Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
File: K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json)
Hash identifier: dGFdO3Yz9WXxdm3ZArmRp2VbBJAocUL6E0FkjLkUj5E=
Subject key identifier: 52:25:FB:47:E4:19:3F:C4:4E:A2:23:7F:BE:C2:0C:E7:93:79:43:09
Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Certificate issuer: /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Certificate serial: 0194BD17EFE05B9D48726B3991796CC5B754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
Manifest number: 0C40
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: XoZdMMd7wfqBG7HDm+z7ez999pwqFLkWniiPiuPxCrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ef:e0:5b:9d:48:72:6b:39:91:79:6c:c5:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=5225fb47e4193fc44ea2237fbec20ce793794309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:31:f8:49:60:2d:f0:51:ca:3f:c3:97:d1:d2:
83:c3:11:c3:ff:67:87:ac:3c:e3:80:18:79:35:1d:
0d:21:fc:4e:75:96:03:45:ec:bb:6e:39:6d:c9:f2:
86:fa:69:fc:f9:ba:dc:3b:7e:b9:ea:74:47:a4:06:
39:72:18:bf:d7:95:5f:26:6f:fb:46:2b:dd:5a:19:
70:3c:63:44:4f:57:64:ae:f3:0c:9f:68:e1:4d:d3:
e9:8e:1b:44:dc:ac:e1:fe:7e:cb:1f:88:30:13:b9:
46:24:39:05:46:77:14:ec:80:6c:99:f0:86:77:51:
0b:7d:42:ac:e8:66:65:95:87:58:a8:d5:92:4a:9c:
34:43:65:7c:98:e7:9a:e8:50:9c:2e:6a:cf:dd:6c:
45:12:d8:c7:e5:7d:d1:52:a4:63:44:e4:f6:6c:5f:
43:18:dd:a1:87:60:20:06:fc:b4:f7:55:c6:24:0b:
b4:db:9b:b3:1d:89:4f:cb:1a:e5:82:7c:90:d2:48:
93:f1:ca:11:56:9b:d5:db:38:aa:52:29:ae:ad:e4:
c0:75:cb:14:f9:7b:d3:58:63:fc:37:3b:4b:7c:e6:
19:97:86:1f:ed:f1:9c:34:3a:97:7a:98:fa:3c:31:
6a:6a:53:1f:48:1f:4b:a5:49:4e:05:6d:af:43:02:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:25:FB:47:E4:19:3F:C4:4E:A2:23:7F:BE:C2:0C:E7:93:79:43:09
X509v3 Authority Key Identifier:
keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:5d:3c:1b:13:d8:ba:1f:57:cb:31:f5:e9:2d:3b:8d:4f:
46:aa:ed:47:03:c4:9e:47:2a:17:7e:e3:97:46:7a:9b:d0:dc:
fe:61:be:38:68:90:cf:50:af:fe:37:09:a3:dc:84:d5:c5:90:
4d:90:16:8b:03:8b:5c:39:8d:41:6d:df:65:f6:4d:c7:42:34:
e4:5f:c0:fd:35:23:6b:df:ae:06:c4:3e:5b:d8:76:c0:1d:ef:
1d:26:23:31:71:26:b4:47:7b:9b:ae:f3:7d:fe:5d:de:f1:71:
2a:6c:a3:ad:e4:52:44:ac:43:20:d0:30:fd:a1:84:13:a5:de:
5f:ca:80:54:03:c5:cd:6e:d6:a1:6b:17:b8:19:23:80:cc:aa:
e2:f4:28:11:ba:e8:a8:15:52:68:27:d2:7a:62:74:f4:ef:cf:
22:c7:3e:2d:7b:af:f7:f9:89:66:9d:9b:76:df:04:fb:62:70:
37:4a:44:39:7b:1e:f9:66:0a:9a:4c:cc:de:c9:33:93:b4:65:
2a:a6:11:d5:ba:59:f4:c0:b0:29:ac:97:da:dc:b3:15:bf:73:
41:59:b2:18:45:e1:dc:5c:cd:1c:e3:b2:53:e4:70:81:96:a3:
f4:9a:16:df:20:5d:36:be:1c:ff:2c:b5:46:c3:df:8f:32:44:
2e:09:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:58 2025 by rpki-client