Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: wE7VqnNzrLAkKAR7IxVRG9ZrFQIl8Da4k4luBXMD/RY=
Subject key identifier: 52:D9:CC:A3:37:B1:6D:1B:2D:F0:98:4C:1F:48:88:85:CD:FB:0A:2E
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 0194BC3BC02B584154403177AEBC11D1E088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: AyattdtvtstutwkspqC15P0zhxGrIndIzF7juEi0f2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:2b:58:41:54:40:31:77:ae:bc:11:d1:e0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=52d9cca337b16d1b2df0984c1f488885cdfb0a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:95:f9:9f:2c:32:10:27:e0:8e:29:58:32:
20:a6:e4:d4:f0:e9:6d:2b:7b:d9:1a:c5:3f:8f:a2:
fa:aa:87:29:2a:b3:05:36:15:51:a8:5c:56:dd:13:
7b:55:c9:ab:e9:5b:99:0d:30:3f:3c:22:da:86:d8:
76:08:c7:2c:12:40:21:e1:2c:75:0e:d4:1f:c5:ed:
b8:95:83:52:5b:e1:ea:f3:22:7e:22:3d:1a:87:f7:
7f:96:1a:16:3d:dc:1d:08:47:f8:bb:20:7a:60:1b:
52:ac:40:7c:5e:0d:92:ba:59:1a:a7:7c:6d:eb:ed:
f8:17:95:86:f2:8e:9a:7c:64:97:6d:68:2a:d5:12:
26:00:6e:42:81:ee:1a:85:82:e6:cd:3c:d4:55:3d:
2d:63:82:6f:99:3b:79:bd:d8:c5:28:7c:b0:fc:02:
d5:d9:80:b1:59:d0:63:e3:ff:1d:97:0c:8a:16:29:
b3:3d:b6:27:a1:3e:a8:b9:ff:81:2f:d3:c8:44:ea:
be:72:8e:e6:dc:09:3c:d7:40:2f:cb:da:d1:1e:91:
06:d9:c7:30:f2:cc:f3:9d:5a:18:f4:eb:5e:b8:c3:
52:52:88:47:e8:6c:2e:d7:5a:4d:d7:e8:ae:3d:70:
b5:b8:95:7b:dd:b2:32:cf:e5:88:23:1b:31:cd:3c:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:CC:A3:37:B1:6D:1B:2D:F0:98:4C:1F:48:88:85:CD:FB:0A:2E
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5f:c5:e5:5b:ae:cf:d3:34:31:d3:34:c7:9f:62:00:8f:01:
9f:b6:7c:25:f1:27:c6:b2:d3:7c:c2:6d:d6:51:02:58:e3:78:
0a:4a:e2:6e:be:5b:5c:d7:6b:45:72:5a:a0:ed:71:5c:b7:d6:
84:4f:f7:6a:7c:81:df:e6:43:00:64:db:fc:cb:60:37:72:87:
ff:f1:0d:1a:72:a8:14:51:ac:1c:7c:20:4d:56:24:f2:83:f8:
2d:3b:aa:ba:9c:1c:03:8b:78:5f:8d:a3:2a:33:37:04:4a:70:
a0:b3:84:3d:fe:8c:d9:5d:35:cc:b5:72:02:92:81:89:c6:b2:
0a:45:7e:77:03:fc:19:fd:38:4d:09:08:2a:dc:34:7b:2a:5a:
89:7d:51:ab:52:8b:2b:e2:ca:a7:13:ff:52:75:65:39:7f:04:
3b:07:69:ed:f9:aa:93:7d:4c:b1:2d:fc:04:f7:d7:0d:be:b9:
5d:ce:79:1e:3f:ea:a5:07:3c:ce:dd:9a:58:29:f5:31:56:a6:
a8:5e:e2:a3:9d:20:e7:2d:10:aa:18:36:e1:c0:aa:2a:d5:51:
eb:2c:3a:15:ae:28:d9:0d:3f:2b:e9:db:1f:e7:53:85:6a:d2:
63:49:dc:8d:41:df:66:90:fe:23:6a:7e:f3:49:05:ce:6e:07:
cd:10:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:57 2025 by rpki-client