Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: 9ikKH7Y8Ox3r8UeraTwsUfIzY//Kcs5GBUlCtGt8kIY=
Subject key identifier: 82:12:CC:12:5F:8F:65:D7:AC:BD:AC:04:AE:92:69:06:CF:21:B7:CD
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 0194BD17D0F610FF4F943BE11C443C0871BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 0F29
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: pGTuOr9b2bVmkThcv57Gqy78Vpd0dTKwujwIZrY4TYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d0:f6:10:ff:4f:94:3b:e1:1c:44:3c:08:71:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=8212cc125f8f65d7acbdac04ae926906cf21b7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:ba:b6:81:84:ea:55:8b:3e:6b:ad:88:e0:
39:cc:1b:fd:75:ed:4b:1d:1b:cb:ce:c9:25:75:25:
02:b1:42:9c:a7:ce:0d:0d:cd:39:ff:e2:fc:9e:86:
ce:50:d6:78:7e:5c:33:6c:fe:a4:aa:95:e8:4d:38:
69:d3:f7:a7:a3:75:7d:ac:48:68:21:d6:51:89:95:
45:66:cb:4a:44:d9:4e:ec:59:d9:b2:cb:25:11:47:
a7:cf:6d:60:d8:89:ae:0b:84:58:a0:5c:f2:d9:78:
a4:10:d5:5b:ae:6c:c6:ec:98:d5:47:f6:78:52:49:
97:ac:4c:fa:89:1b:74:21:23:e1:2e:fd:98:25:4d:
14:08:a5:5d:56:b4:83:54:e4:ac:2d:42:b8:bb:ac:
f9:1f:4b:c1:31:26:48:d6:45:72:de:54:f7:e8:41:
65:df:0b:e1:e6:31:4d:bd:aa:5b:25:60:a4:b6:54:
c8:6e:43:aa:50:24:7d:25:7c:00:2b:b9:f9:75:93:
40:ca:f5:a6:6f:b9:8e:5e:d1:a3:cb:4b:8e:5f:2b:
aa:3a:66:24:da:ac:49:5e:e3:d7:80:58:bc:79:47:
f9:29:d8:b6:9a:60:ed:28:9c:23:07:8e:db:61:1d:
09:97:f0:17:4b:bf:0a:47:ea:cb:a4:81:94:a0:18:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:12:CC:12:5F:8F:65:D7:AC:BD:AC:04:AE:92:69:06:CF:21:B7:CD
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0f:88:df:80:38:23:21:d3:4b:6f:00:5e:c2:ed:3a:da:48:
79:ee:86:3b:05:49:dc:64:ff:a2:87:d3:61:db:6c:53:ea:a6:
2c:8b:8c:ff:a8:53:d5:cd:51:36:69:60:d3:17:c4:8c:c0:65:
59:01:d8:bf:b4:70:62:af:2b:af:41:3d:ef:d9:c6:5f:5a:d8:
97:9b:2d:c9:4c:f4:40:68:aa:75:18:ff:2f:f2:8f:77:29:a1:
aa:8e:24:6a:ed:13:0b:c0:ff:a4:41:ae:99:7d:94:ec:37:88:
3a:14:f0:d2:e0:1a:5d:62:1e:97:13:98:4c:4b:6e:cb:96:d1:
cc:69:9f:4f:0e:ed:89:b8:18:aa:2c:0e:23:ed:35:6a:10:7e:
96:0d:e0:a8:00:53:eb:a5:b6:db:b2:4a:79:48:ea:af:30:41:
bb:6c:55:90:6b:04:ce:2f:fb:f1:47:a9:a5:99:64:32:6a:be:
c4:f8:07:ac:75:a9:00:26:02:ea:6d:71:ab:88:86:ba:ee:6d:
5c:af:75:4d:72:f5:1c:69:e1:07:f3:78:a8:7c:54:ce:64:d0:
0a:e6:c3:f7:a0:db:06:6f:28:be:ff:06:01:38:ee:0c:f0:a0:
73:d9:73:93:ed:d0:24:1e:d0:ac:9f:09:3b:8b:a7:1d:7e:5b:
8f:e2:6c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:34 2025 by rpki-client