Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft
File: KmU0qslEKjlNE5oagwPcBJWcHaA.mft (raw, json)
Hash identifier: tfanM4XmEI3ezts7EhuI+Rxsre2hkZEedfJW1WP9Aws=
Subject key identifier: 86:EF:71:F5:0F:6B:6E:1C:7D:35:F4:91:F7:CE:09:C0:1D:97:94:E8
Authority key identifier: 2A:65:34:AA:C9:44:2A:39:4D:13:9A:1A:83:03:DC:04:95:9C:1D:A0
Certificate issuer: /CN=2a6534aac9442a394d139a1a8303dc04959c1da0
Certificate serial: 0194BBCE88BEB14102E8CD3477503F98CCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KmU0qslEKjlNE5oagwPcBJWcHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft
Manifest number: 0D3E
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: KmU0qslEKjlNE5oagwPcBJWcHaA.crl (hash: p6jkSH/TkRD/1hPLtVdDZQrbsw5IPM5ozf33gSGKc3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:be:b1:41:02:e8:cd:34:77:50:3f:98:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6534aac9442a394d139a1a8303dc04959c1da0
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=86ef71f50f6b6e1c7d35f491f7ce09c01d9794e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:5f:13:cf:c3:39:c2:98:05:86:04:bf:f0:
0b:71:fb:6e:f5:ee:b4:89:1a:13:bc:0c:73:c8:e0:
12:e4:ef:b8:1a:9a:8d:64:6c:47:7d:5a:b2:b6:5a:
4a:55:fd:de:57:c4:c9:17:76:73:5a:8f:86:9a:df:
9a:83:67:aa:19:1f:28:26:d1:2a:0d:c9:32:0e:b2:
4d:40:19:03:e2:82:fc:4a:7f:ff:4d:3f:cf:32:43:
e3:92:85:e7:f8:dd:a5:28:76:e1:6e:0e:b3:b7:eb:
70:93:ea:cf:c7:c4:3e:3d:a4:64:e6:b5:23:9f:0a:
d4:21:31:06:a6:81:c4:dd:62:62:39:7e:fd:08:e0:
21:2b:60:4b:2d:96:6e:22:78:4a:c6:61:03:5b:48:
9f:7d:2e:f8:96:23:b9:c0:c6:f4:7f:76:b5:30:86:
7d:d5:cb:b5:63:24:c1:d2:ab:ef:80:5f:b1:86:76:
92:7e:a0:20:4b:8d:e7:bc:6b:df:96:f8:35:f0:7e:
13:7f:44:fc:da:5c:69:b9:33:57:67:09:20:c2:04:
ef:f0:f0:9d:cb:8d:d8:b4:4f:d2:43:8c:61:cd:82:
80:9e:a0:58:48:5a:cb:7a:4c:79:76:91:96:4e:63:
02:3b:bb:55:ca:89:d4:cb:81:86:fb:29:b4:40:f5:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:71:F5:0F:6B:6E:1C:7D:35:F4:91:F7:CE:09:C0:1D:97:94:E8
X509v3 Authority Key Identifier:
keyid:2A:65:34:AA:C9:44:2A:39:4D:13:9A:1A:83:03:DC:04:95:9C:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KmU0qslEKjlNE5oagwPcBJWcHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:f8:f5:41:22:99:9d:7e:be:a8:fa:30:f1:95:06:a0:74:
f2:e0:0e:f3:73:67:32:cc:72:89:9c:c5:95:86:79:9c:45:81:
b0:08:16:cb:3e:b7:40:64:11:1b:64:04:0b:1e:0e:04:00:6c:
07:10:7c:17:b0:56:a1:57:54:39:d6:86:3e:13:81:d2:3d:ac:
a5:df:e1:d5:45:3d:65:2d:00:78:fd:e5:59:ed:35:36:a0:aa:
88:d6:90:3c:a5:4b:de:2d:b5:fc:ab:97:6a:39:b5:6f:de:e1:
32:1b:d6:7c:65:b9:c6:79:e0:b2:2f:f3:62:60:d2:1f:fd:93:
8e:a0:2d:c6:e6:0b:c3:95:f2:d2:9a:c9:52:a0:ba:29:82:86:
bf:06:b2:0d:c6:bd:7a:11:7d:87:cc:eb:b0:60:3b:98:0b:ef:
10:0e:c6:dd:39:02:92:b9:c3:51:51:29:aa:8a:49:10:19:5e:
90:ee:54:37:32:00:ad:c1:3a:39:28:5c:3e:ee:72:a7:ae:5b:
59:55:af:7b:d3:d7:a3:5c:9a:ad:53:51:70:0c:54:a4:6e:74:
a8:ca:d6:55:6c:d5:d6:54:47:d8:57:1f:1d:4f:4f:3b:e0:eb:
a6:7b:38:07:1b:af:cc:93:c1:90:66:d5:17:d6:1b:5b:22:7c:
e1:25:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:15 2025 by rpki-client