Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: DpQbNESsfeyRHlPAUg+w52BHrFPjKO+cGml87CmO6pg=
Subject key identifier: 63:89:1B:77:C9:2B:98:B4:87:31:39:9F:1C:34:C1:68:BE:30:9B:5A
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0195E122592DA665DEC45C98AB52FEE8D672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 14D8
Signing time: Sat 29 Mar 2025 09:01:19 +0000
Manifest this update: Sat 29 Mar 2025 09:01:19 +0000
Manifest next update: Sun 30 Mar 2025 09:01:19 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: VIE+jWEzSBPBQYoFzQMmJ0+OtocfAvZW35D9fgRIBHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:59:2d:a6:65:de:c4:5c:98:ab:52:fe:e8:d6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 29 09:01:19 2025 GMT
Not After : Mar 30 09:01:19 2025 GMT
Subject: CN=63891b77c92b98b48731399f1c34c168be309b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:6e:97:33:6c:02:eb:62:2b:92:41:da:1c:
58:4b:f3:c5:ef:46:97:a7:43:67:b1:43:7a:b0:e8:
83:b9:82:15:2e:6f:a1:29:91:dc:a6:c5:21:73:62:
b4:22:af:d3:fa:44:81:df:4a:93:72:1e:98:13:dd:
45:8c:68:80:e9:37:04:3c:98:b2:d5:ec:07:05:87:
3a:c0:be:69:63:8a:a3:03:9c:1a:89:c6:fd:0b:5c:
5c:0b:9d:bd:38:94:aa:83:96:b4:8d:6c:b2:ce:a3:
15:78:cd:f7:ee:e3:b5:ef:69:7a:82:fe:f3:56:d1:
b0:35:98:6d:6b:d6:88:23:91:04:fe:e6:eb:bd:48:
27:0e:0b:1f:b0:ce:73:2e:42:37:f8:b0:14:d6:83:
88:c4:55:dd:91:b8:e6:c7:42:2b:56:5d:8d:18:f4:
be:06:d1:e5:4f:e7:28:5f:74:56:13:0e:65:b8:ad:
2f:7a:09:b4:b7:27:00:c2:2e:df:48:99:54:05:31:
77:0d:b3:b7:1b:08:78:f1:44:18:61:c3:f5:7a:4e:
53:02:84:56:64:bc:d8:22:88:07:e1:b8:c4:1d:fb:
22:b5:e3:d9:8d:b5:f9:fe:9f:2d:23:6b:20:e0:73:
75:a1:77:dd:36:22:3e:77:00:c2:7d:f9:16:55:0d:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:1B:77:C9:2B:98:B4:87:31:39:9F:1C:34:C1:68:BE:30:9B:5A
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2a:6d:79:ba:20:b5:fe:4b:a5:6d:c4:25:ae:dc:45:63:93:
01:bb:a5:e3:4c:01:8c:79:c1:38:54:ca:be:06:ea:d0:41:a1:
9f:86:22:72:59:dd:04:63:18:73:f2:58:e4:16:10:b6:5b:f5:
6f:6a:fe:c2:ba:09:14:50:77:a4:ea:77:0c:7b:c5:8f:ca:d5:
99:fc:4f:25:bb:38:77:c1:68:5a:43:31:f6:ff:21:90:72:c5:
c6:d1:cb:6f:5e:cc:80:a7:5c:8a:07:ed:eb:ca:86:fd:e6:f6:
a5:b4:9c:01:23:9b:f1:6a:46:72:b8:ee:15:5f:f0:34:94:5f:
bd:76:6d:d2:32:15:90:85:5b:d5:02:ae:2d:e7:9d:26:b1:24:
78:31:98:b8:25:b0:52:aa:23:b7:b9:7a:42:3f:62:a5:c0:fd:
4f:f3:fb:c1:b9:7a:d1:45:05:0d:b0:7d:40:42:e0:74:8d:65:
48:5b:9b:b0:88:dd:fc:b4:4e:19:db:96:7e:7a:2c:e4:f2:d5:
8e:1b:59:68:7e:af:c5:12:c7:f0:54:95:27:df:44:09:b2:6f:
5a:82:f1:8d:b6:22:f6:de:4a:1a:27:28:83:90:38:cc:5d:14:
35:c0:1f:ed:b2:dd:ea:a3:7a:3d:63:8c:31:8c:d4:02:0b:90:
e5:dc:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:10 2025 by rpki-client