Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
File: kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft (raw, json)
Hash identifier: xB+je4oSwjEBsSKRjsd2F85p181E3HEwR2AEQoKUQx8=
Subject key identifier: C9:CF:38:E0:FB:5B:B3:94:69:84:C4:D0:17:FF:7D:9B:BD:7D:54:4A
Authority key identifier: 90:6D:4F:BF:6D:DC:6F:5C:B7:45:A6:8C:C6:81:8A:94:2E:AE:E2:0E
Certificate issuer: /CN=906d4fbf6ddc6f5cb745a68cc6818a942eaee20e
Certificate serial: 019405D7D74866B0FFE6E338C4B5FCC146CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
Manifest number: 07E4
Signing time: Fri 27 Dec 2024 02:00:18 +0000
Manifest this update: Fri 27 Dec 2024 02:00:18 +0000
Manifest next update: Sat 28 Dec 2024 02:00:18 +0000
Files and hashes: 1: RF9QRv_nthb6879WFhGPsdQ9MmI.roa (hash: GCFhg+T7Rw3ZTCDXjmbchktvqH5/hdoMYfM1UAi+19o=)
2: cpUzrFftGrfPIn9ahbAU4PTZMeo.roa (hash: 9n55AsvD5FA6Z1UN5fmc/o54vvWCfnS/crH5y8Y8X5Q=)
3: kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl (hash: 0tacVMXokS/gn9iKZIYxQEXu74OGmaRFqVdGwadJRVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d7:d7:48:66:b0:ff:e6:e3:38:c4:b5:fc:c1:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906d4fbf6ddc6f5cb745a68cc6818a942eaee20e
Validity
Not Before: Dec 27 02:00:18 2024 GMT
Not After : Dec 28 02:00:18 2024 GMT
Subject: CN=c9cf38e0fb5bb3946984c4d017ff7d9bbd7d544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:45:85:24:d1:5c:83:b3:5d:79:62:f5:b1:
a5:98:7f:2e:03:db:3f:a9:b7:1c:0d:15:a5:60:69:
71:33:e1:a6:ea:15:23:8f:c9:16:68:a5:d5:b5:9e:
31:c1:b3:da:e9:1e:bb:26:65:f3:c5:52:90:88:be:
5f:eb:3e:d7:c9:62:5f:43:aa:fe:9d:69:6d:54:84:
1e:85:12:40:15:a1:61:ef:e8:c6:44:41:1c:73:67:
dd:68:e6:bb:d6:78:ee:89:fc:aa:14:5f:cb:1f:8b:
c7:fd:f6:a9:a6:60:3e:24:00:a1:36:49:e4:c2:d7:
35:83:a1:95:aa:aa:e2:a6:b3:47:7f:42:ad:7f:9f:
8e:07:1a:95:10:28:e1:c5:a1:2e:f8:d4:66:78:a9:
63:43:f8:22:69:ec:cc:b9:91:15:ec:e0:b7:03:4a:
c6:ae:9e:bc:f3:a0:c6:8e:d2:ce:43:45:b7:78:82:
79:32:39:60:79:32:7e:74:f5:ac:4a:f5:a8:ed:ab:
02:ce:de:30:69:07:d5:26:d7:db:88:40:91:bf:b0:
80:fc:b4:57:08:19:cc:dd:4b:66:92:ab:33:f0:96:
9e:da:6a:fa:fc:dc:b5:17:54:54:0e:fa:5f:0e:6d:
77:72:97:ed:c5:a6:ff:ae:f6:3e:ed:a7:f9:13:89:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:38:E0:FB:5B:B3:94:69:84:C4:D0:17:FF:7D:9B:BD:7D:54:4A
X509v3 Authority Key Identifier:
keyid:90:6D:4F:BF:6D:DC:6F:5C:B7:45:A6:8C:C6:81:8A:94:2E:AE:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:60:a0:0f:b8:f4:6f:f2:c0:47:f1:7e:1e:16:fd:d8:42:64:
f0:eb:4d:66:bd:6f:4d:02:76:70:a5:29:98:11:9d:98:87:51:
18:25:33:89:1f:c1:49:8b:94:19:eb:d1:61:12:b5:f5:00:f3:
72:3d:bf:4f:16:c0:05:7f:98:b3:da:27:82:05:91:66:6a:96:
4f:ab:08:e8:48:36:74:0a:2f:fe:65:35:38:b7:77:d5:fe:2e:
9f:f9:54:6e:c7:3f:d3:07:17:82:39:97:fe:6d:ba:24:f9:01:
48:4d:b8:5c:16:3a:67:6c:88:cb:71:73:28:ef:20:82:52:0d:
48:a6:bc:c3:71:b8:4a:3e:e5:b3:70:62:e2:da:dc:0a:0c:b4:
c6:25:f0:c4:83:58:17:f0:79:75:1a:f2:36:56:f6:20:79:b5:
d2:46:cc:30:89:5e:15:f4:1b:9b:f4:ed:71:2c:f8:56:bc:05:
54:4d:5c:5c:c6:69:8e:e3:4f:71:22:89:07:04:57:15:88:da:
79:e2:e1:b4:ce:67:91:27:35:72:17:11:b5:04:09:0b:3f:48:
ff:a6:3e:36:d7:96:41:4c:31:fc:f3:e3:7d:81:17:b2:a9:08:
6b:f6:cf:a0:30:e9:38:03:58:0f:ab:f5:10:21:bf:9c:9c:51:
d9:96:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:14:14 2025 by rpki-client