Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
File: KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft (raw, json)
Hash identifier: ft4189LpR7LrFINOJA83qXkmzTggci2RACntGeLacHM=
Subject key identifier: F8:49:37:A6:DD:BE:F0:41:F1:A5:CD:CB:4C:8F:2C:ED:A7:99:B5:A5
Authority key identifier: 29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
Certificate issuer: /CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Certificate serial: 0194BBCECE5A7BEF6B952C246EE70D8B3334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl (hash: IlS8gi3xRb2wh6pCiAnxfiCeehsuMUtGvMe6XWQGI8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ce:5a:7b:ef:6b:95:2c:24:6e:e7:0d:8b:33:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=f84937a6ddbef041f1a5cdcb4c8f2ceda799b5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:d7:3f:f9:f5:90:e5:94:5b:3f:9f:06:44:
9f:d9:2d:a3:19:97:1b:53:df:8d:48:c7:97:9a:4b:
01:cf:57:71:11:9b:c3:23:43:67:86:0f:cc:51:4e:
e0:fa:6f:56:73:85:d8:59:aa:f2:4a:2b:86:3a:7c:
84:4f:cd:11:8e:04:6f:fc:01:33:a7:35:02:b2:77:
30:b5:fc:d1:ee:cf:bb:dd:72:e9:5f:9c:13:01:7d:
0c:49:d0:fc:f2:93:7e:83:b4:d9:14:0b:52:64:2b:
9c:5c:b3:10:e8:39:53:85:cf:16:74:be:7a:96:3a:
ef:4b:a4:81:35:57:7d:9e:bd:ef:fc:79:2d:b3:c2:
88:a7:e2:11:69:1d:2a:7f:62:ec:fd:59:df:72:ec:
b1:26:fb:5a:26:52:71:49:ee:c2:23:dc:8e:80:24:
03:8c:76:01:21:06:31:41:38:e1:01:0b:0c:40:46:
b0:ed:81:e0:3a:1f:ea:b4:a1:3f:11:f0:d5:fb:aa:
92:f2:51:db:21:61:80:e2:9f:0f:a9:19:24:df:d9:
4f:eb:12:33:1a:45:92:d0:17:35:f2:49:e7:53:af:
c0:47:7d:ae:02:8f:09:87:13:b7:77:1d:84:8c:b6:
86:4a:be:da:f7:91:be:eb:03:b1:59:56:83:52:3b:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:49:37:A6:DD:BE:F0:41:F1:A5:CD:CB:4C:8F:2C:ED:A7:99:B5:A5
X509v3 Authority Key Identifier:
keyid:29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bf:25:71:59:df:27:a2:3c:d1:90:78:dc:08:7c:d2:21:0d:
c9:6d:95:a0:f3:6a:ac:5d:20:57:72:99:c1:fc:af:ca:87:12:
4d:6d:e8:86:df:49:51:71:04:a6:31:a1:e1:df:46:26:bb:9d:
90:d3:19:8d:4e:f3:a1:79:72:ee:28:fa:b1:a0:91:53:84:8b:
59:44:bc:7f:2e:b3:c4:2e:9c:a2:3b:5b:3b:46:2a:18:7a:e9:
6c:80:22:0b:d2:22:c2:c2:b5:23:ff:34:7b:c7:10:00:cb:25:
cb:69:3c:14:d5:16:33:11:88:ec:66:93:0e:31:e1:30:46:ba:
e7:73:3c:59:34:20:4a:f4:c8:c9:30:12:b0:cb:70:fb:3e:47:
de:28:c8:ca:8b:81:1e:28:85:74:17:05:0d:fe:cb:9c:d1:ba:
f7:05:e3:77:86:85:38:85:cd:02:48:3b:a5:9f:2d:91:c8:7c:
a6:97:dd:b9:46:fd:77:46:48:09:31:b9:a6:ca:74:59:45:07:
3f:40:29:6e:df:2a:f9:da:57:3a:c9:c4:f1:bf:8f:ee:32:cd:
4c:1b:8e:df:7e:2c:a1:01:d8:26:ba:cd:48:35:ef:99:06:c7:
de:b0:cd:83:ff:a4:37:41:04:b6:44:45:e6:32:92:4e:b1:3b:
f2:c2:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:27 2025 by rpki-client