Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier: tYNil/0DIj9MLD61T5+mZzhREHc6oFmGHot2zhxaEck=
Subject key identifier: 93:18:B1:FC:74:0B:DD:61:63:9C:BB:FC:50:DB:51:68:FE:43:1E:DC
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial: 0194BBCE6E610197F45AF9F0F55500E26A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number: 1192
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: w8z450qtW/SeSDF8Ova2LiXQjuZoVPWPfyRyfiqikEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6e:61:01:97:f4:5a:f9:f0:f5:55:00:e2:6a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=9318b1fc740bdd61639cbbfc50db5168fe431edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:25:ec:ec:6e:7c:50:d7:8e:c6:14:42:1f:
c7:cf:e3:27:3b:13:04:84:f1:20:78:00:1d:9a:f4:
95:9d:20:f1:d8:0c:65:87:1c:9a:01:6c:8a:09:53:
8b:da:d5:3e:2b:83:f1:bf:49:ff:60:0f:75:d9:73:
a8:c5:bb:52:26:4c:03:5e:3b:3c:d2:09:37:37:d7:
76:33:6b:03:ea:13:60:54:d8:b9:7e:6d:49:7d:11:
59:8b:86:89:fa:36:d2:66:f7:78:3a:14:33:44:3c:
bd:ba:3d:3c:15:23:34:ed:cb:29:73:83:a1:42:84:
fc:7c:c9:5f:ef:3a:17:ec:32:7a:c9:4d:d0:c5:f0:
14:1c:04:2d:61:6d:97:47:89:c5:9a:06:8f:c2:7d:
e3:1d:bc:3f:a4:7b:0e:d3:84:b2:55:f5:a0:12:5b:
96:3a:72:1c:f1:89:6c:1e:0a:20:38:93:99:cf:24:
16:7d:40:f3:eb:28:c7:fc:00:2a:f1:56:53:d7:92:
d7:6f:0e:cb:d7:5e:bb:25:7a:67:dc:51:bf:3f:2f:
ce:54:12:1a:24:cf:4f:c6:ba:ed:94:67:e8:de:4d:
57:e6:88:73:aa:8d:90:a6:7b:eb:fb:83:f1:6e:4f:
fb:bf:91:a6:d3:13:50:65:58:f3:4e:b3:c9:47:91:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:B1:FC:74:0B:DD:61:63:9C:BB:FC:50:DB:51:68:FE:43:1E:DC
X509v3 Authority Key Identifier:
keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:c8:8b:1e:eb:0d:04:d7:aa:af:34:3e:92:3a:a1:54:28:
13:94:cb:7c:a2:7a:90:12:d2:0d:f0:18:e4:7a:ad:34:99:21:
b4:b4:2e:24:72:45:d3:b0:09:68:65:6f:18:f3:6f:e9:f6:9e:
2b:a5:9d:c3:18:79:ec:51:75:c9:4b:09:91:68:4a:e8:38:c8:
7e:3a:d2:e1:be:7b:90:e7:33:69:c5:87:b5:33:32:55:37:8a:
93:f4:50:b4:40:c0:0b:84:21:4f:5d:f8:17:6f:2e:d7:ea:a8:
1a:73:ef:fc:4b:ac:08:6f:ed:ac:a1:1e:77:a8:68:05:8a:19:
c2:47:2e:e4:3d:15:05:51:94:68:43:87:7a:f6:eb:67:20:cd:
56:38:67:2f:5c:44:43:1a:59:86:f4:74:88:60:50:30:67:55:
df:ff:a8:1c:95:06:d9:dc:3e:df:5a:55:87:e4:36:74:5e:23:
f8:4c:dc:ca:58:35:28:03:86:8f:46:87:ad:19:57:22:65:d4:
b3:4b:1e:3b:aa:a2:a1:fd:4e:0c:c9:9b:5e:85:7f:06:0a:3c:
6b:cc:72:49:04:93:bf:23:6d:2c:6d:8b:a6:d0:84:f4:a7:83:
e3:11:8d:ba:1a:28:95:e0:0c:64:8b:52:7c:67:1e:ca:89:ec:
53:31:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:01 2025 by rpki-client