Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: Cdn0vQYyOXw9L6oGA6I0IZX5GCjumbwiSttugeKnHaE=
Subject key identifier: AE:DA:FE:39:FF:CA:EB:76:60:DD:6A:CE:8E:8C:2C:6D:08:65:CC:E2
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 0194BC04B1B54EC11E2462EEFA387F0909BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: F6
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: ygmKMq10P730vABszOM1H5spqHa0WlRyl3paxrahY9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:b5:4e:c1:1e:24:62:ee:fa:38:7f:09:09:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=aedafe39ffcaeb7660dd6ace8e8c2c6d0865cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:6c:f8:9e:62:b2:a6:a3:09:1a:8c:e4:41:
35:72:3d:fd:17:5f:29:7d:3f:11:48:d4:d5:50:97:
30:30:74:04:67:b1:c0:0a:c0:35:ab:7d:37:f0:e8:
e8:15:7a:9d:7e:0a:21:28:25:38:19:54:77:21:4f:
75:12:9a:e4:7f:fb:cc:37:1b:ff:04:ce:e5:92:f5:
e7:0a:67:f2:3d:a0:54:dc:c3:f0:e1:aa:2a:72:7d:
5e:51:9e:82:11:67:1b:94:96:69:6c:7b:78:81:e8:
1d:bf:7c:cd:0b:96:a8:52:9c:a0:98:8f:e2:25:0c:
99:44:28:28:77:a4:f5:79:23:ac:88:ec:d6:3b:56:
e5:34:b1:2c:04:b9:64:d5:11:ab:ec:91:bd:9a:86:
0f:67:2f:e9:ae:93:86:df:06:68:5c:c3:38:85:3a:
b9:0d:20:cb:d0:67:80:41:ac:8b:85:58:bf:69:6c:
56:78:f1:fb:29:e3:3a:c6:4c:2b:cc:67:c4:7c:97:
68:ae:88:13:dd:58:2f:fb:11:d5:2f:d4:00:e1:86:
49:20:91:9f:60:0a:64:54:c7:a7:11:e0:73:bf:3a:
d4:7c:92:73:98:81:fb:90:ac:7a:94:68:f5:f7:a7:
5f:c6:cd:00:38:01:8c:97:64:1a:07:60:c2:e2:8b:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DA:FE:39:FF:CA:EB:76:60:DD:6A:CE:8E:8C:2C:6D:08:65:CC:E2
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:a7:80:c9:b1:69:b8:29:b8:4e:af:98:06:49:ca:57:77:
b5:78:c0:a6:8d:3c:84:c4:fd:83:88:29:95:dd:d1:6f:ec:15:
b4:03:e4:27:dc:3f:0b:c8:17:1f:a1:58:72:53:fe:c8:aa:0f:
07:9c:e1:a4:ae:a1:2f:e8:76:70:26:2f:1b:c1:76:01:b9:05:
67:5a:fe:27:13:1b:ba:4e:24:c3:ad:48:b1:14:75:62:31:94:
d7:33:e5:f3:cc:cb:f0:f7:1c:a7:d4:55:c3:d1:b6:b4:9e:af:
a1:93:1f:7a:26:d7:4c:9c:e8:4f:b5:98:e0:04:e1:f4:f5:4c:
60:5e:00:39:78:28:c9:11:98:10:38:97:a7:1d:60:cf:72:97:
5f:07:79:38:9f:95:4b:7d:ce:5f:7c:de:54:21:fb:59:37:ba:
e5:d0:fe:bc:b8:c5:c6:39:87:3c:8d:35:a1:ec:41:32:9f:1d:
b1:30:ac:bc:9d:99:8f:87:bd:99:71:21:38:36:e0:1f:b4:25:
a7:ac:0a:c6:c9:c8:8c:d2:9e:5a:fc:25:b2:f7:f4:1c:83:cd:
68:2c:ba:8f:6a:05:b0:7f:49:9b:d7:7c:41:cf:fb:a7:b7:9d:
5f:0b:0a:ed:a7:22:d4:85:b6:ba:f7:8d:e8:15:57:11:16:1a:
eb:28:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:47 2025 by rpki-client