Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
File: KtclXVpq-4XjdugbuaCew93dvNw.mft (raw, json)
Hash identifier: 1QC2mA0DP3YEaBU83SWiy76nvgGWHPneZXiM4f9vmQU=
Subject key identifier: 36:35:A6:43:78:78:5D:75:25:69:F1:78:B6:9E:13:0B:9D:E4:65:EE
Authority key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Certificate issuer: /CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Certificate serial: 0194BCAA095759CA8A774064F25A30960C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
Manifest number: 1341
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: KtclXVpq-4XjdugbuaCew93dvNw.crl (hash: AHk5vOmIdtS3abvwNf3IqeGiMmb4KYGrEuwfCtGyf6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:57:59:ca:8a:77:40:64:f2:5a:30:96:0c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=3635a64378785d752569f178b69e130b9de465ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:3a:d8:d9:02:50:5f:8b:c4:cb:2b:bd:88:
88:c9:4f:3b:1a:f9:32:87:72:a9:b8:f8:9c:1d:65:
69:72:c1:cd:b6:08:ab:52:b2:fc:36:10:56:5c:79:
c6:40:96:e5:d7:76:6a:55:17:2b:68:72:75:ac:ca:
bd:b9:42:c5:f1:8a:61:89:cd:3e:1f:56:dc:07:87:
4f:80:d8:86:d1:d8:ca:d4:67:53:ec:ef:d5:82:52:
5b:7c:cc:a7:d0:83:b9:43:16:fb:96:12:31:11:ec:
72:1c:1f:53:e5:c9:3a:61:94:17:85:af:c7:b2:9a:
5b:6e:3f:d4:a0:c1:b4:84:1b:78:70:5c:a6:85:19:
20:04:e5:59:8d:15:bd:52:c0:75:78:b0:b0:67:58:
69:66:22:ab:4e:0d:ec:72:29:91:08:31:e4:b2:fb:
44:9d:da:05:5f:88:06:12:af:99:52:73:7d:ba:37:
54:92:10:30:44:63:47:82:98:53:7a:01:9c:c0:aa:
d7:17:11:d5:fa:db:26:4a:e2:e1:5c:a0:66:6d:e3:
9b:17:69:66:c2:60:6f:45:da:77:ed:5d:5c:90:09:
a5:50:f0:78:ec:47:d7:33:eb:1e:3d:0e:a3:ca:71:
d2:5a:4f:3b:f2:47:95:e6:dd:41:7b:c0:fd:9f:fa:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:A6:43:78:78:5D:75:25:69:F1:78:B6:9E:13:0B:9D:E4:65:EE
X509v3 Authority Key Identifier:
keyid:2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:66:ed:b7:96:73:e7:f7:8a:4e:74:a4:6d:cf:06:48:71:
24:1c:06:5d:f9:71:07:fa:5a:f4:7f:ca:fe:41:eb:9f:94:c7:
66:a3:3c:10:c2:ed:90:c8:02:49:e0:2e:fe:16:a0:98:e2:91:
d0:0e:b2:6f:70:07:21:ab:d9:4d:17:5a:d7:86:04:b1:1e:6c:
09:5d:64:52:84:f9:b7:ce:3b:fa:b8:f6:27:1d:36:8b:31:a2:
00:b2:38:30:9e:d3:f9:d6:d9:ba:9d:79:71:fc:fc:08:ce:4a:
7d:6f:60:97:8f:9d:07:fb:09:b1:22:b8:77:ee:dc:11:3c:47:
07:64:a1:2d:06:0e:55:bd:3d:f0:ee:2e:67:72:69:5f:87:7a:
0b:24:38:20:c3:e0:37:47:51:96:c3:19:51:96:b2:8e:e8:2a:
2a:d2:43:d1:73:bd:4a:ab:0c:d7:f4:f6:c8:cf:7f:e3:c3:04:
6a:1c:68:0b:b4:d3:c0:60:05:16:fb:16:b2:2b:8b:a2:d0:68:
fb:96:12:e2:4e:85:01:8b:c8:13:13:07:53:34:5c:27:56:4c:
77:86:c1:e5:bc:7b:11:8c:9f:e1:f1:95:ed:e9:5a:14:48:01:
3f:d9:18:e6:87:f6:d5:04:f1:f9:5f:9b:7c:37:91:07:3f:95:
b9:36:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:42 2025 by rpki-client