7f:d2:0b:48:ed:8a:ff:32:01:3d:b8:05:a0:55:d9:3f:3c:4a:
75:04:24:b5:be:91:34:4e:46:53:95:36:0e:1d:0d:34:76:15:
e2:6e:eb:bc:45:7f:a7:85:fd:cf:87:cb:bd:33:db:e9:38:46:
c6:f7:b9:49:68:41:81:17:36:ef:b0:93:5f:ea:e1:61:5a:1d:
34:67:2d:7e:dd:8d:85:ea:80:df:0d:60:bb:f0:f4:ac:5f:a4:
20:72:fd:45:64:c5:1b:45:16:17:16:0e:50:da:01:b5:df:44:
4d:f3:e2:04:ac:eb:ed:9a:48:91:18:96:35:37:5f:64:1c:08:
99:9f:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:36 2025 by rpki-client