Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/KwxtKY8oMsqgyx4a2n_fDPMA2OE.mft
File: KwxtKY8oMsqgyx4a2n_fDPMA2OE.mft (raw, json)
Hash identifier: FhjntI7CjPlpQIUR9eZEo8TUVICi2+X/g0jEnNP3nfQ=
Subject key identifier: F2:BF:F2:2B:E0:C3:13:FE:B7:F5:03:D5:D8:AF:71:57:0D:D2:60:B5
Authority key identifier: 2B:0C:6D:29:8F:28:32:CA:A0:CB:1E:1A:DA:7F:DF:0C:F3:00:D8:E1
Certificate issuer: /CN=2b0c6d298f2832caa0cb1e1ada7fdf0cf300d8e1
Certificate serial: 01874BBEB29DFE47635F846B9EC14892B9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwxtKY8oMsqgyx4a2n_fDPMA2OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/KwxtKY8oMsqgyx4a2n_fDPMA2OE.mft
Manifest number: 0D09
Signing time: Tue 04 Apr 2023 10:10:00 +0000
Manifest this update: Tue 04 Apr 2023 10:10:00 +0000
Manifest next update: Wed 05 Apr 2023 10:10:00 +0000
Files and hashes: 1: KwxtKY8oMsqgyx4a2n_fDPMA2OE.crl (hash: xsMK2vAHZ2o/tC3pEYzSlwdNhPIwUIJsgvAOcEv+BlI=)
2: TyavgfELUFpb-Q_gk78qgIyzRuE.roa (hash: 4xVimrxw4RIsm/aG3R0CTVH91tAqp44Sytf4MNelcOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:be:b2:9d:fe:47:63:5f:84:6b:9e:c1:48:92:b9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0c6d298f2832caa0cb1e1ada7fdf0cf300d8e1
Validity
Not Before: Apr 4 10:10:00 2023 GMT
Not After : Apr 5 10:10:00 2023 GMT
Subject: CN=f2bff22be0c313feb7f503d5d8af71570dd260b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:ae:5f:5d:44:dc:5d:e1:b0:23:86:fd:1f:
d9:84:c6:a5:3a:b9:e5:1a:4f:97:3e:7a:6f:41:2b:
f6:91:36:0a:64:b7:8b:d0:36:41:63:b1:3c:b9:84:
14:c5:ca:d3:bb:5a:01:17:ef:67:1a:a5:6a:93:4d:
87:76:d4:4c:5c:03:3c:4d:b4:46:df:71:6b:76:30:
2b:15:fb:c4:f3:44:14:90:95:31:06:13:8d:2d:8d:
8d:7e:da:29:79:30:d2:95:34:1c:89:e8:4d:1d:49:
18:46:ee:73:51:bd:c3:06:d6:a0:51:06:1d:6b:2d:
6f:d7:1c:84:15:98:39:1a:c1:81:2b:9c:fa:6f:e8:
8b:0c:dd:86:70:32:63:d9:6e:44:ed:d3:76:17:e3:
1e:01:3d:bc:33:50:8c:83:6f:f7:e8:e3:ab:a5:e4:
69:b9:76:1e:80:31:92:87:6a:6a:20:0e:cd:f2:c3:
d9:c1:54:40:83:a3:c3:3a:24:c8:81:87:fb:12:05:
cd:6f:c3:fc:d5:95:7a:5f:ce:32:6f:6a:f7:71:28:
85:1b:4f:f4:91:72:bb:ab:9e:c2:ce:de:dc:6d:21:
24:85:94:2c:98:1e:fc:6a:af:d9:cd:2b:f2:7b:27:
96:d9:3a:26:fa:88:ad:45:b9:eb:b9:9e:51:b0:09:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:F2:2B:E0:C3:13:FE:B7:F5:03:D5:D8:AF:71:57:0D:D2:60:B5
X509v3 Authority Key Identifier:
keyid:2B:0C:6D:29:8F:28:32:CA:A0:CB:1E:1A:DA:7F:DF:0C:F3:00:D8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwxtKY8oMsqgyx4a2n_fDPMA2OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/KwxtKY8oMsqgyx4a2n_fDPMA2OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/KwxtKY8oMsqgyx4a2n_fDPMA2OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:40:c6:73:e9:6f:66:25:e3:78:94:62:4f:88:ef:a4:1d:34:
e0:a3:dd:34:d0:27:91:c4:9a:63:71:02:cc:f6:f4:2e:62:f6:
c5:0d:a8:2c:10:6b:11:57:e6:b6:f6:fb:7c:e6:21:f5:51:94:
7c:20:7c:83:e7:26:6c:e8:09:e6:83:61:6d:0b:c5:55:e9:9b:
8c:de:90:e1:73:79:38:d3:e1:bf:99:a9:f1:6c:d4:c7:c8:88:
77:a0:f7:ea:c1:ea:f6:27:d6:bd:db:61:43:fb:5c:48:02:e7:
09:1d:ae:dc:fe:67:fa:84:ea:64:12:f0:15:c2:b8:0b:be:08:
e9:35:9e:64:90:01:46:1b:ac:9c:36:a2:d5:f3:88:73:96:11:
53:f0:65:4f:dd:2e:23:98:99:15:99:f6:71:9d:90:df:b8:81:
08:92:7f:9e:87:51:ac:b3:e5:48:e7:a9:d6:06:a3:b1:ed:4f:
b9:37:2a:84:6c:77:3b:11:d3:40:71:92:a5:9c:7f:de:30:1a:
7d:d8:eb:31:b9:06:e8:47:7b:6b:17:c9:19:f9:1f:c9:63:c3:
f1:94:68:23:15:bd:73:72:6f:81:5a:fe:63:0a:fc:60:74:ab:
f2:25:bc:18:fa:4e:4c:1d:c3:81:1d:35:f5:7d:14:de:f3:b3:
25:11:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:55 2025 by rpki-client