Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.mft
File: KYUhYvBzIksa9b5vf9moQKKE27s.mft (raw, json)
Hash identifier: i1+3CJ+QlzCjv31aB9+llsPg5SwOaUl7hmtlhkbS1/U=
Subject key identifier: 23:BD:0E:18:71:4E:A4:70:CC:10:5C:C2:54:95:D8:14:CD:74:CF:6F
Authority key identifier: 29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB
Certificate issuer: /CN=29852162f073224b1af5be6f7fd9a840a284dbbb
Certificate serial: 01841BBC11F1889D2412EA1D308DEDE4221B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.mft
Manifest number: 0167
Signing time: Thu 27 Oct 2022 23:17:00 +0000
Manifest this update: Thu 27 Oct 2022 23:17:00 +0000
Manifest next update: Fri 28 Oct 2022 23:17:00 +0000
Files and hashes: 1: BoM0XyVz8ok5PrtgEH3QgYBJ8FQ.roa (hash: j4lelBxBFlkaP7wQsZEquyNVwFvWXCf4wNT2MG18dvw=)
2: KYUhYvBzIksa9b5vf9moQKKE27s.crl (hash: QfRTMOwix1zy6NQQ80sow3wyakdGkvEtzkqLMgA86C8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1b:bc:11:f1:88:9d:24:12:ea:1d:30:8d:ed:e4:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29852162f073224b1af5be6f7fd9a840a284dbbb
Validity
Not Before: Oct 27 23:17:00 2022 GMT
Not After : Oct 28 23:17:00 2022 GMT
Subject: CN=23bd0e18714ea470cc105cc25495d814cd74cf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:9c:1b:55:94:c1:be:3f:9c:21:7f:47:3d:
0b:8f:d4:19:20:ae:c1:37:7b:35:d9:9c:57:be:0a:
2d:90:80:15:7f:13:b9:f9:30:8f:df:1d:ea:99:64:
76:87:b3:2b:28:36:56:c9:42:80:5c:f6:6b:97:b3:
47:a5:f0:bd:eb:d2:9d:54:c6:20:6f:dd:43:93:14:
5b:4a:2c:7d:64:a5:c3:df:18:a4:17:49:75:67:d9:
c0:68:48:e3:3d:20:b5:d6:d6:66:ad:b2:fd:f5:17:
86:8e:9b:ee:01:e5:70:ed:cf:ff:fc:3d:43:8e:10:
c3:bd:b1:bd:00:1d:14:9b:83:20:fa:26:93:99:28:
ad:e8:8d:6a:3b:12:b4:73:25:b2:01:b7:60:88:6b:
97:33:5a:d9:a5:09:1e:0a:9f:81:84:46:73:cd:c3:
04:05:e8:90:0c:e5:f7:28:c5:80:84:b0:53:cd:9e:
97:cf:5b:62:d3:e0:61:31:1c:dc:9c:fc:c4:4e:a6:
65:b4:26:8f:3e:67:d7:f8:e5:b5:20:f4:a8:1b:05:
d0:cc:a4:cf:34:d4:a0:42:ec:51:84:79:23:57:df:
d1:17:5a:a6:92:1e:a2:36:7b:fb:96:4b:bf:b2:14:
14:19:89:6a:e8:12:4e:3b:bf:c3:e0:5a:07:13:98:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:0E:18:71:4E:A4:70:CC:10:5C:C2:54:95:D8:14:CD:74:CF:6F
X509v3 Authority Key Identifier:
keyid:29:85:21:62:F0:73:22:4B:1A:F5:BE:6F:7F:D9:A8:40:A2:84:DB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUhYvBzIksa9b5vf9moQKKE27s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6ba2d0-b9d4-4ff9-9dcc-baa891d80677/1/KYUhYvBzIksa9b5vf9moQKKE27s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b9:79:51:49:87:4c:a7:58:a0:1b:66:13:06:f7:de:d2:a5:
17:02:8e:b1:c1:a5:85:e6:a6:2f:e8:d0:3e:2a:10:0c:ab:5d:
65:a2:ea:8c:da:20:72:ab:4f:76:15:e3:51:88:44:d3:df:9b:
23:9b:be:e0:5c:6f:90:7a:0b:a2:43:f9:d2:f1:de:d1:43:44:
2a:dc:f6:22:a6:d9:bf:ee:02:31:71:b4:0d:a2:33:3d:c6:14:
72:67:2b:77:30:c2:9f:51:40:65:89:d1:3c:e5:bb:3e:de:d9:
4e:11:3d:9b:75:ab:f2:de:7d:63:7d:82:54:5e:aa:4b:15:cc:
f5:9f:56:c8:9d:c2:61:72:d0:3c:c6:71:3a:99:6b:f5:35:71:
02:d7:73:cb:aa:1d:e7:d8:ad:3f:bd:2b:bf:f7:00:62:5b:74:
10:be:06:cb:d5:60:fe:d0:ab:e6:e1:a9:ae:90:b6:77:25:69:
31:02:c3:32:27:38:02:88:9a:d4:1e:63:41:4b:7c:09:d6:93:
14:42:59:6f:f3:77:5b:03:45:b6:75:77:19:06:b2:e3:85:c4:
08:af:a5:76:77:26:b7:64:e4:be:5b:30:e1:8d:61:78:e8:82:
e2:66:de:14:de:a4:ce:50:d1:a8:22:54:82:27:b0:7c:91:c3:
89:ac:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:27 2025 by rpki-client