Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: q3gaI06krEG/tDEXiaV576JPxYyyeKmJCXQGVK/AVgY=
Subject key identifier: CF:1D:1C:EE:38:60:6C:98:18:9C:19:5D:DC:16:50:81:D2:63:A7:01
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 0195E0EB0F3F7C35FBDBA47277D659AE76D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 0874
Signing time: Sat 29 Mar 2025 08:00:55 +0000
Manifest this update: Sat 29 Mar 2025 08:00:55 +0000
Manifest next update: Sun 30 Mar 2025 08:00:55 +0000
Files and hashes: 1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: mG7Rq8zHBkZvmzs396ZC+zwm1rFwZgyCkgaY8ZjdcNI=)
3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:0f:3f:7c:35:fb:db:a4:72:77:d6:59:ae:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Mar 29 08:00:55 2025 GMT
Not After : Mar 30 08:00:55 2025 GMT
Subject: CN=cf1d1cee38606c98189c195ddc165081d263a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:0b:46:4b:a7:97:35:d2:8e:2c:86:22:1a:
ce:22:17:2a:ba:bb:e5:be:27:5d:0f:b8:5c:90:dd:
b4:b9:1b:9b:6b:c2:cf:ca:f8:35:9d:04:88:a5:43:
f7:f8:9e:50:91:e8:02:4d:4d:8c:f0:65:c7:d1:fa:
7c:66:0e:64:94:85:e4:87:b9:d4:8d:c0:43:b7:ac:
c5:ad:b4:8f:3e:8e:6c:c6:64:b9:17:3c:40:f1:78:
d9:cb:40:28:9d:98:2f:91:2d:60:d4:04:b6:f3:41:
fa:0c:2a:53:c9:ba:30:b3:38:3c:3a:5f:ed:5e:d7:
c4:82:f7:60:a9:c3:fc:5d:b3:c5:6c:f4:f1:d4:32:
55:d7:de:d2:e8:67:81:28:ad:14:3e:ec:f5:35:f8:
91:c7:ab:e6:01:aa:9d:bb:a7:6c:bd:c7:68:d6:02:
f8:a8:bd:7d:d1:fc:24:6b:04:18:e4:4f:5d:a4:71:
79:77:08:1f:82:c6:51:ff:d8:13:f6:b8:f0:92:75:
20:97:5d:b5:66:4c:85:fa:00:42:9e:6a:ed:e5:a9:
a7:2c:2e:ec:70:49:45:56:46:90:f2:2d:28:eb:5e:
f1:ee:e0:c4:1f:12:72:b2:96:64:28:8f:a2:d5:cf:
c7:cf:13:2b:3e:00:87:7e:81:d5:ad:6f:5c:e7:16:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:1C:EE:38:60:6C:98:18:9C:19:5D:DC:16:50:81:D2:63:A7:01
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bb:0e:bf:cb:ec:c9:ef:78:92:e7:0f:08:1d:c7:de:8b:84:
bc:e7:5e:6e:9d:33:57:db:10:9b:33:66:58:b9:3b:02:83:8f:
1b:09:55:b9:b5:53:5a:1e:a2:ac:11:0a:b8:ee:72:35:cb:97:
11:c8:28:16:8d:89:60:b1:25:f9:aa:97:b9:8c:17:26:d3:b0:
49:40:0e:85:c5:d3:6f:6b:d0:49:3f:37:f1:83:99:94:4c:4f:
81:fa:f8:72:66:fb:5e:a9:53:ff:57:a4:d9:33:96:51:e7:5d:
87:32:60:9e:14:19:14:7b:6d:38:e7:0e:6c:b5:c9:c3:b6:4d:
e2:fb:ad:a8:b3:fd:1e:5a:31:a1:3b:a9:5d:c4:ce:f5:22:c2:
b4:42:14:96:a2:17:ee:78:5a:fd:c8:ec:1f:07:a7:b2:ce:1b:
eb:8e:10:cc:52:7e:e6:18:67:b4:97:d5:d1:a1:86:6a:44:c9:
e4:bd:0f:4c:77:95:2d:40:87:3d:15:8b:37:fe:7b:b5:d3:29:
80:7b:e4:c2:89:3e:fc:49:9b:a1:d2:80:9f:e7:d0:fb:ac:4d:
0c:70:e9:e8:bf:8f:25:9d:7d:2e:79:d2:37:9d:ae:dc:79:6a:
06:76:59:db:c6:b3:a1:c3:0c:09:2f:92:fe:07:31:3f:1c:2a:
25:1d:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:07 2025 by rpki-client