Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/KjRyO0A0_befNpi_0_cYh-ucN94.mft
File: KjRyO0A0_befNpi_0_cYh-ucN94.mft (raw, json)
Hash identifier: DDnm8yjyX2w/Juoyr7vW3AyUirUhXkj8mbVIiC1E+p0=
Subject key identifier: 1D:71:C0:9B:3D:2B:D9:73:84:88:C4:FA:22:9D:0C:FA:E3:70:F3:A5
Authority key identifier: 2A:34:72:3B:40:34:FD:B7:9F:36:98:BF:D3:F7:18:87:EB:9C:37:DE
Certificate issuer: /CN=2a34723b4034fdb79f3698bfd3f71887eb9c37de
Certificate serial: 018C61FA8079BFFABFAFDF259EF62F19E3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjRyO0A0_befNpi_0_cYh-ucN94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/KjRyO0A0_befNpi_0_cYh-ucN94.mft
Manifest number: 06A6
Signing time: Wed 13 Dec 2023 07:00:55 +0000
Manifest this update: Wed 13 Dec 2023 07:00:55 +0000
Manifest next update: Thu 14 Dec 2023 07:00:55 +0000
Files and hashes: 1: KjRyO0A0_befNpi_0_cYh-ucN94.crl (hash: +8c9N08n1cwm0YdFs3Na0XyjG9Tt3FYout/zXvZ3bvk=)
2: uDFhkU8mZNl32YOa5uLQ3C7-HM4.roa (hash: f+qWpwSGR5LnzwgaFyYs+5Bhnv7ZlPW75eV87iV3bis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:61:fa:80:79:bf:fa:bf:af:df:25:9e:f6:2f:19:e3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a34723b4034fdb79f3698bfd3f71887eb9c37de
Validity
Not Before: Dec 13 07:00:55 2023 GMT
Not After : Dec 14 07:00:55 2023 GMT
Subject: CN=1d71c09b3d2bd9738488c4fa229d0cfae370f3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:3a:37:e2:78:f4:04:e8:c1:51:a1:bb:2b:
66:37:a4:7f:5b:db:c6:a5:7d:d1:cc:7d:38:bd:bf:
47:31:be:26:46:c0:0a:f4:cc:e5:e9:cb:c1:5b:88:
0a:c0:3a:89:00:fa:eb:58:6e:49:be:13:1c:bf:0b:
fc:60:fe:ac:9f:ef:61:19:05:7d:cf:95:1f:1c:9f:
19:77:60:7b:1e:00:78:76:4f:d8:4f:22:6e:80:3c:
3e:38:a3:de:8e:0f:e0:84:c6:0c:bd:ab:05:0e:40:
90:29:1c:e5:08:58:e2:6f:30:9f:9b:72:47:a3:3c:
80:88:d6:99:14:a2:fc:be:ec:a5:36:7c:c0:c6:4e:
d7:82:e8:df:d3:ac:82:64:e9:28:fc:f8:51:50:69:
46:90:21:d0:0f:23:04:12:1d:99:b0:1a:83:ff:30:
1e:b3:47:af:6a:96:3f:c8:30:f0:e1:81:47:74:ff:
48:4f:aa:da:61:0c:65:22:2f:bd:4c:dd:79:ab:2c:
a9:69:9c:9b:f3:a4:65:b4:39:95:9a:78:45:01:ab:
a1:91:17:1a:8a:19:8b:07:4d:60:23:5d:f5:47:fb:
64:d5:7a:4f:da:12:3a:b4:13:d0:fd:44:7e:9a:c5:
d9:7d:c2:28:d3:df:29:bd:28:ce:12:f6:c2:48:38:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:C0:9B:3D:2B:D9:73:84:88:C4:FA:22:9D:0C:FA:E3:70:F3:A5
X509v3 Authority Key Identifier:
keyid:2A:34:72:3B:40:34:FD:B7:9F:36:98:BF:D3:F7:18:87:EB:9C:37:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjRyO0A0_befNpi_0_cYh-ucN94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/KjRyO0A0_befNpi_0_cYh-ucN94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/967494-7d6a-488a-a810-fa5d88d546e9/1/KjRyO0A0_befNpi_0_cYh-ucN94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2c:5a:a6:de:78:73:d0:c9:81:11:d0:93:7e:fe:22:6b:f9:
4a:ac:3a:a2:6a:9e:b4:8a:6d:49:5a:09:31:22:23:0b:54:4b:
b1:90:62:18:31:b5:d5:3d:96:0f:74:52:67:91:8e:20:48:31:
4e:27:fd:05:89:21:b7:5d:fe:d8:1a:91:1c:16:09:7a:20:ad:
54:58:40:0e:28:77:5a:63:d3:26:73:e3:d1:d2:21:ff:a2:c8:
c0:95:02:22:ae:d7:dd:18:59:3f:94:6a:04:ef:55:84:d2:14:
cf:39:c9:b9:94:b7:82:43:31:2a:09:6c:ac:cf:c1:e9:3d:a3:
5a:47:e5:ff:7f:44:39:7a:c4:84:86:85:bf:8c:4b:37:45:df:
4e:33:47:34:78:72:6e:a5:ee:29:d2:e1:cc:72:90:c1:8f:00:
44:f8:7d:3a:da:80:b8:7f:03:19:fd:4b:cb:29:ba:8d:9e:eb:
bf:c2:8f:f7:1e:0a:a2:a1:9c:45:c6:59:86:be:c1:86:3e:59:
f4:94:40:b5:d0:d5:04:b8:2a:49:1a:c3:45:89:72:6d:9e:20:
fb:38:45:f8:10:ff:e4:fa:1d:11:64:81:00:e5:80:5a:e8:58:
e8:d4:1e:7e:eb:f6:83:ce:1d:d3:a2:ef:23:56:cb:37:e1:c9:
ad:6f:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:49 2025 by rpki-client