Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json)
Hash identifier: eliSW5372m+IpDi11MU2r/fxyqcO6PRAR1iswpGz4Cs=
Subject key identifier: 48:A3:11:19:F2:DF:45:2A:80:BE:EA:16:BB:96:3C:DA:C7:B5:15:6F
Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Certificate serial: 0194BD17E8257F14B5E53E406BE41DCE765F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
Manifest number: 0F00
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: MXtjQVeKgM7RQaSme6O0MXAIxQXEaTD1Ow+Lrf7Rv/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:25:7f:14:b5:e5:3e:40:6b:e4:1d:ce:76:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=48a31119f2df452a80beea16bb963cdac7b5156f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:3a:a3:5d:c7:ea:6d:15:30:f1:6d:81:16:
7a:f5:48:ec:fc:94:6b:ae:70:7a:20:d3:6e:62:fe:
6b:d7:98:94:88:69:6a:ec:af:3a:e5:96:17:4e:64:
57:1f:6e:3e:f7:c5:c8:dd:73:bd:56:3e:f4:5b:f9:
4b:99:10:cc:12:ee:47:b3:bd:27:ce:3b:97:b6:97:
65:9b:49:f6:df:a1:d7:18:5e:bc:bf:f6:0e:0d:76:
69:cd:30:97:8d:47:1e:9b:42:18:d5:2a:8f:bc:5f:
cc:4b:20:15:a8:54:da:c5:97:ae:fa:c4:7b:e4:83:
7e:c1:70:b9:7a:15:04:2e:a3:38:98:8d:e7:ed:54:
8b:53:be:69:c7:43:f4:4a:82:09:e7:40:11:4c:69:
66:88:31:ba:4f:b0:d7:e4:e0:16:ff:d9:5d:21:d8:
74:0b:23:30:6b:00:3d:bf:9a:0e:23:31:98:bd:18:
7c:d4:6e:6b:4d:45:29:84:5a:28:81:89:23:db:d5:
8d:f4:ce:e4:ac:db:9b:ad:45:02:64:65:d8:74:cd:
bc:8c:fa:f7:90:50:58:65:bb:11:12:c5:aa:86:98:
82:50:1c:74:c5:ca:86:a4:74:0f:8c:94:dd:7c:ca:
bc:e5:2b:99:06:a9:bf:ea:20:78:cc:96:6b:77:2f:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:11:19:F2:DF:45:2A:80:BE:EA:16:BB:96:3C:DA:C7:B5:15:6F
X509v3 Authority Key Identifier:
keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bf:21:25:f8:72:e0:62:77:20:02:0c:92:88:9e:08:bb:e2:
c5:77:da:fb:a2:b2:d4:90:b5:c4:16:85:c7:02:06:d9:25:f6:
3a:54:c9:06:87:68:47:11:f6:81:42:16:d0:ca:9a:10:6f:5f:
bc:98:6b:4d:9f:81:46:66:ac:a0:f5:12:82:de:cc:b8:f6:dd:
1c:0c:ba:5c:f2:17:69:db:ed:66:44:8d:b2:ea:d2:ac:de:a4:
14:34:81:78:80:56:20:44:75:d2:b6:05:70:c3:fa:9d:bd:8f:
8b:73:bb:45:e3:3b:f8:48:55:c4:98:45:21:12:b8:dc:c9:cf:
6b:c3:21:ee:2e:3d:a9:7f:94:59:17:ef:a9:1b:7e:ec:00:63:
c0:ca:05:a6:00:b5:00:dc:d6:ca:b5:f8:21:e3:b7:9f:02:33:
ba:58:51:ba:f9:d8:bd:36:72:60:43:32:ca:b8:94:78:3c:01:
7e:c7:9b:56:cf:cb:89:1b:ec:5b:3e:74:3b:c9:d8:e9:8f:3b:
ac:7f:ed:c4:ee:6a:7e:89:92:c9:f9:b6:68:87:20:5e:c4:eb:
9e:3c:8e:e8:a0:0f:30:f1:01:52:ac:78:fe:eb:49:8f:2d:c4:
6e:09:ae:78:18:41:ec:60:c4:36:db:3e:e3:50:45:8a:a2:44:
4c:a2:59:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:52 2025 by rpki-client