Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/KTjKpqlxeOIJt8I3kdAWtnydyqQ.mft
File: KTjKpqlxeOIJt8I3kdAWtnydyqQ.mft (raw, json)
Hash identifier: EI2v3lhe+6XfpLwaDM4Ja62sW4ZWtnEonat8t5umYCo=
Subject key identifier: A9:36:45:98:CE:B1:0F:A8:81:F7:70:89:9E:BF:FE:25:ED:46:EB:61
Authority key identifier: 29:38:CA:A6:A9:71:78:E2:09:B7:C2:37:91:D0:16:B6:7C:9D:CA:A4
Certificate issuer: /CN=2938caa6a97178e209b7c23791d016b67c9dcaa4
Certificate serial: 01940E004DACB3B0065BB6027AB58DBAEEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTjKpqlxeOIJt8I3kdAWtnydyqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/KTjKpqlxeOIJt8I3kdAWtnydyqQ.mft
Manifest number: 03B0
Signing time: Sat 28 Dec 2024 16:01:28 +0000
Manifest this update: Sat 28 Dec 2024 16:01:28 +0000
Manifest next update: Sun 29 Dec 2024 16:01:28 +0000
Files and hashes: 1: FtpWCuAYqThVl6o8doljX27eX8Q.roa (hash: JmSKqwukfpyxf6mlAm5xh2F2FIGPN12gIyBdYw2zpS0=)
2: KTjKpqlxeOIJt8I3kdAWtnydyqQ.crl (hash: CuTi5+qfF8zgl+Rf/gGwBEkCqGva65fMHB1tKANyee4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0e:00:4d:ac:b3:b0:06:5b:b6:02:7a:b5:8d:ba:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2938caa6a97178e209b7c23791d016b67c9dcaa4
Validity
Not Before: Dec 28 16:01:28 2024 GMT
Not After : Dec 29 16:01:28 2024 GMT
Subject: CN=a9364598ceb10fa881f770899ebffe25ed46eb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:c0:ef:0f:2c:ca:99:dc:b5:74:cf:56:ba:
8c:5e:e1:2c:4a:c9:c9:97:da:38:cd:ed:64:28:b1:
d0:68:1d:fc:bb:7e:49:9a:c6:e0:78:1f:ba:da:85:
bd:68:31:da:40:7e:dd:3a:d9:e4:78:e6:eb:46:4f:
ef:32:1a:51:94:32:ca:23:34:25:2d:29:ef:ff:cb:
c6:ef:61:fb:ce:78:ad:9d:22:5b:ea:68:9f:bc:6e:
f6:31:9f:62:57:02:c2:42:6c:f4:c7:b0:d1:04:f3:
92:24:51:74:db:17:a9:83:dc:65:f3:81:14:06:45:
c9:36:14:25:84:2f:b6:9d:af:91:86:a0:79:47:ef:
45:e9:ff:34:95:ac:94:c9:28:44:81:57:3b:d7:4b:
46:a3:49:2a:02:0c:b4:49:32:3e:ae:3a:bd:ef:0c:
90:04:59:17:a3:7c:d6:ba:32:21:00:c1:36:3e:ef:
fb:07:91:a0:35:fc:b8:2c:be:26:ff:97:06:27:4b:
75:c0:35:c6:6b:b7:3b:42:94:53:c9:5a:45:ba:48:
56:7a:78:e8:01:bc:5d:b6:5d:6e:55:09:d2:73:05:
df:e0:d8:0d:09:f2:dc:18:95:67:f9:bf:d0:46:b2:
0b:d0:fb:a6:de:d6:d9:5c:fb:5c:c9:e8:90:c7:43:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:45:98:CE:B1:0F:A8:81:F7:70:89:9E:BF:FE:25:ED:46:EB:61
X509v3 Authority Key Identifier:
keyid:29:38:CA:A6:A9:71:78:E2:09:B7:C2:37:91:D0:16:B6:7C:9D:CA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTjKpqlxeOIJt8I3kdAWtnydyqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/KTjKpqlxeOIJt8I3kdAWtnydyqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/KTjKpqlxeOIJt8I3kdAWtnydyqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:89:91:df:f4:af:91:8c:7e:9f:a6:51:82:ab:cc:8a:86:79:
14:25:fa:23:ce:6c:ee:22:8f:8e:fe:fa:04:2b:56:c2:2b:0a:
e1:96:3f:d6:a6:c1:12:b2:8c:8f:c5:50:a9:df:29:63:c6:76:
be:a6:f3:c5:13:c8:dd:75:dd:e4:f7:2c:08:47:6f:07:6c:a4:
be:c5:af:35:20:53:ed:51:a2:24:cd:8c:15:3f:93:67:d4:8e:
42:a9:7a:17:1d:9e:01:5e:52:58:39:ba:c4:8e:c6:aa:85:73:
8f:e9:92:16:33:f4:f5:b2:64:44:f4:e5:33:05:ed:15:c1:d6:
9c:0a:91:26:5b:43:87:88:eb:de:8e:1b:dc:02:29:08:97:e1:
42:df:b7:3f:f1:fe:e9:fe:d0:60:a4:f8:6d:ee:b8:65:52:af:
75:5e:12:d1:bb:b5:e7:d4:f1:6a:b3:ed:21:4a:3d:08:49:ca:
f0:21:62:ad:47:37:3b:44:66:d4:34:94:b1:34:e6:d8:41:c7:
b0:a9:4b:74:5f:e2:c1:3b:39:4d:a7:48:eb:da:ff:63:a4:12:
7a:36:8a:73:bd:2b:16:cc:a1:8d:17:d7:8d:4f:bd:9b:d5:5f:
91:5d:52:d3:d1:8a:84:b6:44:14:74:05:09:08:f5:d2:02:21:
4a:7e:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:17:31 2025 by rpki-client