Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/kio9afIcdh4qkMdyb-XgzcksM5M.mft
File: kio9afIcdh4qkMdyb-XgzcksM5M.mft (raw, json)
Hash identifier: 76k7KxooPh7Ywrg7VI5fcihrw/tfycAQcNpaHQLVpdA=
Subject key identifier: D3:23:6A:38:E1:D5:2A:A7:6A:75:84:1F:11:5D:3C:A1:CF:14:00:18
Authority key identifier: 92:2A:3D:69:F2:1C:76:1E:2A:90:C7:72:6F:E5:E0:CD:C9:2C:33:93
Certificate issuer: /CN=922a3d69f21c761e2a90c7726fe5e0cdc92c3393
Certificate serial: 01849EAAE225CD187AD6AEE7CD1A4F0EECDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kio9afIcdh4qkMdyb-XgzcksM5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/kio9afIcdh4qkMdyb-XgzcksM5M.mft
Manifest number: 07FA
Signing time: Tue 22 Nov 2022 09:28:29 +0000
Manifest this update: Tue 22 Nov 2022 09:28:29 +0000
Manifest next update: Wed 23 Nov 2022 09:28:29 +0000
Files and hashes: 1: RCFJfQLdjBfesrlZoXVhh9v3_xk.roa (hash: Bk9Yn4biW8bhwrKLub2EeilEOnN+frj32bAMQ6RmGSY=)
2: kio9afIcdh4qkMdyb-XgzcksM5M.crl (hash: n9amRA1qIhQTrwBpvQW1Wu9wsfMkK28NC1cZJpEdva8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:aa:e2:25:cd:18:7a:d6:ae:e7:cd:1a:4f:0e:ec:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a3d69f21c761e2a90c7726fe5e0cdc92c3393
Validity
Not Before: Nov 22 09:28:29 2022 GMT
Not After : Nov 23 09:28:29 2022 GMT
Subject: CN=d3236a38e1d52aa76a75841f115d3ca1cf140018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:d4:ce:12:f5:26:8e:a4:29:1e:19:67:d2:
14:a5:85:dc:df:49:2a:ad:08:46:56:f3:f1:63:f7:
97:6e:38:7d:9b:ae:82:c0:a4:65:b1:49:1c:61:0f:
ce:87:03:d8:9e:19:b6:30:ea:d3:00:0b:9d:87:b7:
89:38:4d:de:b2:5d:61:5c:b8:ac:33:a6:32:de:57:
da:61:26:06:1f:a5:66:62:e1:c9:e1:82:6f:ee:e5:
92:bc:4a:b9:84:10:e8:71:14:d4:07:32:49:2e:91:
d5:77:87:45:6d:c8:31:af:24:5b:c3:07:12:c4:c8:
a0:79:94:b7:39:9d:e1:51:c1:5e:3c:46:ac:d0:61:
2c:ec:f6:16:e6:44:cb:6b:e4:f1:2c:e7:6c:be:77:
64:18:00:13:60:c3:c2:1f:75:a5:0d:f2:ed:56:81:
7f:31:2e:db:18:75:70:38:7f:39:fc:68:11:a7:d1:
ca:dd:31:a0:54:f3:bb:69:06:14:c7:2c:ce:0e:07:
84:cb:01:7b:a6:f7:47:fd:a8:62:e6:2e:84:ba:e9:
24:70:1a:b1:49:5c:39:dc:1a:e7:72:06:71:ac:92:
11:15:95:71:d2:4e:8a:8a:cd:24:e3:80:9d:a1:28:
0c:88:b3:88:ca:af:50:d1:ad:a2:bf:c3:eb:4a:32:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:23:6A:38:E1:D5:2A:A7:6A:75:84:1F:11:5D:3C:A1:CF:14:00:18
X509v3 Authority Key Identifier:
keyid:92:2A:3D:69:F2:1C:76:1E:2A:90:C7:72:6F:E5:E0:CD:C9:2C:33:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kio9afIcdh4qkMdyb-XgzcksM5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/kio9afIcdh4qkMdyb-XgzcksM5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/kio9afIcdh4qkMdyb-XgzcksM5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:05:50:ad:53:6f:a5:f1:b5:b6:a6:71:ee:b1:b0:ce:60:b5:
12:00:26:6e:a3:52:92:bc:42:6b:ae:fb:30:41:d4:a4:67:23:
2b:8c:fc:a9:89:61:45:ad:39:44:31:4e:39:c0:e3:c5:65:66:
73:0d:96:fc:64:c2:01:d5:81:62:82:10:57:9a:53:7c:2f:74:
d8:a5:38:64:cf:bb:98:bc:76:fa:52:74:d4:14:78:17:bf:0b:
f0:83:b6:cf:ca:fe:71:28:a6:96:9f:2e:0f:8e:a0:10:45:25:
97:7b:0b:a7:48:c2:e6:00:dd:ea:9e:ab:67:02:6e:4e:2f:53:
52:7f:01:65:24:ba:ca:f8:9f:e3:38:19:15:34:39:af:00:a1:
03:4a:84:41:73:38:cb:7e:7e:2f:38:24:a1:69:77:23:02:d4:
10:11:91:51:1e:17:3e:57:b2:c4:80:4c:db:b0:cc:12:7b:04:
86:47:1d:d8:66:9b:93:17:fb:64:0f:ba:5a:15:79:e8:b2:7a:
e6:62:c2:97:0f:56:3b:49:c8:0c:06:b6:0b:80:07:aa:32:6c:
19:67:50:2d:68:22:02:78:3d:3f:d0:95:2a:6e:3f:05:bc:cd:
98:05:12:83:49:0f:c3:d1:2f:4b:38:70:f1:9c:22:c3:4f:f7:
7b:99:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:17 2025 by rpki-client