Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier: JkiW5ijKFwOBl889t2LOZlTTtB2Zi/AWDiNjT0iuga8=
Subject key identifier: A7:68:2B:1C:09:1E:28:92:2F:98:78:73:BC:B5:1B:A6:AB:06:4C:02
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019514EE660F933FA762C060C9656C6D250E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number: 27
Signing time: Mon 17 Feb 2025 17:22:02 +0000
Manifest this update: Mon 17 Feb 2025 17:22:02 +0000
Manifest next update: Tue 18 Feb 2025 17:22:02 +0000
Files and hashes: 1: EUqjiReGy7qg8xdqlzGuUZLL58Q.roa (hash: fL+9Tk23mLtaNXHP85mWZzSSM7ll7XHX3rv//gFyimc=)
2: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: qrejBP4o4ZR7bBtYnkWWvFTxtlN92cBkS4dpxUetuCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:ee:66:0f:93:3f:a7:62:c0:60:c9:65:6c:6d:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 17 17:22:02 2025 GMT
Not After : Feb 18 17:22:02 2025 GMT
Subject: CN=a7682b1c091e28922f987873bcb51ba6ab064c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:1e:63:27:c8:b6:0a:06:5b:d4:67:64:14:
89:c2:09:ae:2f:02:d5:93:c0:ab:d4:f1:dc:65:77:
c1:a6:5c:66:f5:34:91:40:08:d5:e9:a3:61:e9:4a:
60:60:bf:0f:54:c2:1a:b9:df:44:7d:19:1a:c6:14:
24:8b:8b:65:9c:05:ff:dd:f9:f7:9e:5b:a3:fc:9d:
04:70:37:f7:01:5b:5a:70:5d:99:50:7d:f5:27:15:
73:f9:e0:8f:25:6c:dd:9e:87:14:c9:75:db:0a:bb:
bc:c0:91:ab:ca:51:37:93:27:6f:0a:98:0b:48:dc:
f3:7f:08:fd:43:38:96:0f:ba:61:a1:56:cc:6e:b4:
a2:a9:90:de:40:62:4e:67:33:ae:c2:61:94:90:07:
68:ee:cb:01:f3:c6:d3:9a:d7:28:51:6d:73:3a:4e:
6f:88:b0:34:d4:6e:6a:60:9f:c4:d4:2f:7b:34:4a:
fc:02:c9:f0:67:56:41:2a:c5:c4:e7:af:d5:79:67:
d5:b8:b2:04:9b:d7:2e:f2:0f:34:2f:cd:f1:89:a9:
ba:09:45:a3:1b:3b:60:fb:c8:53:d6:1d:d0:cb:46:
be:76:15:5e:a7:00:68:19:20:8b:b8:d8:63:ad:19:
1b:cc:36:67:9c:46:fa:c5:1b:f2:f6:a2:6c:f2:eb:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:68:2B:1C:09:1E:28:92:2F:98:78:73:BC:B5:1B:A6:AB:06:4C:02
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4f:d6:c9:b4:41:9d:b7:4a:00:4a:5f:2d:45:f5:b5:9f:40:
30:fa:62:58:69:c3:d0:e5:8c:9c:ce:44:92:48:8d:30:75:c7:
07:2b:82:6f:7b:4e:e1:12:07:63:61:e3:fc:81:fb:29:57:b8:
6d:c6:09:51:a3:31:ba:88:d9:4a:28:5e:f1:9c:8c:c4:fb:06:
83:67:33:81:a8:93:3c:bd:e5:4f:8c:6e:6c:48:e5:c6:86:86:
e3:9e:7a:ec:e6:65:de:a0:46:8d:c0:c8:ee:fe:a1:39:8f:1b:
9f:f5:f0:ae:80:5a:0f:bf:77:3d:77:71:da:77:71:83:1a:ef:
97:0c:3c:a3:17:94:9c:c8:10:d7:8d:ca:c2:15:74:17:8c:a5:
7b:a9:a2:31:b9:f3:33:bb:90:91:81:12:ad:9f:e5:06:3a:64:
40:c7:ff:0d:24:11:cd:c2:4c:1e:fc:ab:3d:de:71:67:c5:64:
01:57:5e:10:1c:23:6a:4f:03:88:c7:29:a9:fa:8e:9a:56:38:
44:0f:18:66:60:60:70:3f:3f:b6:89:90:1a:28:da:26:5e:12:
3d:62:08:17:5b:65:33:ad:ec:fe:77:c9:ed:9f:6e:21:f7:26:
02:51:02:35:36:1f:37:17:53:81:86:a8:0e:2f:bd:04:0b:e4:
01:12:0e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:15:25 2025 by rpki-client