Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.mft
File: kEVn9uZ1VmO9maPu8N7VOkIAQZM.mft (raw, json)
Hash identifier: 4xzZBxuY7ExLIzZoXzzCv4bDpvbzy8ew2CDoIuhNyeY=
Subject key identifier: 11:06:BC:F3:8A:C9:B7:A2:FE:9D:A7:D9:A3:04:97:77:E2:97:62:5C
Authority key identifier: 90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
Certificate issuer: /CN=904567f6e6755663bd99a3eef0ded53a42004193
Certificate serial: 018D7D3866BE0C6A63F7FA6B491DD83C9A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.mft
Manifest number: 090E
Signing time: Tue 06 Feb 2024 07:01:04 +0000
Manifest this update: Tue 06 Feb 2024 07:01:04 +0000
Manifest next update: Wed 07 Feb 2024 07:01:04 +0000
Files and hashes: 1: 5aIv8qsQFQSEOYJQ0dAXCI-5JDw.roa (hash: AmFEiNADi0P7CSv/4IsqbkJRIFLam5iN1E4bVgjPBDM=)
2: kEVn9uZ1VmO9maPu8N7VOkIAQZM.crl (hash: FDCZXRHXNBjCFZN8jrUdWIqVYD8CgKZN4Vgfg0Zai14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:38:66:be:0c:6a:63:f7:fa:6b:49:1d:d8:3c:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=904567f6e6755663bd99a3eef0ded53a42004193
Validity
Not Before: Feb 6 07:01:04 2024 GMT
Not After : Feb 7 07:01:04 2024 GMT
Subject: CN=1106bcf38ac9b7a2fe9da7d9a3049777e297625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:2e:35:f6:c6:28:3a:29:6e:23:e3:04:e0:
8a:a0:65:65:33:42:cf:4f:5f:a9:c3:60:cf:33:96:
02:24:09:16:46:bc:81:30:7e:40:ee:67:f8:ae:c9:
3f:5e:02:73:1c:61:d5:d6:f5:06:88:9a:7c:a7:1d:
59:89:36:cf:06:7a:08:09:5e:f8:b6:09:7b:49:48:
14:a1:80:fb:46:2a:b1:bc:a8:25:aa:7a:83:bb:86:
3b:c1:29:4f:f0:6a:6c:71:23:0d:58:a1:13:36:67:
e6:5f:09:bc:46:e1:1e:01:1d:a9:d9:e7:d0:dd:a5:
c8:bc:cd:43:f7:62:51:ac:e7:45:21:f1:7c:93:0c:
50:63:36:e9:f1:0a:d5:0f:01:f0:ce:c8:37:0e:b0:
ec:04:ec:82:97:2c:1b:4e:01:cc:25:97:4c:99:dd:
ab:12:ca:90:ad:11:2e:b9:4e:fb:c7:ae:3a:7e:20:
0d:f0:95:00:2d:9e:8b:ba:d7:f5:34:9a:b2:d4:19:
7c:e0:cb:94:8e:ad:33:04:47:88:2a:9c:cf:4a:4e:
f0:90:8d:04:86:9e:80:8f:63:67:e9:d1:b1:05:c6:
e8:f4:9f:71:35:4a:20:8e:96:ad:55:8e:ab:e8:09:
b7:b7:ca:88:2e:dc:f9:c0:68:65:10:7d:11:17:88:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:06:BC:F3:8A:C9:B7:A2:FE:9D:A7:D9:A3:04:97:77:E2:97:62:5C
X509v3 Authority Key Identifier:
keyid:90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e6:5d:6d:0d:29:45:6a:dd:e6:32:c8:57:23:80:1b:d1:72:
0a:35:56:e3:47:a0:45:96:e3:11:32:53:cc:6c:68:14:b5:ff:
7f:85:5e:14:d3:67:ba:e6:f7:ed:d1:51:2d:5a:97:04:4f:dd:
5c:de:76:42:5f:d5:cc:7e:33:64:a5:e8:c0:68:6f:88:cd:70:
8c:a7:af:f7:33:ed:b0:23:84:d0:d7:0e:17:cf:1d:f7:3d:a7:
df:46:85:53:16:e0:9c:8d:7c:0e:61:b2:10:b8:3e:44:26:02:
a6:ed:4c:b5:73:93:57:7f:f5:47:5e:42:51:46:cc:b6:ba:2d:
49:11:71:74:c9:34:e1:ff:0f:7b:80:b7:45:c3:c9:c8:ea:3a:
7d:c0:5f:08:39:c0:99:8e:fc:1d:ee:d1:9b:7f:75:83:4f:b6:
43:6e:74:4d:2d:4f:3b:4c:0c:bc:73:ec:9d:9e:3f:1b:30:ef:
34:ef:1c:41:3b:ec:25:eb:9e:75:a6:e2:a2:12:fe:77:5a:a3:
1f:83:26:ef:c0:7e:94:d5:2f:95:86:fd:61:4d:76:7b:d5:8a:
86:5a:ce:01:b0:7d:74:2e:6e:24:ed:26:09:e1:57:ed:0f:8c:
9e:11:a1:4b:49:56:3a:31:c8:d0:fe:a8:d1:ce:f6:3e:34:eb:
34:67:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:09:30 2025 by rpki-client