Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: FUK2NCkwjdVms0sNBEb2LK1KEyfxQgHnshUGm4MSxo4=
Subject key identifier: 0E:F6:B1:63:50:36:59:94:88:E1:2D:FC:4C:FF:5A:3D:3C:E6:C8:50
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 0195E07D62DB9E66FB2157A75F8E870B670F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 13BF
Signing time: Sat 29 Mar 2025 06:01:08 +0000
Manifest this update: Sat 29 Mar 2025 06:01:08 +0000
Manifest next update: Sun 30 Mar 2025 06:01:08 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: i/P9pU45GmDeHOf59N5/l1gVYNWxLok7JVEfZV5Tcxc=)
2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:62:db:9e:66:fb:21:57:a7:5f:8e:87:0b:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Mar 29 06:01:08 2025 GMT
Not After : Mar 30 06:01:08 2025 GMT
Subject: CN=0ef6b1635036599488e12dfc4cff5a3d3ce6c850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:62:a4:ca:ec:77:3b:8d:e7:04:7d:56:c0:
a8:a0:17:8f:54:45:a2:dc:23:9b:84:c1:b2:ec:90:
13:9a:28:8e:53:27:4e:08:64:8d:19:73:a8:ce:b3:
36:b7:fd:12:01:13:e3:0e:83:63:ef:1b:5e:dc:6f:
a0:e6:4a:bd:75:09:91:49:b0:2d:90:ff:a1:97:67:
12:ba:54:e5:d5:a3:c7:d2:9f:17:fd:52:83:5b:f4:
44:ce:f0:da:74:ed:89:fc:39:78:16:21:7c:9f:2b:
f0:9a:1f:65:ae:2b:3f:35:40:56:7b:be:70:32:f0:
7a:e7:73:f8:b7:bd:31:4d:e0:ea:33:bb:99:db:1d:
34:cc:02:ad:40:66:f3:3a:16:01:9d:a9:d1:ab:52:
bb:ea:28:d8:9f:d6:0b:84:fe:88:c5:a0:2e:f8:7c:
ed:3e:f0:8a:c7:fb:f1:43:e2:92:fc:a6:79:08:b0:
8e:29:c8:8e:92:c3:fb:bc:cf:3b:a4:97:c6:bf:58:
eb:88:6e:06:46:ee:e0:5e:b7:86:4c:ec:82:c8:dc:
f9:1f:92:6b:78:d5:7c:e9:ab:0e:c0:d6:61:b8:58:
2a:b3:77:97:ce:eb:ce:bc:f4:3b:89:1f:02:aa:f6:
dd:9a:7c:bc:9e:d8:af:8c:03:06:7f:9e:23:cb:00:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F6:B1:63:50:36:59:94:88:E1:2D:FC:4C:FF:5A:3D:3C:E6:C8:50
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:49:67:fc:35:e6:ff:c1:dc:be:0b:3b:65:2c:07:d1:78:f9:
ae:82:fd:7e:5c:2d:93:27:a7:e1:5b:00:dc:e6:c9:56:fe:43:
31:99:62:46:49:0b:74:7b:ce:64:cf:a9:dd:1a:03:24:d1:ee:
3f:7c:b0:32:06:fa:2c:b3:15:28:18:73:5f:ad:f9:57:d4:f1:
96:a2:3a:63:e6:35:7c:34:8a:13:72:54:b2:0e:2e:8e:da:2b:
50:28:13:aa:66:c9:42:81:1d:06:d5:ad:96:b6:18:b4:a7:9b:
b4:86:a0:39:a8:d8:4a:e4:33:cd:71:58:9d:23:e3:2f:84:4d:
fb:c5:97:45:56:70:c5:75:cb:cf:e6:40:50:5b:21:53:bf:0b:
76:52:45:7f:b2:e3:1c:bf:42:7c:9d:17:f0:06:0e:9b:75:14:
d5:2b:68:f2:07:5b:ee:e4:7d:5e:9f:aa:87:5a:29:ab:7a:b0:
fc:02:b3:dc:8b:76:54:85:4e:75:51:a4:95:df:aa:c1:4b:1a:
5a:28:e2:77:79:08:3b:db:96:2c:60:b4:09:b5:4b:1d:e8:2c:
c1:ff:d4:29:79:46:9c:ec:af:cf:3d:22:f6:4e:11:bc:26:7d:
63:5e:5f:81:42:bc:3a:b3:de:57:40:71:ae:19:d9:a1:d8:57:
3c:23:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:48 2025 by rpki-client