Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: sxxmoWbiWDNseWK8V3a1oDDD5HOdxegahI2dxPiyGqc=
Subject key identifier: CB:2A:0E:C2:D9:A2:CD:47:CC:A0:E9:D3:AA:82:58:C5:8A:15:D4:94
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 0195DFD981433A6F784160903422D45A944C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0F26
Signing time: Sat 29 Mar 2025 03:02:08 +0000
Manifest this update: Sat 29 Mar 2025 03:02:08 +0000
Manifest next update: Sun 30 Mar 2025 03:02:08 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: KGo6F7J3KrcUDNyqyxl20spxa2GSAxPIlQ/JFtR+/dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:81:43:3a:6f:78:41:60:90:34:22:d4:5a:94:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Mar 29 03:02:08 2025 GMT
Not After : Mar 30 03:02:08 2025 GMT
Subject: CN=cb2a0ec2d9a2cd47cca0e9d3aa8258c58a15d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:33:f2:0e:a0:fe:56:1b:71:55:db:1b:49:
e4:52:24:4e:c4:7d:11:84:f8:a8:fb:0f:81:3a:89:
04:3e:d4:7f:86:d5:e6:79:d2:36:7d:12:72:24:00:
6f:cd:ac:a5:21:d1:a7:7e:9e:67:c3:90:fa:6e:dd:
fd:73:de:41:64:9c:30:01:d1:d3:ea:28:ac:90:e2:
22:b0:17:00:89:93:80:6c:a0:f9:8c:34:4b:74:b1:
64:1f:91:ed:c8:d2:14:ff:63:54:51:51:37:c0:90:
a0:a8:fb:89:b5:8d:89:3a:81:21:17:2a:0b:44:a0:
f4:6c:6f:52:ed:1d:ea:ad:98:e4:d9:54:44:77:a1:
33:3c:2f:00:29:9f:71:c3:6f:d1:78:f8:c9:32:3c:
68:88:5c:fc:b1:e7:47:43:8d:e4:8f:8f:77:89:07:
5d:84:16:bd:fe:1d:ef:05:75:8a:3a:32:dd:8e:db:
76:f7:6d:39:ff:39:8f:c7:c6:f6:68:b3:65:70:e7:
68:43:0a:f9:8d:f1:ff:70:b3:e0:9b:68:a0:fb:07:
2d:e2:f1:bf:51:c9:7e:df:2c:2e:b3:44:97:0d:77:
6f:22:a3:ad:98:b1:07:9f:0c:4e:a6:d7:bc:20:95:
22:02:a5:da:92:7e:e0:b7:f9:65:96:de:88:d9:23:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:0E:C2:D9:A2:CD:47:CC:A0:E9:D3:AA:82:58:C5:8A:15:D4:94
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:14:f7:24:28:c9:80:38:ff:76:c7:89:65:a4:83:af:38:
5e:02:55:17:99:69:f0:61:94:10:42:01:88:e9:70:60:f4:2d:
22:75:0c:89:6b:95:f3:f1:36:7b:ba:24:a2:ce:a4:55:ad:fa:
11:be:d7:9b:07:d1:de:00:07:2c:b9:79:18:f9:93:2b:7d:28:
d8:c7:7a:23:d6:95:38:ca:91:2d:32:36:fa:1d:94:b5:d6:72:
60:51:63:29:fd:d2:73:c4:dd:57:42:17:cb:e1:db:86:cb:30:
63:75:15:54:6e:d2:f0:c1:fd:54:d8:9c:5b:6f:b1:03:79:52:
dd:69:16:29:0b:cc:d1:cf:c7:74:e7:f0:48:0b:76:8a:e7:fc:
e0:0a:09:84:5b:b9:a3:a1:c0:da:74:a8:c2:1d:67:ea:88:2c:
d5:94:bc:97:d3:d3:24:bc:e4:58:bc:7d:b8:10:4e:ae:a5:4b:
ea:01:bb:7f:26:ba:9c:2d:54:96:19:bb:95:e2:a4:20:3d:de:
76:e7:b1:de:58:1e:7a:02:8d:50:ee:2f:fb:c7:23:b7:5b:22:
a1:3c:08:6d:74:e1:47:fc:f4:94:25:e4:92:ce:ce:fe:e0:54:
af:b2:f4:22:c6:4d:e5:cf:a4:0e:59:8b:09:7c:93:6d:10:85:
d5:90:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:26 2025 by rpki-client