Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: w4uwQl6daccLlfffGV98UhqSz4qSe/bpnnuCNfPekcE=
Subject key identifier: 0F:41:8D:A9:4E:C1:6C:AB:9A:BF:90:65:BA:E0:52:E3:8C:AB:09:02
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 01962F3D47EAE99AA42E530D7B04F83D0EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 02C6
Signing time: Sun 13 Apr 2025 13:01:07 +0000
Manifest this update: Sun 13 Apr 2025 13:01:07 +0000
Manifest next update: Mon 14 Apr 2025 13:01:07 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: kSjMtFsjp0il4GkBfUuYGSGjf1B2DPvWEezGs9Hhxic=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:47:ea:e9:9a:a4:2e:53:0d:7b:04:f8:3d:0e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Apr 13 13:01:07 2025 GMT
Not After : Apr 14 13:01:07 2025 GMT
Subject: CN=0f418da94ec16cab9abf9065bae052e38cab0902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:7e:1b:44:ff:c8:c1:f8:fd:95:40:d0:78:
e4:03:a5:a1:4c:38:c2:08:86:51:1e:db:98:e4:a9:
a3:8e:02:e5:09:9d:bc:41:43:70:34:0a:16:c5:ed:
8f:0f:db:c3:79:d2:3d:b0:75:24:2d:bd:d3:ff:ca:
6a:a3:09:c6:90:97:ad:c6:54:98:fe:72:88:71:75:
ea:b1:c2:72:eb:7c:b8:97:b0:c3:da:44:c9:25:db:
2d:ef:bc:c7:c5:d3:9c:df:1b:90:b3:17:d9:80:e6:
05:92:65:6b:f2:91:e4:8c:3a:9c:a1:1d:37:7a:ae:
92:e4:73:e4:7e:70:35:c1:90:6d:28:0d:9f:31:84:
f7:8e:2c:45:5c:cf:33:a5:6e:b8:e8:78:ae:9f:29:
2c:83:9c:7c:00:48:82:8c:ac:b7:f6:76:07:06:ac:
19:e0:97:83:5f:47:6d:18:99:5b:a4:a9:49:7d:4a:
2a:6b:60:ff:f7:30:b3:0e:c6:2f:74:20:8f:77:02:
b4:40:0e:24:79:87:7c:a9:e6:16:34:8c:a1:10:0b:
6a:46:51:f9:cb:64:55:14:0c:a7:44:4e:b0:67:01:
3c:95:bc:eb:dc:ef:86:cf:6e:38:f7:0e:62:71:31:
ac:32:7c:30:85:98:1d:86:ae:2c:40:37:e8:73:71:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:8D:A9:4E:C1:6C:AB:9A:BF:90:65:BA:E0:52:E3:8C:AB:09:02
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:00:ca:d6:9c:c5:63:21:c2:7c:b9:00:c9:dc:71:91:94:bf:
2e:b6:11:28:a2:42:7e:3c:0b:ef:8b:d6:e8:79:69:3b:c1:a3:
f7:0f:29:c4:91:00:7e:39:6c:c2:a0:76:00:da:68:b3:a6:10:
c1:b8:cb:fb:36:36:57:6c:60:f0:3b:41:2e:90:59:59:ad:40:
b7:92:7a:3e:55:f2:24:5d:bc:dd:d5:ff:53:55:94:52:28:ea:
ef:7f:81:5f:55:78:3c:6d:0c:a6:f6:cd:c2:d5:0d:af:6a:9a:
39:f2:57:44:18:0b:a7:26:ef:a8:1d:d0:d0:97:8b:95:26:af:
10:2a:ef:5f:c9:3d:f7:ae:f3:bc:29:79:64:7b:dd:6a:47:05:
89:72:13:3f:a7:f2:eb:b0:f7:14:82:cf:4f:9f:68:ef:e4:13:
e6:ce:b1:1e:89:f8:fa:ff:76:0d:ec:1a:e9:18:d4:81:e0:ac:
06:e7:bb:8b:ee:07:3c:fd:67:50:9c:83:05:8f:e4:9a:81:c9:
9e:2f:78:38:dc:13:8d:96:2a:69:ec:a0:97:d1:cc:83:e6:bb:
7d:79:92:6b:e3:76:bb:19:f4:fb:9b:b4:46:21:bd:78:6c:d2:
59:0a:c4:78:bc:23:46:f9:24:04:95:8a:74:10:85:f0:7c:18:
b2:bb:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----