Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
File: KGS7NPtdFsqdH6P5eUy0jUvthHM.mft (raw, json)
Hash identifier: OsLAIPUD2jXJ4exw9N7/vuMAXcQtmSBtZOlOb2c4VYI=
Subject key identifier: F4:F8:64:63:C4:CC:CF:7D:A6:41:56:68:4E:C6:BA:97:14:E0:D9:33
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Certificate issuer: /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial: 019407C65FB4ADF6A1EFC3CCE2A0C9BCA655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
Manifest number: 131F
Signing time: Fri 27 Dec 2024 11:00:28 +0000
Manifest this update: Fri 27 Dec 2024 11:00:28 +0000
Manifest next update: Sat 28 Dec 2024 11:00:28 +0000
Files and hashes: 1: KGS7NPtdFsqdH6P5eUy0jUvthHM.crl (hash: SsNrCyecFBlb3VsjdH/09votVWOFtKS3NMzvaqZY07k=)
2: rdW_Uwi1zywbRu9qjW5gmE-XhqQ.roa (hash: a3iBQ2w14uNmI0u4+5wRX/6K/QJ3ekSsmQctNl8Ueik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:c6:5f:b4:ad:f6:a1:ef:c3:cc:e2:a0:c9:bc:a6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Validity
Not Before: Dec 27 11:00:28 2024 GMT
Not After : Dec 28 11:00:28 2024 GMT
Subject: CN=f4f86463c4cccf7da64156684ec6ba9714e0d933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:ca:03:ef:e3:2f:7a:4b:43:01:6a:c8:22:
a9:16:6d:1c:a9:c8:cc:d0:b8:1b:bc:f1:97:45:b8:
35:49:b9:29:b4:ff:02:5f:b2:f1:43:8c:26:21:b5:
fa:3e:0a:0c:20:0a:fe:76:35:37:de:86:11:4f:a0:
0e:5b:91:91:b0:96:77:50:ee:11:b5:3d:d2:f7:df:
8d:21:06:46:95:0a:13:65:f0:fb:cb:79:25:1e:4e:
35:bc:93:1f:40:05:44:21:3d:76:6e:a6:a1:0d:51:
17:8c:50:8d:7a:79:bf:0a:d9:de:29:87:fa:2c:94:
eb:53:c2:65:c8:b6:97:ca:e4:55:05:ea:9f:d3:8e:
7b:88:1e:70:5d:39:4a:31:c3:5c:08:6c:e6:2a:34:
1c:48:30:c3:d3:7c:be:cd:c6:50:2b:9b:26:35:da:
fc:eb:a9:ed:b9:0a:c9:f1:dd:aa:1e:87:e5:db:b2:
ec:c0:6a:33:67:ed:ec:eb:af:1c:17:b1:52:02:71:
a6:bb:4d:61:70:10:31:9c:c6:e6:e2:3f:54:fd:a4:
bd:a4:e4:87:5b:7b:c6:4f:db:d1:f2:7f:dc:46:f9:
80:b8:71:26:b2:61:b6:49:22:a0:8a:da:ed:3e:f4:
1e:5e:c1:66:00:6a:75:fa:f8:81:85:dd:cd:a1:94:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F8:64:63:C4:CC:CF:7D:A6:41:56:68:4E:C6:BA:97:14:E0:D9:33
X509v3 Authority Key Identifier:
keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:14:fd:c3:33:17:2e:1a:ca:13:34:b1:76:57:e0:36:af:a0:
d4:88:f2:28:7e:13:a0:6b:e0:cc:f3:39:06:2f:2e:c9:c2:fe:
cb:30:0b:f3:c7:e1:30:2d:97:13:42:bd:1c:50:e7:ad:87:97:
a4:be:09:5d:49:f3:cc:f7:cd:b0:6f:3f:6b:cb:de:0f:47:07:
83:f6:54:b5:87:78:f7:23:87:08:98:18:eb:80:af:92:4a:63:
25:51:d5:77:b7:3a:72:ef:f0:d3:dc:81:7d:45:cb:98:fb:72:
b9:a4:66:c0:00:e7:68:b3:66:8f:94:3d:bd:9f:23:12:4a:b6:
58:15:b0:78:e0:05:60:c4:06:1c:d4:28:29:12:fb:a2:18:5b:
fa:34:10:78:a7:93:e7:32:6c:ce:ef:d4:e1:e2:26:81:e0:9a:
cf:0c:f2:26:6e:ff:a3:59:ad:1a:11:58:86:06:39:1a:0c:f2:
4f:88:67:53:2a:87:8a:c1:e1:5d:eb:83:d4:fc:af:2b:43:11:
ca:98:26:d7:d3:73:f7:95:ad:5b:f4:41:9b:6e:68:8b:45:c4:
29:c2:05:d7:29:c9:79:ad:da:c0:78:31:64:07:7c:06:39:be:
8b:3c:a0:36:06:a2:da:67:55:d5:53:89:90:9b:7b:de:30:80:
b6:4c:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:56 2025 by rpki-client