Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
File: kliCV2f7wINzKpbhgSzMW_4VAYU.mft (raw, json)
Hash identifier: kJIE1lao/hblCXG+SeB2DfBitY2qFiKAHPa908qgxGk=
Subject key identifier: 69:F0:31:8D:0A:9F:C6:ED:87:63:E3:F9:76:1D:64:E8:EE:ED:15:CA
Authority key identifier: 92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
Certificate issuer: /CN=9258825767fbc083732a96e1812ccc5bfe150185
Certificate serial: 0194E011A9AF9106FF75A41B6F31948FF57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
Manifest number: 143C
Signing time: Fri 07 Feb 2025 11:00:41 +0000
Manifest this update: Fri 07 Feb 2025 11:00:41 +0000
Manifest next update: Sat 08 Feb 2025 11:00:41 +0000
Files and hashes: 1: kliCV2f7wINzKpbhgSzMW_4VAYU.crl (hash: KUtsdlB0R5HyO0E7FdS/bLvqxIDfZsWlyTPFkKIIzu8=)
2: yvQyy9Z9k5i1VmlHAKaertyzN34.roa (hash: Ff1Cn1lR26UTFSkop2LtIu2dpCA0zAQ/5vNY09uigMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:11:a9:af:91:06:ff:75:a4:1b:6f:31:94:8f:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258825767fbc083732a96e1812ccc5bfe150185
Validity
Not Before: Feb 7 11:00:41 2025 GMT
Not After : Feb 8 11:00:41 2025 GMT
Subject: CN=69f0318d0a9fc6ed8763e3f9761d64e8eeed15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:b3:6a:0e:57:fc:3e:99:9a:9b:87:fd:29:
e9:97:19:e1:23:a7:2d:8b:0a:a2:7a:89:68:2f:c8:
3d:19:a4:23:df:fd:ee:21:ec:4a:75:17:77:2b:1c:
17:65:b8:66:a2:c3:65:54:75:ea:00:04:47:91:d0:
80:87:12:90:ff:ce:e3:15:47:de:2f:1c:2b:80:b3:
56:70:27:0e:fe:ec:c9:fa:97:37:21:2f:f4:22:eb:
f6:75:5a:82:be:e9:ca:0d:af:4a:1c:18:9f:8f:ac:
dd:c1:cd:7f:10:7e:f5:ab:64:bf:45:77:fa:34:1b:
0f:62:99:66:7d:6e:22:b7:eb:57:c3:38:07:b8:a7:
b1:26:a7:03:3b:3f:ac:49:69:29:6c:02:ed:ac:7f:
cb:f0:35:0b:ac:c6:42:71:fa:a5:03:be:f6:85:15:
00:be:29:65:85:2b:a5:a3:d9:00:dd:40:07:f2:5f:
ba:b9:73:6f:f2:aa:87:e6:03:19:4c:a6:2d:8f:44:
51:a5:26:84:aa:26:24:93:7e:c1:bf:e7:26:2d:13:
65:4c:86:89:22:a9:2e:81:f1:68:e3:2d:f2:86:43:
95:59:7e:d3:ae:d5:83:20:54:8d:9f:a5:b4:44:00:
e8:87:a1:10:2e:ff:8f:66:06:d5:cd:0a:54:cb:93:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:31:8D:0A:9F:C6:ED:87:63:E3:F9:76:1D:64:E8:EE:ED:15:CA
X509v3 Authority Key Identifier:
keyid:92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:19:b1:9d:ca:b5:49:e7:ec:71:7e:9c:1d:bc:88:f3:0e:ed:
1a:19:86:f0:fc:ec:89:d2:96:eb:f8:05:09:25:a7:91:db:67:
3e:35:71:13:1a:ac:cd:57:3a:a0:a5:6a:1b:c6:d5:36:a9:28:
42:ac:c2:63:c0:34:e2:44:6a:5f:16:a7:90:fe:52:22:0c:a9:
9a:3f:9a:96:92:3f:01:e2:df:03:b7:8a:8d:0f:eb:f5:76:8b:
6d:f8:1c:4b:23:99:1e:79:bd:83:71:ac:7b:40:08:11:5c:f0:
42:4a:ae:fb:76:fa:05:01:7f:20:66:9f:d0:38:84:31:61:a7:
e1:40:f5:8c:52:a5:22:88:d1:b0:61:d3:28:b1:4b:d5:6e:a7:
9d:33:f3:aa:46:a2:2a:c4:9c:49:a4:25:29:a1:1c:fb:4a:a5:
4b:c7:37:75:5c:ac:68:f2:4e:24:54:89:19:ce:ce:cf:f0:e0:
af:4e:d5:d7:2c:96:69:0f:69:3c:55:db:2d:55:9c:6c:9f:f0:
83:c1:6f:6e:5d:aa:c4:27:cf:56:f2:f0:90:ba:21:19:ea:67:
ee:42:af:ab:39:d4:12:2a:d4:70:e5:a2:9a:10:3b:26:1f:0f:
7e:b7:82:e4:17:44:47:45:e9:f8:1a:29:6e:4c:84:45:66:59:
e2:40:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:23:42 2025 by rpki-client