Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
File: KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft (raw, json)
Hash identifier: Q0f6f9tLysdF5Uwmv93+QqbfZt6PsRfw/0iBFuV19V0=
Subject key identifier: AD:24:7F:8A:1F:34:D7:99:26:F7:CE:A9:26:64:8F:E9:A8:B9:B0:57
Authority key identifier: 29:B1:21:0E:C9:10:5C:71:7D:09:8F:9F:0D:00:D9:DE:A2:32:25:39
Certificate issuer: /CN=29b1210ec9105c717d098f9f0d00d9dea2322539
Certificate serial: 0194BC3C96867B473BF4F9BA6ECE07F0D012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
Manifest number: 10FC
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl (hash: tswuEqxGbXNCDAFpM1+K87HhmyhYeDCrWWDOVjNrkW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:96:86:7b:47:3b:f4:f9:ba:6e:ce:07:f0:d0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b1210ec9105c717d098f9f0d00d9dea2322539
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=ad247f8a1f34d79926f7cea926648fe9a8b9b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:97:ee:db:8c:34:a7:ad:99:dd:76:27:0a:
6b:7c:16:92:b2:76:4b:08:28:6d:ee:ca:7e:98:a6:
94:e0:9b:57:f8:e1:1d:3e:a3:89:26:bb:51:2a:0f:
5e:bd:2f:06:2e:0a:1c:1b:2a:21:03:be:6c:18:d4:
80:34:db:d0:f7:13:a9:09:e6:a4:50:47:cc:4c:c7:
a5:3e:a6:f8:6b:03:64:01:37:93:85:69:a0:82:c1:
9f:64:68:bd:e5:d5:da:c2:ae:4d:38:63:11:41:cd:
9b:c0:f7:37:26:b0:bb:45:2c:a2:a5:7c:0f:32:23:
9d:e9:50:27:51:8f:75:72:e5:d2:de:0e:3b:0f:33:
f8:dc:04:4d:97:24:de:c1:d1:61:ed:a7:71:02:9b:
da:a4:ea:db:fd:db:e2:79:4c:8f:a0:4e:ae:68:10:
8f:19:6c:26:e1:ab:b9:ae:4c:3a:d4:d4:50:ef:1c:
c3:2c:6e:f5:74:d5:27:4a:93:6f:3e:2a:4d:eb:8f:
f6:6e:4e:c4:90:96:5c:3b:69:62:d4:3b:68:b0:e5:
91:e2:ae:d3:a2:c7:2e:33:23:54:04:71:ef:cb:bb:
e5:49:29:e0:94:38:a8:32:5d:2b:18:79:f4:7f:cd:
b7:b1:37:d4:ab:e0:6b:aa:9c:5f:b3:1a:29:f3:4f:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:7F:8A:1F:34:D7:99:26:F7:CE:A9:26:64:8F:E9:A8:B9:B0:57
X509v3 Authority Key Identifier:
keyid:29:B1:21:0E:C9:10:5C:71:7D:09:8F:9F:0D:00:D9:DE:A2:32:25:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbEhDskQXHF9CY-fDQDZ3qIyJTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a00c61-2d87-4620-913f-0e464ca39e75/1/KbEhDskQXHF9CY-fDQDZ3qIyJTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:49:74:38:47:1d:89:af:8a:c0:9b:ff:62:6e:8b:36:57:b3:
ff:d8:00:3f:22:dd:3e:c6:b4:7a:82:90:76:ca:f5:a3:f1:f7:
28:a6:07:8b:c8:96:bd:75:22:3e:d5:46:fb:25:44:e0:26:84:
db:0b:eb:ed:e9:92:73:f4:d7:b8:e0:b3:67:12:d0:4e:97:0f:
b5:3b:1b:64:2b:39:03:80:c7:e9:0a:e9:f0:e7:9c:95:77:24:
e7:de:1c:b8:7f:65:55:74:93:66:91:46:2e:ef:84:96:4b:88:
c5:de:83:ff:bb:0b:4e:b0:b1:2c:c5:43:a1:bd:db:be:82:bf:
ed:75:23:51:67:04:a8:d7:5a:77:c9:cd:c1:a8:3c:de:2a:91:
3d:c0:d2:20:64:27:5f:f1:e5:68:e4:88:3a:60:f3:39:9c:2c:
91:ae:f6:63:a6:d9:63:e7:85:90:6b:2c:4c:10:67:3f:5a:92:
d3:ee:87:33:96:67:73:c0:86:fa:17:a9:0e:17:75:60:b6:95:
4e:aa:25:ae:5e:b3:ea:08:ab:32:7a:85:8c:2c:7f:20:f7:1c:
67:f6:3f:e6:65:7a:99:2d:97:20:b7:ac:28:8f:46:a6:1a:14:
11:70:a8:6e:47:d7:27:71:ba:3e:b8:b6:24:7d:13:ef:65:1e:
db:a1:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:14 2025 by rpki-client