Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
File: Ko09O9sG8A5rtEX02y2X-bfEvro.mft (raw, json)
Hash identifier: lCSOKogzoKm71omhPe+0ufX4tmMuLhdQCqvVE31gLFY=
Subject key identifier: 8B:2C:7E:BE:96:5D:6E:81:AF:E9:42:77:2F:9F:96:10:57:5A:CC:BE
Authority key identifier: 2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA
Certificate issuer: /CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
Certificate serial: 0194E94BDCAB9F5CE0DD34D50DCE01FB03FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
Manifest number: 029C
Signing time: Sun 09 Feb 2025 06:00:50 +0000
Manifest this update: Sun 09 Feb 2025 06:00:50 +0000
Manifest next update: Mon 10 Feb 2025 06:00:50 +0000
Files and hashes: 1: Ko09O9sG8A5rtEX02y2X-bfEvro.crl (hash: nbW4lCY9cusy7MQKh9vTXt6ftCAk2fMo7+4vvEUjAAE=)
2: _9hTLlJnLRA_A0tBJZrt39as7xg.roa (hash: wFxuZ4h9T3MV1XhuCw+0BSZnSlOb/FPW9LipazBslAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e9:4b:dc:ab:9f:5c:e0:dd:34:d5:0d:ce:01:fb:03:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
Validity
Not Before: Feb 9 06:00:50 2025 GMT
Not After : Feb 10 06:00:50 2025 GMT
Subject: CN=8b2c7ebe965d6e81afe942772f9f9610575accbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:71:07:2f:86:84:8a:62:e7:02:ba:84:68:
60:1a:4b:0b:9a:ef:11:55:67:a0:52:1d:8e:f2:52:
91:cc:3c:a0:45:e3:6d:3f:d8:86:bc:66:85:c7:4f:
eb:31:fa:39:59:dd:68:af:f4:e0:c0:c6:60:3c:51:
36:77:5f:59:fb:e2:9b:5b:a9:04:f9:fd:d7:ee:9d:
d9:31:3f:06:04:e2:29:2e:19:67:bb:1d:8f:c4:bb:
e1:86:8f:36:ea:cf:a2:70:74:88:b4:c9:b0:14:21:
2c:18:c4:2a:07:ce:6f:17:3a:c4:b4:0c:9f:f1:49:
24:06:ce:50:60:41:51:d7:8a:e2:ed:ce:0c:61:c5:
03:5a:bf:93:8e:fa:13:c3:f6:7f:ec:77:7e:73:a5:
35:d9:30:01:cd:2a:5f:2f:0c:c1:06:aa:26:58:76:
a4:69:24:73:99:45:74:3a:83:b9:e4:97:62:51:86:
38:ff:b6:7d:84:a1:94:43:3c:57:05:96:13:5b:d7:
0f:08:35:6e:bc:a3:97:b2:c9:ef:d5:ed:b8:fa:2c:
c5:bf:61:c9:1f:7d:bb:e7:01:81:a3:42:b9:bd:9e:
86:c6:fa:6d:fd:90:9a:8e:b2:d6:54:d7:ad:d1:fc:
4d:52:2d:8c:02:35:1e:96:6c:2c:dd:be:85:c0:8d:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:7E:BE:96:5D:6E:81:AF:E9:42:77:2F:9F:96:10:57:5A:CC:BE
X509v3 Authority Key Identifier:
keyid:2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:d9:4e:ca:02:69:86:f2:13:41:d2:20:ef:07:6c:bd:83:
fa:5d:df:f0:e6:5d:f4:b5:0e:bd:14:f3:9b:ed:6a:c7:f9:be:
c5:63:f7:f4:7b:d3:f7:87:df:cf:80:06:9d:74:3b:de:61:c4:
ba:d9:31:eb:0b:5f:50:ab:fe:d0:7a:fc:ee:21:7f:65:d8:8f:
9f:7f:41:d4:98:da:f9:21:8a:e9:17:bd:13:85:a6:af:ab:74:
d4:a0:4e:ac:3c:41:4a:d7:3a:00:cd:63:0f:d5:18:d9:02:9b:
b1:74:38:06:89:be:0a:91:e4:14:6e:69:22:40:c2:ce:66:01:
0c:2f:2a:08:55:e0:7a:99:6a:2d:1a:41:2c:5f:32:82:d4:e3:
0f:f2:0f:c9:a5:e7:e6:b7:0d:d8:dd:0f:ae:22:a9:69:58:be:
55:9b:f4:91:ea:da:a5:9d:3b:e6:02:e4:70:49:c2:6f:78:0a:
1d:16:61:ab:c6:52:d8:45:a2:57:29:1a:57:e6:6c:df:9f:6f:
2f:7a:92:ee:64:08:b4:f7:00:c4:75:84:f7:dc:7c:4f:96:20:
50:6d:59:55:1a:34:32:d6:76:57:1c:88:b3:1d:80:1d:fc:9b:
3b:d8:cd:fb:a5:42:be:7a:69:de:44:eb:a9:83:f6:5a:e9:4d:
48:05:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:06:56 2025 by rpki-client