Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.mft
File: P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.mft (raw, json)
Hash identifier: KfQZYeqXTMY6QfQHVHbC6Hg7/ZwJpTdQaP6KEMh+TJc=
Subject key identifier: EC:94:39:F3:CD:83:00:81:D9:8F:52:4E:E4:A7:A5:B6:52:A3:DF:0F
Authority key identifier: 3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
Certificate issuer: /CN=3fefca05a3212ead586e09722375dbd8ded968a4
Certificate serial: 01872BB5E6F7DC3772328E038D3CB9EBD386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.mft
Manifest number: 07F5
Signing time: Wed 29 Mar 2023 04:52:34 +0000
Manifest this update: Wed 29 Mar 2023 04:52:34 +0000
Manifest next update: Thu 30 Mar 2023 04:52:34 +0000
Files and hashes: 1: LmMa3djEysU60Qxk-gLnjEIAKXc.roa (hash: 1M7+1VoeBC5l/zIjr3B1w2bjAC5bMcmDJHkxbiGRkQc=)
2: P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.crl (hash: JP2fVHGcezqKAoPQA0DPuR3IXNdjjOikE5zWbA9Wr8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:b5:e6:f7:dc:37:72:32:8e:03:8d:3c:b9:eb:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fefca05a3212ead586e09722375dbd8ded968a4
Validity
Not Before: Mar 29 04:52:34 2023 GMT
Not After : Mar 30 04:52:34 2023 GMT
Subject: CN=ec9439f3cd830081d98f524ee4a7a5b652a3df0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:ad:c6:2a:6c:21:af:21:b1:6a:60:87:cd:
b0:81:62:a9:b5:af:93:8c:3d:77:9b:ec:a5:cd:44:
04:6e:a1:65:56:0c:42:b5:37:96:c4:a0:8b:08:58:
f5:1c:49:12:ac:b7:da:ac:a6:1d:36:bc:d2:e6:d2:
39:4b:d4:b7:39:ef:a2:b5:9d:91:22:c2:d1:5e:23:
f8:0e:ca:3c:0d:76:e2:12:6e:1b:73:97:b1:64:7b:
48:2d:29:40:4b:37:0c:c3:62:6b:35:d2:df:84:55:
80:74:c9:57:1d:5b:8a:7e:d8:ce:1a:de:22:97:71:
55:50:c6:d7:15:5d:96:0e:37:f0:25:d8:d2:28:1d:
c0:8f:ad:ce:b5:a7:be:ca:69:3c:0c:80:17:a4:74:
f9:c6:37:62:3b:17:39:1f:ca:4b:65:63:e4:cb:8b:
de:55:06:ac:6d:34:85:51:85:0f:94:9b:99:53:11:
80:f9:fb:77:fa:22:73:76:37:ca:be:09:d6:9f:6c:
e0:38:4b:dc:ea:e2:70:88:b0:25:f6:0a:be:a8:c8:
93:fe:cf:5b:f8:c1:63:2f:cb:de:d9:a8:e6:ed:79:
a0:aa:a8:d9:c8:c7:93:a3:9f:28:1f:71:83:cf:3d:
29:da:fc:11:ee:c0:03:c8:46:9f:74:26:28:20:f1:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:94:39:F3:CD:83:00:81:D9:8F:52:4E:E4:A7:A5:B6:52:A3:DF:0F
X509v3 Authority Key Identifier:
keyid:3F:EF:CA:05:A3:21:2E:AD:58:6E:09:72:23:75:DB:D8:DE:D9:68:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ef8a0-2618-4699-b952-a400f76a6084/1/P-_KBaMhLq1YbglyI3Xb2N7ZaKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8d:e8:70:7f:23:39:e5:bf:3b:95:7b:1a:16:2a:96:cf:ad:
39:9a:74:23:57:b0:26:67:7d:94:4a:14:ad:23:ff:dd:b9:24:
c8:ad:f0:36:6f:c2:fb:6a:83:c2:f0:66:d9:88:41:36:71:8d:
71:d6:78:6e:51:73:15:24:32:b6:57:da:d9:b5:52:77:ed:c2:
a2:23:3f:36:53:4f:6e:a2:55:c6:17:6e:32:2c:0c:d0:19:3d:
87:84:2e:50:50:a9:ff:9f:3f:cd:50:cf:15:ca:1f:94:8a:c8:
c8:7f:20:66:06:a2:44:34:ec:71:bf:17:ae:39:c4:19:36:3a:
ce:34:45:d0:7f:95:8c:32:30:36:da:9d:e6:e8:45:19:d5:cc:
f0:b9:d6:c1:1e:49:e7:26:a5:73:eb:f8:45:c8:54:f3:af:ad:
2a:2a:f7:65:eb:9b:4a:fe:8a:ac:40:18:c9:8f:13:99:d1:3b:
c8:ff:b8:d6:84:7e:15:0c:5b:de:7f:fe:04:ff:38:d0:4b:23:
b3:43:76:6c:fb:ce:02:65:a2:70:96:42:d3:85:9f:ab:fd:08:
85:c8:98:a3:70:9c:22:fa:5b:5b:ec:b5:4c:0b:cb:0a:dd:a8:
60:f4:7d:57:ce:56:00:c0:36:14:a5:b8:07:f0:f9:c3:3b:56:
9f:57:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:14 2025 by rpki-client