Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/KkaicpYJiIMfwSsJCXcSbHbsszY.mft
File: KkaicpYJiIMfwSsJCXcSbHbsszY.mft (raw, json)
Hash identifier: m8Y+JAO7W9PDkh+KPcd90lxVbO2NzQcUbn94iZvSaVc=
Subject key identifier: CF:97:4C:49:E8:DB:D8:AD:E0:9D:07:FF:57:47:D9:F9:0C:1A:79:00
Authority key identifier: 2A:46:A2:72:96:09:88:83:1F:C1:2B:09:09:77:12:6C:76:EC:B3:36
Certificate issuer: /CN=2a46a272960988831fc12b090977126c76ecb336
Certificate serial: 018354E9D3403A0A36B4A967BBFFC16B5B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkaicpYJiIMfwSsJCXcSbHbsszY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/KkaicpYJiIMfwSsJCXcSbHbsszY.mft
Manifest number: 05FF
Signing time: Mon 19 Sep 2022 08:42:33 +0000
Manifest this update: Mon 19 Sep 2022 08:42:33 +0000
Manifest next update: Tue 20 Sep 2022 08:42:33 +0000
Files and hashes: 1: 2HLgK_4pzgORpWoj2HFa1Z71MFQ.roa (hash: WoxJH2Mfmr4kB4opavwwTcyNgxTppYSEEI/Lbh/KvkI=)
2: KkaicpYJiIMfwSsJCXcSbHbsszY.crl (hash: vR42E2H2i/qyxmxH8uCS4CNqBIbH55USgXDBuBK/eXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:e9:d3:40:3a:0a:36:b4:a9:67:bb:ff:c1:6b:5b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a46a272960988831fc12b090977126c76ecb336
Validity
Not Before: Sep 19 08:42:33 2022 GMT
Not After : Sep 20 08:42:33 2022 GMT
Subject: CN=cf974c49e8dbd8ade09d07ff5747d9f90c1a7900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:e0:d2:16:62:49:04:f9:e1:4a:c0:1f:80:
51:51:5a:9b:36:12:81:73:bb:17:c0:30:13:dd:5e:
c0:21:34:43:f3:5a:39:a2:cc:6e:a4:2e:95:c6:84:
64:7e:ff:05:98:21:83:f7:70:57:92:0c:e3:2b:c3:
20:93:8c:e7:25:01:68:e4:0e:2d:6a:b1:6a:0b:56:
26:58:c0:18:3a:2a:b1:75:b2:df:55:b0:09:8a:d0:
1c:d3:d1:ed:50:35:bb:76:81:32:b4:a9:0a:a3:4d:
33:6c:79:4d:0f:f0:1e:86:5f:80:88:7b:8d:51:75:
4d:bf:97:b5:dd:9a:15:43:58:52:60:74:2f:d1:59:
a5:0b:15:f9:a4:eb:9e:c9:64:c4:2d:c1:09:90:ed:
16:bd:a6:ad:d7:fe:9d:04:70:6b:94:0e:73:31:b8:
f4:13:e6:8f:12:42:6d:f7:e3:6c:40:fb:a8:c2:07:
00:3d:96:7e:46:3d:f4:71:e5:3b:fd:03:72:e4:12:
a5:4f:35:15:11:e0:c4:cf:c6:9a:f7:bf:c8:7e:69:
b6:73:61:b1:59:dd:64:34:1d:ae:75:65:6a:61:f8:
e5:e1:e9:fe:76:54:54:7d:df:f8:2b:c2:39:27:b2:
d7:d7:da:7c:b7:79:2f:4d:7b:61:fe:e7:f0:0c:33:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:97:4C:49:E8:DB:D8:AD:E0:9D:07:FF:57:47:D9:F9:0C:1A:79:00
X509v3 Authority Key Identifier:
keyid:2A:46:A2:72:96:09:88:83:1F:C1:2B:09:09:77:12:6C:76:EC:B3:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkaicpYJiIMfwSsJCXcSbHbsszY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/KkaicpYJiIMfwSsJCXcSbHbsszY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/KkaicpYJiIMfwSsJCXcSbHbsszY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:b2:2f:9b:25:76:e8:d7:91:9b:af:03:94:32:e5:c0:58:
7e:ce:e6:cd:fb:f4:86:49:b7:32:a4:7d:02:b8:1e:01:06:58:
eb:62:65:29:25:16:ba:db:82:37:aa:44:c8:e6:9d:7e:59:31:
93:ab:b9:0a:76:cb:b2:99:60:64:2f:78:fd:e9:d7:b8:c1:d4:
a1:a2:54:53:e7:23:52:0a:63:16:05:c1:64:1d:74:f4:3c:65:
f7:1e:0d:5b:fb:1c:03:d3:9c:cd:06:65:01:b3:69:dd:90:f2:
76:a2:2c:7c:10:c1:e1:a9:3c:c0:8f:c7:d5:6e:d0:7e:b6:52:
6c:9d:49:5b:91:6f:89:74:4b:70:9e:e7:99:ef:63:02:0a:ce:
e6:15:01:54:c3:ba:de:a1:b6:6b:ff:73:05:4e:ad:f1:f7:8a:
42:0c:86:e6:74:92:32:1d:1a:83:85:33:9c:3c:9b:29:e9:3d:
3d:0f:3c:64:0a:68:88:93:cf:64:51:a5:6b:8e:4a:b2:76:87:
32:8d:6d:a2:9c:fb:26:c0:df:b9:0c:42:d8:81:f9:6b:35:a0:
50:e6:e6:61:0b:93:75:c0:a3:b8:c6:1f:90:e9:b3:b6:58:cd:
9f:fd:cb:1b:63:17:d5:2a:3d:f5:a4:9e:23:b3:61:41:7e:29:
9f:28:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:04 2025 by rpki-client