Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.mft
File: kRiebt9T5AZyybXx81GXKCkewu4.mft (raw, json)
Hash identifier: JGdJh3a3fBLH+IvHJkawkwDE59oFIF9tyVwWvBZMn2c=
Subject key identifier: 57:08:7B:55:AE:A0:8B:01:62:B1:2A:39:19:43:1F:29:47:40:CD:B7
Authority key identifier: 91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
Certificate issuer: /CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Certificate serial: 0192D781A434B7F27D2E4098DF5AAF7CD7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.mft
Manifest number: 09AA
Signing time: Tue 29 Oct 2024 09:00:50 +0000
Manifest this update: Tue 29 Oct 2024 09:00:50 +0000
Manifest next update: Wed 30 Oct 2024 09:00:50 +0000
Files and hashes: 1: TGCjsX6EUhP35Fo6ApM9Lp-hI-U.roa (hash: 3G/VLccyUf34pvLoaETRc2PcivrIA4ve1MywWwQkWi0=)
2: kRiebt9T5AZyybXx81GXKCkewu4.crl (hash: /wCuujW0GE7dEzInzIkfIbI3+Hn7HwurHY1xWUbRuXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:81:a4:34:b7:f2:7d:2e:40:98:df:5a:af:7c:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Validity
Not Before: Oct 29 09:00:50 2024 GMT
Not After : Oct 30 09:00:50 2024 GMT
Subject: CN=57087b55aea08b0162b12a3919431f294740cdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:17:fb:ee:7d:b8:9d:b4:36:ec:17:c6:09:
08:57:21:c6:31:20:b8:0a:13:d8:c1:24:8d:f1:31:
7d:f3:78:ab:a5:d3:f5:1f:20:d4:3f:8b:3f:ab:85:
41:d6:02:74:cf:a8:b3:5f:d2:69:91:98:6e:7d:d7:
ba:9b:8f:22:af:3d:0c:8d:ec:99:a1:8f:02:74:4f:
11:eb:4e:eb:93:73:4e:c6:23:3c:d3:30:77:e1:e4:
7e:58:18:e3:95:df:27:a4:e9:64:09:16:21:0b:65:
15:2e:85:77:2a:d0:37:9b:98:81:d9:4e:c8:f2:21:
e1:c3:45:da:b0:62:f4:6a:2f:39:ef:cd:b5:17:4b:
b6:14:b7:be:1d:2b:2b:0f:ad:3b:c3:48:b8:9f:85:
b6:5a:6b:95:85:81:b2:c9:64:00:1f:a9:da:13:8f:
32:5f:fc:b6:43:4b:48:9f:c9:a2:43:78:22:b9:60:
a0:63:2c:fc:80:32:43:03:95:42:e4:e2:b6:66:4b:
61:43:c2:60:19:02:d6:e7:6a:f9:66:56:0a:c9:3c:
7e:12:28:2e:a7:10:ae:0a:7c:2f:89:92:9e:e4:23:
f6:d1:39:4e:fe:34:92:de:04:41:25:bf:20:4c:a2:
62:50:e9:2f:e5:51:e5:2a:cf:db:4b:62:5c:63:2c:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:7B:55:AE:A0:8B:01:62:B1:2A:39:19:43:1F:29:47:40:CD:B7
X509v3 Authority Key Identifier:
keyid:91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:69:b1:57:c2:90:ef:e2:e5:37:b0:3e:83:fa:42:f3:39:f2:
86:8d:58:9d:0a:85:ac:28:bb:60:b0:0e:cd:87:d4:3f:2a:ab:
68:ae:3e:0b:53:74:36:11:67:5b:6a:1b:fc:39:25:c4:a3:9a:
a9:75:26:32:7a:e8:97:c9:2a:80:cb:e3:80:ad:a2:5a:2e:ad:
92:f3:16:91:d3:4e:68:3b:87:a5:e9:3f:7d:a5:6e:34:93:b9:
f9:82:8c:9a:5d:f1:45:6a:07:71:77:b7:59:4a:8f:fd:fd:a8:
b7:a5:ff:79:72:af:c1:93:b1:54:cc:55:3d:cb:81:10:de:26:
27:b2:8a:1f:c0:b1:f6:b3:21:e1:ba:16:5f:a7:73:ba:ef:b9:
29:6d:52:2c:97:c5:f8:11:99:09:ba:95:29:50:e7:9e:68:8e:
98:ad:b5:cf:9c:20:02:bc:cb:5b:59:18:4f:9f:3f:1b:ce:d9:
d4:c7:27:03:74:b6:51:5f:1c:3f:01:79:a8:b7:9b:ad:59:4d:
9c:c2:c5:67:a9:6a:f2:9a:6c:b3:ae:04:50:16:f8:31:47:87:
a8:b1:a7:87:ab:08:90:67:48:9c:61:d7:c8:de:52:51:41:cf:
ce:b3:b4:eb:dc:82:20:0d:39:d5:5e:56:40:6f:4b:06:fb:ca:
5a:b8:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:15 2025 by rpki-client